Basis Theory
Compliance evidence
More than a token vaultâBasis Theory routes, tokenizes, and optimizes your payments to drive conversion, resilience, and
Compliance grid
SOC 2Vendor-statedVendor states SOC2 type 2 on its trust centre
as of 18 Sep 20261 source
PCI DSSVerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-08-31
as of 17 Sep 20261 source · Baker Tilly Advisory Group, LP
ISO/IEC 27001Vendor-statedVendor states ISO 27001 on its trust centre
as of 18 Sep 20261 source
ISO/IEC 27701Vendor-statedVendor states ISO/IEC 27701 on its trust centre
as of 18 Sep 20261 source- SOC 3Vendor-stated
Vendor states SOC 3 on its trust centre
as of 18 Sep 20261 source 
EU-US Data Privacy FrameworkVerifiedActive: EU-US Certification, SW-US Certification, UK Extension Certification
as of 17 Sep 20261 source
Official framework marks identify the scheme each row is about; the CertReports state chip beside each mark is our assessment of the public evidence. How states are decided.