{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"tipalti-b-v","name":"Tipalti","domain":"tipalti.com","category":"Procurement","one_liner":"Tipalti’s finance automation software combines trusted AI with accounts payable, mass payments, procurement, expenses, and treasury in one","trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/tipalti-b-v/security","last_verified_at":"2026-11-02T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"pci-dss","framework_name":"PCI DSS","state":"expired","state_label":"Expired","sentence":"Certificate expiry 31 Aug 2026 passed; no renewal found as of 5 Oct 2026.","kind":"attestation","status_text":"Listed on the Visa Global Registry as PCI DSS validated through 2026-08-31 (validation date passed)","issued_at":"2025-12-30","expires_at":"2026-08-31","period_start":null,"period_end":null,"auditor":"ControlCase, LLC","impact_level":null,"as_of":"2026-10-05","under_review":false,"source":"visa_grsp","url":"https://certreports.com/vendors/tipalti-b-v/pci-dss","evidence":[{"source_type":"registry","source_name":"Visa Global Registry of Service Providers","url":"https://www.visa.com/splisting/","fetched_at":"2026-10-05 05:01:14.907464+00","content_hash":"27b8a71a48b7f1519a968385a3ac0c880093c5f264f0bab0fc1b5ccbaa1824b7","wayback_url":null,"quote":"MOOJUP: PCI DSS, assessor ControlCase, LLC, valid through 2026-08-31","confidence":1},{"source_type":"registry","source_name":"Visa Global Registry of Service Providers","url":"https://www.visa.com/splisting/","fetched_at":"2026-09-29 03:47:32.411918+00","content_hash":"80ef5aa773b9c87f409e344dc10a0179441dee7fa933164ff1a9ce93988084be","wayback_url":null,"quote":"MOOJUP: PCI DSS, assessor ControlCase, LLC, valid through 2026-08-31","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 2 Nov 2026.","kind":"listing","status_text":"Active: EU-US Certification, UK Extension Certification","issued_at":"2017-09-11","expires_at":"2027-03-16","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-11-02","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/tipalti-b-v/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/3574","fetched_at":"2026-11-02 05:01:27.609895+00","content_hash":"e3c82186a179541584f84a1dc1b4a307c89017494e9e1b3e0dd7d6a18fab1a8f","wayback_url":null,"quote":"Tipalti: Active: EU-US Certification, UK Extension Certification","confidence":1}]}],"brief":{"summary":"Tipalti was listed in the Visa Global Registry as PCI DSS validated through 31 Aug 2026, a date that has passed, as of 29 Sep 2026. The PCI DSS listing was issued 30 Dec 2025 and audited by ControlCase, LLC, as of 29 Sep 2026. Tipalti is listed in the EU-US Data Privacy Framework registry as active for EU-US Certification and UK Extension Certification, as of 29 Sep 2026. The EU-US Data Privacy Framework listing was issued 11 Sep 2017 and expires 16 Mar 2027, as of 29 Sep 2026. No public evidence found for SOC 2, as of 29 Sep 2026.","bullets":["PCI DSS: listed in the Visa Global Registry, validated through 31 Aug 2026 - validation date passed, audited by ControlCase, LLC (as of 29 Sep 2026).","EU-US Data Privacy Framework: listed in the registry, active EU-US Certification and UK Extension Certification, expires 16 Mar 2027 (as of 29 Sep 2026).","SOC 2: no public evidence found."],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-10-03 05:58:53.619996+00"},"legal_docs":[],"documents":[],"statements":[],"security_profile":null,"regulations_url":"https://certreports.com/api/v1/vendors/tipalti-b-v/regulations/{regulation}","subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-11-04T18:56:17.886Z"}