{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"moov-financial-inc","name":"Moov Financial","domain":"moov.io","category":"Payments","one_liner":"Moov is the payments platform powering","trust_center_url":"https://trust.moov.io/","security_page_url":null,"url":"https://certreports.com/vendors/moov-financial-inc/security","last_verified_at":"2026-11-02T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"soc-2","framework_name":"SOC 2","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 2 Type II report on its trust centre (Drata) as of 21 Sep 2026.","kind":"type2","status_text":"Vendor states SOC 2 Type 2 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-21","under_review":false,"source":"drata","url":"https://certreports.com/vendors/moov-financial-inc/soc-2","evidence":[{"source_type":"trust_center","source_name":"Moov Financial trust centre (Drata)","url":"https://trust.moov.io/","fetched_at":"2026-09-21 22:45:48.993937+00","content_hash":"f797e56a3ab0597791e31dd07bc56bfde5b3e223632e1011539f3bd46c38f1b3","wayback_url":null,"quote":"SOC 2 Type 2","confidence":1},{"source_type":"trust_center","source_name":"Moov Financial trust centre (Drata)","url":"https://trust.moov.io/","fetched_at":"2026-09-18 22:56:38.90782+00","content_hash":"5df72285e197242184427ae6e2b849eab6206e30dd72641193e9bb65cfeb6daa","wayback_url":null,"quote":"SOC 2 Type 2","confidence":1}]},{"framework":"pci-dss","framework_name":"PCI DSS","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Visa Global Registry of Service Providers as of 2 Nov 2026.","kind":"attestation","status_text":"Listed on the Visa Global Registry as PCI DSS validated through 2027-05-31","issued_at":"2026-08-21","expires_at":"2027-05-31","period_start":null,"period_end":null,"auditor":"TIC DEFENSE, S.A. DE C.V.","impact_level":null,"as_of":"2026-11-02","under_review":false,"source":"visa_grsp","url":"https://certreports.com/vendors/moov-financial-inc/pci-dss","evidence":[{"source_type":"registry","source_name":"Visa Global Registry of Service Providers","url":"https://www.visa.com/splisting/","fetched_at":"2026-11-02 05:02:07.181411+00","content_hash":"03212a5a2186268c8c9512335780088c70f824e996fcca527fc2df4eadbde225","wayback_url":null,"quote":"QUIKAPP VENTURE SA CV: PCI DSS, assessor TIC DEFENSE, S.A. DE C.V., valid through 2027-05-31","confidence":1},{"source_type":"registry","source_name":"Visa Global Registry of Service Providers","url":"https://www.visa.com/splisting/","fetched_at":"2026-10-26 05:01:50.466359+00","content_hash":"b1938532addac7b95a624b921851b02ff48437e960b932153fd178c5a7739547","wayback_url":null,"quote":"QUIKAPP VENTURE SA CV: PCI DSS, assessor TIC DEFENSE, S.A. DE C.V., valid through 2027-05-31","confidence":1},{"source_type":"registry","source_name":"Visa Global Registry of Service Providers","url":"https://www.visa.com/splisting/","fetched_at":"2026-10-12 05:01:41.708237+00","content_hash":"16f013572d105056de4bac7fe7a594022fe03d598c07045a7b6a8d86981137b3","wayback_url":null,"quote":"PEARL BANK UGANDA LIMITED: PCI DSS, assessor ValueMentor InfoSec Private Limited, valid through 2026-09-30","confidence":1},{"source_type":"registry","source_name":"Visa Global Registry of Service Providers","url":"https://www.visa.com/splisting/","fetched_at":"2026-09-17 15:58:35.263122+00","content_hash":"7a8c840bd5aea65ec615cb043fe9fa302353a862a9b0199e372628790869b63c","wayback_url":null,"quote":"Moov Financial, Inc.: PCI DSS, assessor VikingCloud, Inc., valid through 2026-12-31","confidence":1}]},{"framework":"soc-1","framework_name":"SOC 1","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 1 Type II report on its trust centre (Drata) as of 21 Sep 2026.","kind":"type2","status_text":"Vendor states SOC 1 Type 2 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-21","under_review":false,"source":"drata","url":"https://certreports.com/vendors/moov-financial-inc/security","evidence":[{"source_type":"trust_center","source_name":"Moov Financial trust centre (Drata)","url":"https://trust.moov.io/","fetched_at":"2026-09-21 22:45:48.993937+00","content_hash":"f797e56a3ab0597791e31dd07bc56bfde5b3e223632e1011539f3bd46c38f1b3","wayback_url":null,"quote":"SOC 1 Type 2","confidence":1},{"source_type":"trust_center","source_name":"Moov Financial trust centre (Drata)","url":"https://trust.moov.io/","fetched_at":"2026-09-18 22:56:38.90782+00","content_hash":"5df72285e197242184427ae6e2b849eab6206e30dd72641193e9bb65cfeb6daa","wayback_url":null,"quote":"SOC 1 Type 2","confidence":1}]}],"brief":null,"legal_docs":[],"documents":[{"type":"business_continuity","title":"BC/DR","availability":"on_request","source_url":"https://trust.moov.io/","last_seen":"2026-09-21"},{"type":"business_continuity","title":"Business Continuity Plan (BCP)","availability":"on_request","source_url":"https://trust.moov.io/","last_seen":"2026-09-21"},{"type":"incident_response","title":"Data Breach Notifications","availability":"on_request","source_url":"https://trust.moov.io/","last_seen":"2026-09-21"},{"type":"pci_aoc","title":"PCI DSS","availability":"on_request","source_url":"https://trust.moov.io/","last_seen":"2026-09-21"},{"type":"security_policy","title":"Disk Encryption","availability":"on_request","source_url":"https://trust.moov.io/","last_seen":"2026-09-21"},{"type":"soc1_report","title":"SOC 1 Type 2","availability":"on_request","source_url":"https://trust.moov.io/","last_seen":"2026-09-21"},{"type":"soc2_report","title":"SOC 2 Type 2","availability":"on_request","source_url":"https://trust.moov.io/","last_seen":"2026-09-21"}],"statements":[],"security_profile":null,"regulations_url":"https://certreports.com/api/v1/vendors/moov-financial-inc/regulations/{regulation}","subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-11-05T12:12:02.369Z"}