Security at Paragon

SOC 2 Type II Report

Network and Data Flow Diagrams

System Requirements and Features

Application and System Infrastructure Components

Access Control and Termination Policy

Acceptable Use Policy

Vulnerability and Patch Management Policy

Security Incident Response Plan Policy

Business Continuity and Disaster Recovery Plan Policy

Data Retention and Disposal Policy

Configuration and Asset Management Policy

Performance Review Policy

Internal Control Policy

Data Processing Addendum

EU Standard Contractual Clauses and UK Addendum

Data Transfer Impact Assessment (TIA)

Code of Conduct Policy

Change Management Policy

Data Classification Policy

Vendor Management Policy

Secure Development Policy

Risk Assessment and Treatment Policy

Physical Security Policy

Network Security Policy

Information Security Policy

Encryption and Key Management Policy

SOC 2 Type II Report