generated: '2026-07-20'
method: searched
source: https://parsable.com/compliance/
standards:
  - id: soc2-type-ii
    conforms: true
    evidence: >-
      SOC 2 Type II report per AICPA Trust Services Criteria (A-LIGN badge on parsable.com), re-certified
      annually; report available on written request under NDA (infosec@parsable.com).
    docs: https://parsable.com/compliance/
  - id: gdpr
    conforms: true
    evidence: >-
      Parsable operates as a data processor on behalf of customers and states it aims to comply with
      applicable EU data-protection law; contact privacy@parsable.com.
    docs: https://parsable.com/compliance/
  - id: iso-27001
    conforms: false
    evidence: not referenced on the compliance or security pages
  - id: hipaa
    conforms: false
  - id: oauth2
    conforms: false
    evidence: "API uses a proprietary JWT token header (Authorization: Token), no OAuth2 flows"
  - id: openid-connect
    conforms: false
    evidence: /.well-known/openid-configuration returns 404
  - id: rfc9457-problem-details
    conforms: false
    evidence: API uses a proprietary exception envelope, not application/problem+json
compliance_program:
  published: true
  certifications: [SOC 2 Type II]
  regulations: [GDPR]
  contact: infosec@parsable.com
  page: https://parsable.com/compliance/