Paramount Commerce security & compliance
An overview of Paramount Commerce's security posture — compliance, penetration testing, subprocessors, and data handling — verified on SOC2C (Listed).
SOC 2 statusSOC 2 Type II · Listed
FrameworksPIPEDA, SOC 2 Type II
Penetration testNot listed
Subprocessors2 listed
HostingAWS, GCP
Trust centerView
Security questions about Paramount Commerce
- Is Paramount Commerce secure?
- Security isn't a single yes/no, but Paramount Commerce is SOC 2 Type II compliant and holds PIPEDA, SOC 2 Type II. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
- Does Paramount Commerce have a bug bounty or vulnerability disclosure program?
- Paramount Commerce hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@paramountcommerce.com or via a /security page.
- Who are Paramount Commerce's subprocessors?
- Paramount Commerce lists 2 subprocessors on its trust center, including Amazon Web Services, GCP. Buyers use this for fourth-party risk review.
- Where does Paramount Commerce host or store data?
- Paramount Commerce hosts on AWS, GCP, and handles Customer personally identifiable information, Employee personally identifiable information, Credit card information, Financial information (e.g., bank account details). Data residency details are on its trust center.
- Where is Paramount Commerce's trust center or security page?
- Paramount Commerce's trust center is at https://trust.paramountcommerce.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.