Basis Theory

As of 17 Sep 2026, Basis Theory is listed in the Visa Global Registry as PCI DSS validated, with the record showing validation through 31 Aug 2027 and audit work performed by Baker Tilly Advisory Group, LP, issued 13 May 2024. As of 17 Sep 2026, Basis Theory is listed in the EU-US Data Privacy Framework registry with Active EU-US, Swiss-US, and UK Extension certifications, issued 25 Oct 2024 and expiring 02 Oct 2026. As of 17 Sep 2026, no public evidence found for SOC 2 for Basis Theory. As of 17 Sep 2026, no public evidence found for HIPAA for Basis Theory. As of 17 Sep 2026, no subprocessor information was disclosed in the evidence rows for Basis Theory.

• PCI DSS: listed in Visa Global Registry as validated through 31 Aug 2027, audited by Baker Tilly Advisory Group, LP (as of 17 Sep 2026).
• EU-US Data Privacy Framework: listed in DPF registry as Active (EU-US, Swiss-US, UK Extension), issued 25 Oct 2024, expiring 02 Oct 2026 (as of 17 Sep 2026).
• SOC 2 and HIPAA: no public evidence found as of 17 Sep 2026.

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 17 Sep 2026; it is regenerated whenever a row changes.