Paragon

Security and trust center evidence

The embedded integration platform for SaaS apps.

useparagon.com Developer toolsLast verified 30 Sep 2026

Request the report Are you Paragon?

HIPAAVendor-stated

SOC 2Vendor-stated

GDPRVendor-stated

Paragon has 3 vendor-stated rows in the CertReports index, last verified 30 Sep 2026. The strongest row is HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

Paragon states on its trust centre that it displays a HIPAA badge, though BAA availability has not yet been captured, as of 18 Sep 2026. Paragon states on its trust centre that it has a SOC 2 Type II report, as of 18 Sep 2026. Paragon states on its trust centre that it holds GDPR, as of 18 Sep 2026. No public evidence was found for ISO/IEC 27001 or PCI DSS for Paragon as of 18 Sep 2026. No public evidence was found for the EU-US Data Privacy Framework or CSA STAR for Paragon as of 18 Sep 2026.

SOC 2 - vendor states it has a SOC 2 Type II report on its trust centre (as of 18 Sep 2026).
GDPR - vendor states on its trust centre (as of 18 Sep 2026).
HIPAA - vendor displays a badge on its trust centre; BAA availability not yet captured (as of 18 Sep 2026).

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 19 Sep 2026; it is regenerated whenever a row changes.

Among developer tools vendors

0verified rows

Category median 0, across 220 indexed developer tools vendors. Paragon has no registry-verified row yet, like 64 percent of them; its evidence is vendor-stated or reported.

api integrationsembedded integrationsipaasrag ingestionsaas integrations

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for FedRAMP, PCI DSS, ISO 27001, CSA STAR, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Legal artefacts

Subprocessor list

Public · 20 subprocessors listed on the trust centre · as of 30 Sep 2026

Open

Public · as of 30 Sep 2026

Open

Subprocessors (20)

AW
Amazon Web ServicesHosting and data storage (End-User Data + Customer Data) · Multiple Regions
AtlassianProject management (Customer Data) · USA
CloudflareDNS and DDOS mitigation (End-User Data + Customer Data) · USA
dbt LabsBI and usage data transformation (Customer Metadata) · USA
FathomVideo call recording (Customer Data) · USA
Google AnalyticsUser analytics (Customer Metadata) · USA
Google WorkspaceFile Storage and Email (Customer Data) · USA
HubspotCustomer relationship management (Customer Data) · USA
IntercomCustomer support (Customer Data) · USA
MixpanelPlatform analytics (Customer Data) · USA
NotionInternal knowledge base (Customer Data) · USA
PY
PylonSupport Ticketing (Customer Data) · USA
SalesforceCustomer relationship management (Customer Data) · USA
SegmentPlatform analytics (Anonymized, Non-identifiable End-User Metadata + Customer Metadata) · USA
SendGridAlerts and team management (End-User Data + Customer Data) · USA
SlackCustomer support and team communication (Customer Data) · USA
SnowflakeBI and usage analytics (Customer Data) · USA
StripePayment processing (Customer Data) · USA
VO
VoyageAI embedding services (End User Data) · USA
WO
WorkOSSingle sign on provider for on-premise installations (Customer Data) · USA

Change history

18 Sep 2026First indexed by CertReports3 evidence rows across 3 frameworks entered the index.

Similar vendors with evidence

Related by product tags and the Developer tools category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.