{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"parahelp","name":"Parahelp","domain":"parahelp.com","category":"AI assistants","one_liner":"Build an AI support agent that securely uses all your tools","trust_center_url":"https://trust.parahelp.com/","security_page_url":null,"url":"https://certreports.com/vendors/parahelp/security","last_verified_at":"2026-09-21T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"soc-2","framework_name":"SOC 2","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 2 Type II report on its trust centre (Vanta) as of 21 Sep 2026.","kind":null,"status_text":"Vendor states SOC 2 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-21","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/parahelp/soc-2","evidence":[{"source_type":"trust_center","source_name":"Parahelp trust centre (Vanta)","url":"https://trust.parahelp.com/","fetched_at":"2026-09-21 22:47:21.04554+00","content_hash":"c42c4d9d5d1d5a5a0fcdd4210461ac8f632664fa988d1b8f2f57c7e1427eecbe","wayback_url":null,"quote":"SOC 2","confidence":1},{"source_type":"trust_center","source_name":"Parahelp trust centre (Vanta)","url":"https://trust.parahelp.com/","fetched_at":"2026-09-18 23:24:13.801814+00","content_hash":"42fb92e0b6794a2541fcfd1bcc92a515e511238c6dbc8b9dcbc95dd61fb3f3bd","wayback_url":null,"quote":"SOC 2","confidence":1}]},{"framework":"gdpr","framework_name":"GDPR","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a data processing agreement on its trust centre (Vanta) as of 21 Sep 2026.","kind":null,"status_text":"Vendor states GDPR on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-21","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/parahelp/gdpr","evidence":[{"source_type":"trust_center","source_name":"Parahelp trust centre (Vanta)","url":"https://trust.parahelp.com/","fetched_at":"2026-09-21 22:47:21.04554+00","content_hash":"c42c4d9d5d1d5a5a0fcdd4210461ac8f632664fa988d1b8f2f57c7e1427eecbe","wayback_url":null,"quote":"GDPR","confidence":1},{"source_type":"trust_center","source_name":"Parahelp trust centre (Vanta)","url":"https://trust.parahelp.com/","fetched_at":"2026-09-18 23:24:13.801814+00","content_hash":"42fb92e0b6794a2541fcfd1bcc92a515e511238c6dbc8b9dcbc95dd61fb3f3bd","wayback_url":null,"quote":"GDPR","confidence":1}]}],"brief":null,"legal_docs":[{"kind":"subprocessors","url":"https://trust.parahelp.com/","availability":"public","detail":"23 subprocessors listed on the trust centre","as_of":"2026-09-21"},{"kind":"ai_policy","url":"https://trust.parahelp.com/","availability":"on_request","detail":"Listed on the trust centre as \"AI Model Governance and Risk Management Policy\"","as_of":"2026-09-21"}],"documents":[{"type":"ai_policy","title":"AI Model Governance and Risk Management Policy","availability":"on_request","source_url":"https://trust.parahelp.com/","last_seen":"2026-09-21"},{"type":"business_continuity","title":"Business Continuity and Disaster Recovery","availability":"on_request","source_url":"https://trust.parahelp.com/","last_seen":"2026-09-21"},{"type":"incident_response","title":"Breach Notification Policy","availability":"on_request","source_url":"https://trust.parahelp.com/","last_seen":"2026-09-21"},{"type":"incident_response","title":"Incident Response Policy","availability":"on_request","source_url":"https://trust.parahelp.com/","last_seen":"2026-09-21"},{"type":"pentest_report","title":"Penetration test - April 2026","availability":"on_request","source_url":"https://trust.parahelp.com/","last_seen":"2026-09-21"},{"type":"security_policy","title":"Access Control and Termination Policy","availability":"on_request","source_url":"https://trust.parahelp.com/","last_seen":"2026-09-21"},{"type":"security_policy","title":"Chief Information Security Officer (CISO) Policy","availability":"on_request","source_url":"https://trust.parahelp.com/","last_seen":"2026-09-21"},{"type":"security_policy","title":"Data Protection and Encryption Policy","availability":"on_request","source_url":"https://trust.parahelp.com/","last_seen":"2026-09-21"},{"type":"security_policy","title":"GDPR Information Security Policy","availability":"on_request","source_url":"https://trust.parahelp.com/","last_seen":"2026-09-21"},{"type":"security_policy","title":"Information Security Policy","availability":"on_request","source_url":"https://trust.parahelp.com/","last_seen":"2026-09-21"},{"type":"security_policy","title":"Network Security