Security
Contractor financials, builder relationships, and compliance documents are sensitive. Here is how the platform is built to protect them.
Who operates the platform
Panther Platforms is operated by Panther Platforms LLC, a Georgia limited liability company, which is responsible for the controls described below.
Tenant isolation
Every organization's data is isolated at the database layer with row-level security, so one company can never read another's records — enforced by the database, not just the application.
Least-privilege access
Confidential financials (margins, profitability) sit behind an explicit permission most roles never receive. Access is scoped by role and verified server-side on every request.
Encryption in transit
All traffic is served over HTTPS. Authentication uses signed, httpOnly session cookies.
Audit logging
Sensitive changes — entitlements, team membership, company settings — are written to an append-only audit log.
Responsible disclosure
Found something? Email hello@pantherplatforms.io and we'll respond quickly. Please give us a reasonable chance to fix an issue before disclosing it publicly. We run an automated security regression suite before every release.
This page describes current engineering practice; it is not a certification or a contractual commitment. Formal attestations (e.g. SOC 2) are a post-launch item.