How are bank details and PANs protected?

Vendor bank details and employees' PAN and bank details are stored encrypted and shown masked. Only the roles allowed to see them can reveal them, each reveal is logged, and vendor bank changes wait out a cooling-off period with a chance to stop them.