Security and an audit trail for your deployment

Workspace changes made through Pantheon's app API, from editing a record to changing a member's role, are recorded with who made them and when. Security and sign-in events are logged too, and those logs fall under the same seven-year default hold as everything else (see records and retention).

Today the audit trail is reviewed by our team on your request. A customer-visible audit view, and an export of those events to your own security-monitoring system, are built on request.

On a dedicated deployment, the security posture is a setting of your site: which sign-in methods are allowed, whether two-factor sign-in is required, and who may sign up. Settings are checked every time the deployment starts, so they cannot drift quietly from what was agreed. Company sign-in runs through your identity provider (see company sign-in).

Organization data is isolated, encrypted in transit and at rest, and never sold or used to train third-party AI models. Credentials for the accounts your people connect are encrypted by Pantheon before they are stored. Pantheon staff never become owners of your workspace.

Some assurances cannot be built on request because an outside party issues them. Pantheon does not yet hold a SOC 2 report or a published penetration-test report, and we will not imply otherwise. Our current posture is on the security overview, and the detailed security package is shared under NDA.

Standard means it is part of every Pantheon Enterprise deployment today. On request means we build it for your deployment once you ask, and support it from then on.