Paramant is privacy-first, post-quantum document signing and encrypted transfer, built to stay verifiable and to keep working under EU jurisdiction. You should not have to trust us. You should be able to check.
Two products on one post-quantum core. ParaSend encrypts files in your browser or SDK before they ever leave your device; the relay only holds fixed-size ciphertext in RAM and destroys it on read. ParaSign signs documents with ML-DSA-65 (FIPS 204) and records every signature in a public transparency log.
The design goals stay constant: privacy first, post-quantum by default, and EU-sovereign infrastructure with no US parent and no US CLOUD Act exposure. The aim is not to ask for your trust, but to remove the need for it.
Every claim on this site is meant to be checkable, not taken on faith. Four things make that possible:
ML-DSA-65 (FIPS 204), generated in your browser. The private key never reaches the relay.
Every signature is entered into a public, append-only log. Inspect it on the CT Log.
A signed document verifies without contacting us. Check one on the verify page.
The relay is source-available. Read it on GitHub and run it yourself.
Post-quantum, zero-knowledge. Not eIDAS-qualified. A ParaSign signature is a Simple Electronic Signature (SES): an ML-DSA-65 cryptographic attestation produced in your browser. It is not a notarised legal signature under eIDAS or any qualified-trust regime (QES). We state exactly what it is and what it is not.
Paramant is a product of Paramantis Solutions B.V. in Harderwijk, the Netherlands, founded by Mick Beer, privacy and security researcher. Paramantis Solutions B.V. is the contracting and responsible party; the founder is the origin of the work, not the service itself.
That background shapes the choices: post-quantum signatures (ML-DSA-65), a public transparency log, offline-verifiable documents, and source code you can inspect yourself. You do not have to take us at our word, you can verify it. The code is source-available and the transparency log is public: the product stands apart from the person and stays checkable.
We publish a machine-readable security.txt (RFC 9116) and a full disclosure policy. Reports reach us at privacy@paramant.app, in Dutch or English.