{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"foxy-io","name":"Foxy.io","domain":"foxy.io","category":"E-commerce","one_liner":"Foxy’s hosted cart & payment page allow you to sell anything, using your existing website or","trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/foxy-io/security","last_verified_at":"2026-09-17T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"pci-dss","framework_name":"PCI DSS","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Visa Global Registry of Service Providers as of 17 Sep 2026.","kind":"attestation","status_text":"Listed on the Visa Global Registry as PCI DSS validated through 2027-02-28","issued_at":"2011-05-26","expires_at":"2027-02-28","period_start":null,"period_end":null,"auditor":"Specialized Security Services, Inc.","impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"visa_grsp","url":"https://certreports.com/vendors/foxy-io/pci-dss","evidence":[{"source_type":"registry","source_name":"Visa Global Registry of Service Providers","url":"https://www.visa.com/splisting/","fetched_at":"2026-09-17 15:57:55.38396+00","content_hash":"42d3b513c2e148a53241e6dfb891a06391304705738c42cf8a05f365ae32aea5","wayback_url":null,"quote":"FoxyCart.com LLC: PCI DSS, assessor Specialized Security Services, Inc., valid through 2027-02-28","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 17 Sep 2026.","kind":"listing","status_text":"Active: EU-US Certification, SW-US Certification, UK Extension Certification","issued_at":"2018-05-17","expires_at":"2027-02-21","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/foxy-io/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/7917","fetched_at":"2026-09-17 15:50:20.360405+00","content_hash":"5a8fd6709c37745b12e095051408be186d09832e475fcf2415ca024dea072161","wayback_url":null,"quote":"Foxy.io: Active: EU-US Certification, SW-US Certification, UK Extension Certification","confidence":1}]}],"brief":{"summary":"As of 17 Sep 2026, Foxy.io is listed in the Visa Global Registry as PCI DSS validated, with a status effective through 28 Feb 2027. As of 17 Sep 2026, the PCI DSS registry entry shows an original issue date of 26 May 2011 and an auditor of record of Specialized Security Services, Inc. As of 17 Sep 2026, Foxy.io is listed in the EU-US Data Privacy Framework registry as active for the EU-US Certification, SW-US Certification, and UK Extension Certification, issued 17 May 2018 and expiring 21 Feb 2027. As of 17 Sep 2026, no public evidence found for SOC 2 or HIPAA for Foxy.io. As of 17 Sep 2026, no subprocessor records were reported for Foxy.io.","bullets":["As of 17 Sep 2026: listed in Visa Global Registry as PCI DSS validated, expiring 28 Feb 2027 (auditor: Specialized Security Services, Inc.)","As of 17 Sep 2026: listed in EU-US Data Privacy Framework registry (EU-US, SW-US, UK Extension Certifications), expiring 21 Feb 2027","As of 17 Sep 2026: no public evidence found for SOC 2 or HIPAA; 0 subprocessors reported"],"model":"claude-sonnet-5","generated_at":"2026-09-17 18:57:20.576866+00"},"legal_docs":[],"subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-19T02:37:33.983Z"}