{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"checkout","name":"checkout","domain":"checkout.com","category":"Payments","one_liner":"Boost your acceptance rate, cut processing costs, fight fraud, and create extraordinary customer experiences with Checkout.com's payment","trust_center_url":"https://trust.checkout.com/","security_page_url":null,"url":"https://certreports.com/vendors/checkout/security","last_verified_at":"2026-09-17T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"soc-2","framework_name":"SOC 2","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 2 Type II report on its trust centre (Vanta) as of 17 Sep 2026.","kind":"type2","status_text":"Vendor states SOC 2 Type II on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/checkout/soc-2","evidence":[{"source_type":"trust_center","source_name":"checkout trust centre (Vanta)","url":"https://trust.checkout.com/","fetched_at":"2026-09-17 16:28:09.279042+00","content_hash":"4e6e5299d1005d8772dba149ad9b656aab5399c198ef47d8a3b4284d20469bf8","wayback_url":null,"quote":"SOC 2 Type II","confidence":1}]},{"framework":"gdpr","framework_name":"GDPR","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a data processing agreement on its trust centre (Vanta) as of 17 Sep 2026.","kind":null,"status_text":"Vendor states GDPR on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/checkout/gdpr","evidence":[{"source_type":"trust_center","source_name":"checkout trust centre (Vanta)","url":"https://trust.checkout.com/","fetched_at":"2026-09-17 16:28:09.279042+00","content_hash":"4e6e5299d1005d8772dba149ad9b656aab5399c198ef47d8a3b4284d20469bf8","wayback_url":null,"quote":"GDPR","confidence":1}]},{"framework":"pci-dss","framework_name":"PCI DSS","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Visa Global Registry of Service Providers as of 17 Sep 2026.","kind":"attestation","status_text":"Listed on the Visa Global Registry as PCI DSS validated through 2027-07-31","issued_at":"2021-09-06","expires_at":"2027-07-31","period_start":null,"period_end":null,"auditor":"Foregenix Ltd.","impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"visa_grsp","url":"https://certreports.com/vendors/checkout/pci-dss","evidence":[{"source_type":"registry","source_name":"Visa Global Registry of Service Providers","url":"https://www.visa.com/splisting/","fetched_at":"2026-09-17 15:57:24.450601+00","content_hash":"9ac6f141ec6fa30444f551241c2c7b1c865727d407a4dbf1a05a5b2b24e4d548","wayback_url":null,"quote":"Checkout KSA for Communication and Information Technology Company: PCI DSS, assessor Foregenix Ltd., valid through 2027-07-31","confidence":1}]},{"framework":"iso-27001","framework_name":"ISO/IEC 27001","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27001 certificate on its trust centre (Vanta) as of 17 Sep 2026.","kind":null,"status_text":"Vendor states ISO 27001:2022 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/checkout/iso-27001","evidence":[{"source_type":"trust_center","source_name":"checkout trust centre (Vanta)","url":"https://trust.checkout.com/","fetched_at":"2026-09-17 16:28:09.279042+00","content_hash":"4e6e5299d1005d8772dba149ad9b656aab5399c198ef47d8a3b4284d20469bf8","wayback_url":null,"quote":"ISO 27001:2022","confidence":1}]},{"framework":"cyber-essentials","framework_name":"Cyber Essentials","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an Cyber Essentials certificate on its trust centre (Vanta) as of 17 Sep 2026.","kind":null,"status_text":"Vendor states UK Cyber Essentials on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/checkout/cyber-essentials","evidence":[{"source_type":"trust_center","source_name":"checkout trust centre (Vanta)","url":"https://trust.checkout.com/","fetched_at":"2026-09-17 16:28:09.279042+00","content_hash":"4e6e5299d1005d8772dba149ad9b656aab5399c198ef47d8a3b4284d20469bf8","wayback_url":null,"quote":"UK Cyber Essentials","confidence":1}]},{"framework":"soc-1","framework_name":"SOC 1","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 1 Type II report on its trust centre (Vanta) as of 17 Sep 2026.","kind":"type2","status_text":"Vendor states SOC 1 Type II on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/checkout/security","evidence":[{"source_type":"trust_center","source_name":"checkout trust centre (Vanta)","url":"https://trust.checkout.com/","fetched_at":"2026-09-17 16:28:09.279042+00","content_hash":"4e6e5299d1005d8772dba149ad9b656aab5399c198ef47d8a3b4284d20469bf8","wayback_url":null,"quote":"SOC 1 Type II","confidence":1}]},{"framework":"ccpa","framework_name":"CCPA / CPRA","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an CCPA / CPRA privacy notice on its trust centre (Vanta) as of 17 Sep 2026.","kind":null,"status_text":"Vendor states CCPA on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/checkout/security","evidence":[{"source_type":"trust_center","source_name":"checkout trust centre (Vanta)","url":"https://trust.checkout.com/","fetched_at":"2026-09-17 16:28:09.279042+00","content_hash":"4e6e5299d1005d8772dba149ad9b656aab5399c198ef47d8a3b4284d20469bf8","wayback_url":null,"quote":"CCPA","confidence":1}]}],"brief":{"summary":"For SOC 2, checkout.com states on its trust centre that it holds a SOC 2 Type II report as of 2026-09-17. For SOC 1, checkout.com states on its trust centre that it holds a SOC 1 Type II report as of 2026-09-17. For PCI DSS, checkout.com is listed in the Visa Global Registry as validated through 2027-07-31, with the listing confirmed as of 2026-09-17. For ISO/IEC 27001, checkout.com states on its trust centre that it holds ISO 27001:2022 certification as of 2026-09-17. For GDPR, CCPA / CPRA, and Cyber Essentials, checkout.com states on its trust centre that it complies with these frameworks as of 2026-09-17; no public evidence found for a HIPAA BAA as of 2026-09-17.","bullets":["PCI DSS: listed in the Visa Global Registry as validated through 2027-07-31 (as of 2026-09-17, auditor Foregenix Ltd.).","SOC 2 and SOC 1: vendor states on its trust centre it holds SOC 2 Type II and SOC 1 Type II reports (as of 2026-09-17).","ISO/IEC 27001, GDPR, CCPA / CPRA, and Cyber Essentials: vendor states on its trust centre it complies with these frameworks (as of 2026-09-17); no public evidence found for HIPAA."],"model":"claude-sonnet-5","generated_at":"2026-09-17 17:29:45.961212+00"},"legal_docs":[{"kind":"subprocessors","url":"https://trust.checkout.com/","availability":"public","detail":"3 subprocessors listed on the trust centre","as_of":"2026-09-17"},{"kind":"privacy","url":"https://www.checkout.com/legal/privacy-policy","availability":"public","detail":null,"as_of":"2026-09-17"},{"kind":"security_txt","url":"https://trust.checkout.com/","availability":"public","detail":"Public documents on the trust centre: Cyber Essentials+ 2026; Cyber Essentials+ 2025","as_of":"2026-09-17"}],"subprocessors":[{"name":"Amazon Web Services","domain":"amazon.com","purpose":"Cloud Storage Platform","location":"US/EEA/UK","vendor_url":"https://certreports.com/vendors/amazon/security"},{"name":"Checkout Technology Ltd.","domain":"checkout.com","purpose":"Payment Processing Services","location":"EEA/UK","vendor_url":"https://certreports.com/vendors/checkout/security"},{"name":"Google Cloud Platform","domain":"google.com","purpose":"BigQuery","location":"EEA/UK","vendor_url":null}],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-19T02:21:57.288Z"}