Policy","availability":"on_request","source_url":"https://trust.parahelp.com/","last_seen":"2026-09-21"},{"type":"security_policy","title":"Personnel Security Policy","availability":"on_request","source_url":"https://trust.parahelp.com/","last_seen":"2026-09-21"},{"type":"soc2_report","title":"SOC 2 Type I Report","availability":"on_request","source_url":"https://trust.parahelp.com/","last_seen":"2026-09-21"},{"type":"soc2_report","title":"SOC 2 Type II Report","availability":"on_request","source_url":"https://trust.parahelp.com/","last_seen":"2026-09-21"}],"statements":[],"security_profile":{"iso42001":null,"trains_on_customer_data":null,"data_residency_regions":[],"pen_test_cadence":"annual","as_of":"2026-09-21"},"regulations_url":"https://certreports.com/api/v1/vendors/parahelp/regulations/{regulation}","subprocessors":[{"name":"Anthropic","domain":"anthropic.com","purpose":"AI model inference","location":"US","vendor_url":"https://certreports.com/vendors/anthropic/security"},{"name":"Baseten","domain":"baseten.co","purpose":"AI model inference","location":"US","vendor_url":null},{"name":"Braintrust","domain":"braintrust.dev","purpose":"Model evaluation and experimentation","location":"US","vendor_url":null},{"name":"Cloudflare","domain":"cloudflare.com","purpose":"Fallback container hosting provider ","location":"US","vendor_url":"https://certreports.com/vendors/cloudflare/security"},{"name":"Cohere","domain":"cohere.com","purpose":"Embedding + reranking backend for knowledge/ticket search relevance","location":"US","vendor_url":"https://certreports.com/vendors/cohere/security"},{"name":"Github","domain":"github.com","purpose":"Source code hosting and CI/CD","location":"US","vendor_url":"https://certreports.com/vendors/github/security"},{"name":"Google Cloud (Gemini)","domain":"google.com","purpose":"AI model inference","location":"US","vendor_url":"https://certreports.com/vendors/google/security"},{"name":"HashiCorp","domain":"hashicorp.com","purpose":"Secrets manager","location":"US","vendor_url":"https://certreports.com/vendors/hashicorp/security"},{"name":"Modal","domain":"modal.com","purpose":"AI infrastructure","location":"US","vendor_url":null},{"name":"OpenAI","domain":"openai.com","purpose":"AI model inference","location":"US","vendor_url":"https://certreports.com/vendors/openai/security"},{"name":"OpenRouter","domain":"openrouter.ai","purpose":"Unified API access to third-party AI models","location":"US","vendor_url":null},{"name":"Pierre Computer Company","domain":"code.storage","purpose":"Code hosting and version control","location":"US","vendor_url":null},{"name":"PlanetScale","domain":"planetscale.com","purpose":"Transactional SQL database (via Prisma) to store and query core app data","location":"US","vendor_url":"https://certreports.com/vendors/planetscale/security"},{"name":"Railway","domain":"railway.com","purpose":"Host and run deployable services (API, background worker, workflow engine/dashboard, and autoscaler) as infrastructure.","location":"US","vendor_url":"https://certreports.com/vendors/railway/security"},{"name":"Retool","domain":"retool.com","purpose":"Internal administrative tooling","location":"US","vendor_url":"https://certreports.com/vendors/retool/security"},{"name":"Sentry","domain":"sentry.io","purpose":"Error monitoring and logging","location":"US","vendor_url":"https://certreports.com/vendors/sentry/security"},{"name":"Slack","domain":"slack.com","purpose":"Customer support communications","location":"US","vendor_url":"https://certreports.com/vendors/slack-technologies/security"},{"name":"Stripe","domain":"stripe.com","purpose":"Billing and payment processing","location":"EU and US","vendor_url":"https://certreports.com/vendors/stripe/security"},{"name":"Together","domain":"together.ai","purpose":"AI model inference","location":"US","vendor_url":"https://certreports.com/vendors/together-ai/security"},{"name":"TurboPuffer","domain":"turbopuffer.com","purpose":"Vector search infrastructure","location":"US","vendor_url":null},{"name":"Vanta","domain":"vanta.com","purpose":"Security","location":null,"vendor_url":"https://certreports.com/vendors/vanta/security"},{"name":"Vercel","domain":"vercel.com","purpose":"Deploy and host web frontends","location":"US","vendor_url":"https://certreports.com/vendors/vercel/security"},{"name":"WorkOS","domain":"workos.com","purpose":"Authentication and identity management","location":"US","vendor_url":null}],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-11-03T18:56:05.947Z"}