{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"billtrust","name":"billtrust","domain":"billtrust.com","category":"Finance and accounting","one_liner":"Billtrust is the only B2B Cash Generation Platform that converts earned revenue into cash you can predict, defend, and","trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/billtrust/security","last_verified_at":"2026-09-17T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"pci-dss","framework_name":"PCI DSS","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Visa Global Registry of Service Providers as of 17 Sep 2026.","kind":"attestation","status_text":"Listed on the Visa Global Registry as PCI DSS validated through 2027-03-31","issued_at":"2010-03-30","expires_at":"2027-03-31","period_start":null,"period_end":null,"auditor":"Protiviti","impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"visa_grsp","url":"https://certreports.com/vendors/billtrust/pci-dss","evidence":[{"source_type":"registry","source_name":"Visa Global Registry of Service Providers","url":"https://www.visa.com/splisting/","fetched_at":"2026-09-17 15:57:15.438811+00","content_hash":"213ba611e00b260f3d798de650834d72c1c2d8087e3d512e3c604d85af2de0c7","wayback_url":null,"quote":"Billtrust: PCI DSS, assessor Protiviti, valid through 2027-03-31","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 17 Sep 2026.","kind":"listing","status_text":"Active: SW-US Certification, EU-US Certification, UK Extension Certification","issued_at":"2021-03-30","expires_at":"2026-09-26","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/billtrust/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/4834","fetched_at":"2026-09-17 15:48:41.056327+00","content_hash":"94e3e9cb28557624caab6732730dc8a0eb3a0f80501924278fa0a3b66d6c4ad8","wayback_url":null,"quote":"Factors Systems LLC dba Billtrust: Active: SW-US Certification, EU-US Certification, UK Extension Certification","confidence":1}]}],"brief":{"summary":"As of 2026-09-17, Billtrust is listed in the Visa Global Registry as PCI DSS validated, with validation shown through 2027-03-31 and an original listing date of 2010-03-30. As of 2026-09-17, Billtrust is listed in the EU-US Data Privacy Framework registry as active for the SW-US Certification, EU-US Certification, and UK Extension Certification, with an expiration date of 2026-09-26. No public evidence found for SOC 2 as of 2026-09-17. No public evidence found for HIPAA or a BAA offering as of 2026-09-17. No public evidence found regarding subprocessors as of 2026-09-17.","bullets":["PCI DSS: listed in Visa Global Registry, validated through 2027-03-31 (as of 2026-09-17, auditor: Protiviti)","EU-US Data Privacy Framework: listed in DPF registry as active (SW-US, EU-US, UK Extension), expires 2026-09-26 (as of 2026-09-17)","SOC 2 and HIPAA: no public evidence found (as of 2026-09-17)"],"model":"claude-sonnet-5","generated_at":"2026-09-17 17:48:20.303733+00"},"legal_docs":[],"subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-19T08:09:39.446Z"}