{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"valid","name":"valid","domain":"valid.com","category":"Banking and lending","one_liner":"A Valid promove a identificação segura de pessoas, jornadas e","trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/valid/security","last_verified_at":"2026-11-02T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"pci-dss","framework_name":"PCI DSS","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Visa Global Registry of Service Providers as of 19 Oct 2026.","kind":"attestation","status_text":"Listed on the Visa Global Registry as PCI DSS validated through 2027-06-30","issued_at":"2016-05-23","expires_at":"2027-06-30","period_start":null,"period_end":null,"auditor":"VOC Consultancy","impact_level":null,"as_of":"2026-10-19","under_review":false,"source":"visa_grsp","url":"https://certreports.com/vendors/valid/pci-dss","evidence":[{"source_type":"registry","source_name":"Visa Global Registry of Service Providers","url":"https://www.visa.com/splisting/","fetched_at":"2026-10-19 05:02:38.304488+00","content_hash":"841d3122cc5c1e7866bf3217f3ce94ecb594ba94500a181993ec76b43db16358","wayback_url":null,"quote":"TinTel B.V.: PCI DSS, assessor VOC Consultancy, valid through 2027-06-30","confidence":1},{"source_type":"registry","source_name":"Visa Global Registry of Service Providers","url":"https://www.visa.com/splisting/","fetched_at":"2026-10-12 05:01:39.384888+00","content_hash":"4e6f2bfbb85e59e6e18bb1abe7f3247a46f10bb3871057d5702cc5f4b48f9342","wayback_url":null,"quote":"Payrix, LLC: PCI DSS, assessor A-LIGN Compliance and Security, Inc., dba A-LIGN, valid through 2027-03-31","confidence":1},{"source_type":"registry","source_name":"Visa Global Registry of Service Providers","url":"https://www.visa.com/splisting/","fetched_at":"2026-10-05 05:01:25.961023+00","content_hash":"35f5b5c7a5a2ec89cc49c8c634e104a508041feac07b49c3514138990d9ef0aa","wayback_url":null,"quote":"PAGADOOR RECAUDADORA DE PAGOS SOCIEDAD ANONIMA VARIABLE: PCI DSS, assessor 1stSecureIT LLC (dba GM SECTEC), valid through 2027-05-31","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"expired","state_label":"Expired","sentence":"Certificate expiry unknown date passed; no renewal found as of 2 Nov 2026.","kind":"listing","status_text":"Inactive","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-11-02","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/valid/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/6594","fetched_at":"2026-11-02 05:02:39.666337+00","content_hash":"e5d6a8dca96e03f269aa11879c5db43f2b4082886a6a73b617456777064090af","wayback_url":null,"quote":"Valid USA: Inactive","confidence":1}]}],"brief":{"summary":"valid is listed on the Visa Global Registry as PCI DSS validated through 30 Jun 2027, with the audit issued on 23 May 2016 by VOC Consultancy, and the registry status is current as of 19 Oct 2026. The EU-US Data Privacy Framework registry marks valid's certification as inactive, with no active dates recorded, as of 19 Oct 2026. No public evidence found for a SOC 2 Type II report as of 19 Oct 2026. No public evidence found for ISO/IEC 27001 certification as of 19 Oct 2026. No public evidence found for CSA STAR as of 19 Oct 2026.","bullets":["PCI DSS (Visa Global Registry): validated through 30 Jun 2027, as of 19 Oct 2026","EU-US Data Privacy Framework: listed as inactive, as of 19 Oct 2026","SOC 2: no public evidence found as of 19 Oct 2026"],"model":"claude-sonnet-5","generated_at":"2026-10-20 05:39:03.054443+00"},"legal_docs":[],"documents":[],"statements":[],"security_profile":null,"regulations_url":"https://certreports.com/api/v1/vendors/valid/regulations/{regulation}","subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-11-03T11:57:01.204Z"}