Panorays is a third-party cyber risk management platform. Organisations use it to assess the security posture of their suppliers and other external parties, monitor their external attack surface, send and review security questionnaires, track remediation and report on compliance. The platform is delivered as software as a service from the vendor's cloud environment. According to Panorays, it holds ISO/IEC 27001, SOC 2 Type II and ISO/IEC 42001 certifications.
On its own website Panorays gives Panorays Inc. in New York as its address. Its privacy policy defines "Panorays" as Panorays Ltd. and its subsidiaries and affiliates. The infrastructure runs on Google Cloud with servers in Belgium, and on Google Workspace with servers in the United States. According to the policy, transfers outside the EU rely on adequacy decisions or standard contractual clauses. For a European organisation this means part of the processing takes place in the EU, while the company itself is based in the US. Information about suppliers can be sensitive, so it is worth confirming exactly where it is stored.