Singapore – September 11, 2026 -- Parseur, an AI-powered document processing platform serving more than 10,000 businesses globally, has achieved SOC 2 Type II compliance following an independent audit by Constellation GRC, verified through Oneleet.
Audit confirms controls meet AICPA Trust Services Criteria after six-month review
The certification process took approximately six months and verified that Parseur's systems and controls consistently meet the American Institute of CPAs (AICPA) Trust Services Criteria for security, availability, and confidentiality. The report gives enterprise customers processing invoices, contracts, and financial records independently verified assurance over how their data is handled.
Bootstrapped company completes enterprise-grade audit without outside investment
Parseur has operated profitably since 2017 without external funding, processing millions of documents annually for over 10,000 businesses across five continents while competing against larger, venture-backed platforms. Sylvestre Dupont, co-founder and CEO, said much of the groundwork was already in place from GDPR compliance work and day-to-day controls, allowing the company to complete the audit in a few months.
Compliance framework now spans GDPR, CCPA, PDPA and FADP across three continents
Parseur is compliant with EU GDPR, UK GDPR, Swiss FADP, California CCPA, and Singapore PDPA, covering primary data privacy regulations across its markets in Europe, North America, and Asia-Pacific. The platform is EU-hosted, undergoes annual penetration testing by Oneleet, runs continuous automated security monitoring, and maintains a policy of never using customer data to train its AI models.
Oneleet auditor calls Parseur's security controls unusually mature for its size
Kevin Baker of Oneleet said Parseur came in with a mature, well-documented approach to security, adding that the depth of its controls and consistency of practices were surprisingly strong for a bootstrapped team. He identified EU-hosted infrastructure and a no-training policy on customer data as the first criteria enterprises should evaluate in an AI vendor.
SOC 2 Type II becomes a procurement gate for enterprise AI vendors
SOC 2 Type II compliance is increasingly required for enterprise AI vendor approval, particularly in regulated industries where document data includes personally identifiable information, financial records, and legally sensitive content. Parseur's certification removes a procurement barrier for customers in finance, logistics, insurance, and real estate sectors.