Sign and send documents so that only you and the person you send them to can read them, and so that anyone can check later that the document is genuine and unchanged. The servers stand in Germany, under EU law.
For small offices that sign and send confidential papers, and for the person who has to check a supplier before it goes near client files.
Two products on one post-quantum core. ParaSend encrypts files in your browser or SDK before they ever leave your device; the relay only holds fixed-size ciphertext in RAM and destroys it after its last read. ParaSign signs documents with ML-DSA-65 (FIPS 204) and records every signature in a public transparency log.
The design goals stay constant: privacy first, post-quantum by default, and EU-sovereign infrastructure with no US parent and no US CLOUD Act exposure. The aim is not to ask for your trust, but to remove the need for it.
Paramant is a product of Paramantis Solutions B.V. in Harderwijk, the Netherlands, founded by Mick Beer, privacy and security researcher. Paramantis Solutions B.V. is the contracting and responsible party; the founder is the origin of the work, not the service itself.
The Community plan is his way of giving something back to society; the business plans pay for it. That is the whole arrangement, and it is why the Community plan is not a trial and has no end date.
That background shapes the choices: post-quantum signatures (ML-DSA-65), a public transparency log, offline-verifiable documents, and source code you can inspect yourself. You do not have to take us at our word, you can verify it. The code is source-available and the transparency log is public: the product stands apart from the person and stays checkable.
ParaSign Community. €0, forever. 2 signatures a month, unlimited receiving, full post-quantum crypto, public verification log. No card required.
ParaSend Community. €0, forever. AES-256-GCM with a browser-generated key, 1 hour link expiry, burn on first read. No card required.
ParaSign Pro adds volume and API access. ParaSign Business adds named support and an exportable audit log. ParaSign Enterprise adds a dedicated relay instance, an SLA and a self-hosting licence.
ParaSend Pro. 24 hour link expiry, up to 10 reads per link through the API, up to 50 registered devices, send history and webhooks. ParaSend Enterprise adds a dedicated relay and an SLA of 99.95%.
Every plan gets the same encryption, the same post-quantum signatures and the same public proof log. Pay for volume, never for security. And pay per organisation, not per user.
Every claim on this site is meant to be checkable, not taken on faith. Four things make that possible:
ML-DSA-65 (FIPS 204), generated in your browser. The private key never reaches the relay.
Every signature is entered into a public, append-only log. Inspect it on the CT Log.
A signed document verifies without contacting us. Check one on the verify page.
The relay is source-available. Read it on GitHub and run it yourself.
Post-quantum, zero-knowledge. Not eIDAS-qualified. A ParaSign signature is a Simple Electronic Signature (SES): an ML-DSA-65 cryptographic attestation produced in your browser. It is not a notarised legal signature under eIDAS or any qualified-trust regime (QES). We state exactly what it is and what it is not.
We publish a machine-readable security.txt (RFC 9116) and a full disclosure policy. Reports reach us at privacy@paramant.app, in Dutch or English.