Ambition

As of 15 Oct 2026, Ambition states on its trust centre that it holds a SOC 2 Type II report. As of 15 Oct 2026, no issuance or expiry date is provided alongside this SOC 2 statement, so the underlying audit period cannot be confirmed. As of 12 Oct 2026, Ambition's EU-US Data Privacy Framework status is recorded as inactive, with an original listing date of 25 Sep 2020. As of 12 Oct 2026, this EU-US Data Privacy Framework entry has no current expiry date but is marked as no longer active. As of 15 Oct 2026, no public evidence was found for PCI DSS or other frameworks for Ambition.

• SOC 2: vendor states it holds a SOC 2 Type II report on its trust centre (as of 15 Oct 2026)
• EU-US Data Privacy Framework: inactive, originally listed 25 Sep 2020 (as of 12 Oct 2026)
• PCI DSS: no public evidence found (as of 15 Oct 2026)

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 15 Oct 2026; it is regenerated whenever a row changes.