Data inventory
Where personal data lives, who uses it and where it is transferred.
Data protection
Law 81 Compliance
We help companies in Panama comply with Law 81 of 2019 and Executive Decree 285 of 2021: personal data inventory, technical controls, incident management and evidence ready for ANTAI.
The challenge
The problem we solve
Law 81 has been in force since March 2021, and Decree 285 turned good practices into verifiable obligations: encryption, documented backups, incident management and a data protection officer. Many companies have the policy written down but don't know where their personal data lives, who accesses it or what evidence they would show if ANTAI asked.
What we do
What we run for you
Technical controls
Encryption, least-privilege access, labels and data loss prevention.
Incident management
Detection, response and notification procedure with clear deadlines.
Evidence and records
Processing records and organized evidence for audits and ANTAI.
How we operate
A service, not a project that ends.
Assessment
We map your real risks, gaps and priorities.
Service design
A modular model tailored to your operation.
24/7 operation
Continuous detection, response and reporting.
Continuous improvement
Stronger every month, with metrics in plain sight.
Results
What changes when we step in
- A real map of your personal data
- Prioritized gaps with a plan to close them
- Evidence ready before anyone asks
FAQ
What clients usually ask
What does Panama's Law 81 of 2019 require from companies?
That personal data is processed with consent, a clear purpose and security measures, that data subjects' rights are respected, and that transfers outside the country are controlled. Executive Decree 285 of 2021 regulates it and details the technical obligations.
Who enforces Law 81 in Panama?
The National Authority for Transparency and Access to Information (ANTAI), which handles complaints from data subjects and can sanction infringements according to their severity.
Do you replace our legal counsel?
No. We handle the technical and operational side: inventory, controls, incidents and evidence. We work alongside your legal counsel, who defines the legal bases and reviews notices and contracts.
Does Law 81 apply if my data is in the cloud outside Panama?
Yes. International transfers have their own rules, and using a cloud provider with data centers in another country is a transfer. You need to show your own controls, not just the provider's certifications.
More services
Explore other services
AI Adoption
From use case to capability in production, with governance and control.
View serviceSOC & MDR 24/7
Continuous monitoring, managed detection and response.
View serviceVulnerability management · ASPM
We discover, prioritize by risk and remediate.
View serviceShall we talk about your case?
Book an assessment, no commitment. We start by understanding your challenge, not by selling a brand.