Skip to content

Security

No customer keys until the gateway is hardened.

Parezen will not accept a provider key until the gateway has encryption in transit, encrypted key storage and rate limits. There is no SOC 2 or ISO claim.

Planned
No certification badges
Parezen does not claim SOC 2, ISO 27001 or any other certification. This page describes the design, not an audit report. The gateway is not deployed. This repository does not call a model provider, does not read provider usage fields, does not terminate TLS, does not encrypt stored keys and does not rate-limit requests.

Metadata by default

Planned. Cost analytics are designed to need tokens, model, cost and latency. Inference is designed to include that observability and OTLP export. Full prompt and response capture is a paid extra in the plan and is off by default. Turning it on is designed to be written to the audit log. None of that runs in production.

Self-host when you need it

Planned. The gateway is designed to run in your network. You would bring Postgres 15 or newer (16 recommended). Parezen does not ship a database. Provider keys are designed to stay in your secrets. Encrypted key storage is not built, and this site is not yet accepting customer keys. A connected install is designed to send signed monthly spend and savings totals with its licence check-in. An offline install is designed to keep the detail on your network. Neither install is published.

Your licence never blocks your traffic

Planned. If a licence lapses, the design is 30 days of grace with alerts, then pass-through: requests would be forwarded unchanged, while optimisation and paid features pause. Data export is designed to keep working. Billing is designed never to return an error on production traffic. Hosted Free is a published price with no card and no licence key. The hosted gateway is not live. The open-source gateway is designed to be free with no key. It is not published.

If the gateway cannot be reached

Planned. If Parezen cannot be reached, your app is designed to retry directly with your own provider key. That path would not be routed, recorded or budget-checked. A 4xx, including a budget hard stop, must not take that path. See the fail-open docs.

Baseline count

A saving would be the gap between your own baseline and your spend on the same work, and checking it against a provider bill is Planned.

Security contact

Write to [email protected]. The same address covers privacy, legal, support and sales.