PANTHRA ("we," "us," or "our") is a Canadian cybersecurity company built on the principle that trust starts with how we protect information: our clients', our partners', and our own.
This page outlines our security commitments, how we safeguard data in our operations, and how to report security concerns related to our Website or services.
Our Commitment
Security is not just what we deliver to clients. It is how we operate every day. We apply the same discipline, monitoring, and risk management principles to our internal environment that we recommend to the organizations we serve.
Protecting Client Information
When you engage PANTHRA, we may access or process information related to your systems, accounts, logs, and security posture. We treat this information as confidential and use it only to deliver the services agreed upon in our engagement.
Our practices include:
- Limiting access to client data on a need-to-know basis.
- Using secure communication channels for sensitive information.
- Maintaining confidentiality obligations under our service agreements.
- Retaining client data only as long as required for service delivery or legal obligations.
Internal Security Practices
We maintain administrative, technical, and organizational controls designed to protect our systems and operations, including:
- Identity and access management with strong authentication.
- Monitoring and logging of critical systems.
- Secure configuration and patch management.
- Employee security awareness and acceptable use policies.
- Incident response procedures for internal security events.
Website Security
We take reasonable measures to protect our Website and the information submitted through it, including encryption in transit where supported and safeguards against unauthorized access. For details on how we handle personal information, see our Privacy Policy.
Vulnerability Reporting
If you believe you have discovered a security vulnerability affecting PANTHRA's Website, systems, or services, we encourage responsible disclosure. Please report it to us with enough detail to help us investigate and remediate the issue.
When reporting, please include:
- A description of the vulnerability and its potential impact.
- Steps to reproduce the issue, if applicable.
- Your contact information so we can follow up.
Please do not exploit vulnerabilities beyond what is necessary to demonstrate the issue, and do not access, modify, or delete data that does not belong to you.
No Absolute Guarantee
While we work continuously to strengthen our security posture, no organization can guarantee complete protection against all threats. Our goal is to reduce risk through commercially reasonable practices, ongoing monitoring, and continuous improvement.
Contact
For security-related inquiries or vulnerability reports, please contact:
PANTHRA
Email: contact@panthra.ca