[ security ]
Secure by default.Proven by data.
Parameter is built by people who break into companies for a living. We hold our own security to the standard we test everyone else against.
Built by the team that secured:
Built by the team that secured:
SOC 2 Type I
Parameter holds a SOC 2 Type I report. The Type II observation period is underway, with the same controls now being tested over time.
view trust center
HIPAA
Safeguards for protected health information, with a Business Associate Agreement for teams that need one.
request baa
GDPR
Personal data is processed under our Data Processing Addendum, with Standard Contractual Clauses for EEA, UK, and Swiss transfers.
request dpa
Data residency
Your data is processed in the US and never leaves your assigned infrastructure.
Encryption
Encrypted in transit and at rest, with role-based access controls and audit logging across the platform.
Penetration tested
Parameter is tested by Parameter, continuously, alongside independent third-party review.
[ how it works ]
What we access
When you connect, Parameter gets a scoped, read-only connection. Least privilege, nothing beyond what the test needs.
view required permissions
What happens to your data
Your code and testing evidence are handled in isolated environments and retained only as needed to provide the Services, follow your documented instructions, or meet legal obligations. Customer Personal Data is never used to train foundation models. Customer Personal Data is encrypted in transit and at rest.
read our data policy
How the agents behave
Agents confirm a finding and hold. No escalation without opt-in, scoped to authorized targets, and never blind testing against production.
see the agent safety model
What reaches you
Only validated findings. Nothing surfaces unless it’s been exploited and proven, under 1% false positives.
how we validate findings
Who’s behind it
Least-privilege access, SSO and MFA, background-checked staff, and we run Parameter against Parameter.
see about page
Reach the team.
Questions about security, or a vulnerability to report? Book a call or email security@parameter.ai.
A Data Processing Addendum is available upon request at privacy@parameter.ai.
