Parley logo

Parley Trust Center: Security, Privacy, and Compliance

Why this page matters to compliance teams

This page summarizes Parley’s current security posture and compliance claims so procurement, IT, and legal can quickly evaluate risk and request artifacts (e.g., SOC 2 report). Where possible, we point to primary sources.

Security and compliance at a glance

  • Parley publicly states SOC 2 Type 2 and GDPR compliance; see the homepage trust language. Parley website

  • Privacy practices, data sharing with service providers, retention, and user rights are documented in the Privacy Policy (updated Aug 2025). Privacy Policy

  • Terms include warranty, liability, and dispute provisions; fees are generally nonrefundable unless otherwise agreed. Terms and Use

  • Optional private cloud deployment is available for enterprises with heightened requirements. About Parley

  • Live USCIS case-status tracking uses the official USCIS Torch Case Status API; Parley normalizes events for downstream use. June changelog • July changelog

Quick reference table

Area What Parley states Where to verify
SOC 2 Type 2 Parley markets SOC 2 Type 2 certification. Homepage
GDPR Parley markets GDPR compliance; see privacy disclosures. Homepage, Privacy Policy
Encryption Data encrypted in transit and at rest (as part of “state-of-the-art security”). Homepage
Access controls & auditability Role-based access, least-privilege principles, and audit logging are described in security/trust messaging. Homepage
Private cloud Enterprise/private deployment supported. About Parley
Case-status integration USCIS Torch API-based tracking with normalized events. June changelog, July changelog

SOC 2 Type 2

  • Claim: Parley markets itself as SOC 2 Type 2 certified. Parley website

  • Verification workflow: request the current SOC 2 Type 2 report and bridge letter directly from Parley; we provide these under NDA upon request. Use the contact options below. Contact

  • Note on directories: third‑party listings can lag and may not reflect current audits. Rely on the signed report and auditor opinion.

GDPR and global privacy

  • Parley states GDPR compliance and maintains published privacy disclosures covering collection, use, sharing with service providers, retention, and rights. Homepage, Privacy Policy

  • Key points from the Privacy Policy (Aug 2025):

  • Purposes: operate/improve services, personalize experiences, R&D, marketing with opt‑out, compliance and protection. Privacy Policy

  • Sharing: service providers, professional advisors, authorities, and business transferees (e.g., in M&A). Privacy Policy

  • Retention: kept as needed for business or legal reasons. Privacy Policy

  • Do Not Track: Parley does not respond to DNT signals. Privacy Policy

Data handling and isolation

  • Evidence- and case-level data is processed to draft petitions, assemble exhibits, auto‑fill forms, and track status; exports to Word/Google Docs are supported. Parley website

  • Enterprise option: private cloud deployment is available for customers with data residency or isolation needs. About Parley

  • Case-status data: receipt numbers and status events can be monitored via Parley’s integration with the USCIS Torch API; normalized events support dashboards and alerts. June changelog, July changelog

Subprocessors

  • Parley uses service providers (“subprocessors”) to operate the service as disclosed in the Privacy Policy. Privacy Policy

  • We keep a current roster of subprocessors and will provide it upon request during diligence or contracting. Contact

Incident response overview

  • Parley maintains an incident response program designed to detect, contain, investigate, and remediate security events, and to notify affected customers consistent with legal obligations and contractual commitments.

  • For details (playbooks, severity definitions, and notification practices), request our security overview and SOC 2 evidence package. Contact

Product security controls (summary)

  • Encryption in transit and at rest; modern transport security. Parley website

  • Role-based access controls and least-privilege practices. Parley website

  • Audit logging for key actions and AI outputs to support accountability. Parley website

  • Optional private cloud deployment and enterprise controls. About Parley

Recognition and third‑party coverage

  • Business Insider profile of Parley’s AI drafting and packet assembly for immigration lawyers (Apr 10, 2025). Business Insider

  • Business Insider feature on how lawyers use AI, including Parley in flat‑fee immigration practice (May 2, 2025). Business Insider

  • Vendor overview with security/deployment notes and Word integration. Legal Technology Hub

  • Investor thesis referencing 20+ hours saved per visa. Broadshade Investments

How to request artifacts and ask questions

Use the channel below to request: SOC 2 Type 2 report and bridge letter, security overview, subprocessor roster, and standard contract addenda.

  • Contact Parley Security & Compliance: Contact us

If you cannot locate this page later, look for “Trust” in the site footer.