Canary Technologies

Security and trust center evidence

Modernizing the hospitality tech stack.

canarytechnologies.com Travel and hospitalityLast verified 3 Nov 2026

Request the report Are you Canary Technologies?

SOC 2Vendor-stated

PCI DSSVerified

Canary Technologies has 1 registry-verified row and 1 vendor-stated row in the CertReports index, last verified 3 Nov 2026. The strongest row is SOC 2: Vendor states SOC 2 Type 2 on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

Canary Technologies states on its trust centre that it has a SOC 2 Type II report, with the vendor statement captured as of 25 Oct 2026. Canary Technologies is listed in the Visa Global Registry as PCI DSS validated, with the entry issued 15 Mar 2023 and valid through 31 Mar 2027, as of 19 Oct 2026. The PCI DSS listing names SecurityMetrics, Inc. as the auditor, as of 19 Oct 2026. No public evidence found for ISO/IEC 27001 for Canary Technologies, as of 25 Oct 2026. No public evidence found for HIPAA or GDPR for Canary Technologies, as of 25 Oct 2026.

SOC 2: vendor states it has a SOC 2 Type II report (as of 25 Oct 2026)
PCI DSS: listed in Visa Global Registry, issued 15 Mar 2023, valid through 31 Mar 2027, auditor SecurityMetrics, Inc. (as of 19 Oct 2026)
ISO/IEC 27001, HIPAA, GDPR: no public evidence found (as of 25 Oct 2026)

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 25 Oct 2026; it is regenerated whenever a row changes.

Among travel and hospitality vendors

1verified rows

Category median 1, across 55 indexed travel and hospitality vendors. Canary Technologies has more verified rows than 31 percent of them.

guest experiencehospitality managementhotel operationsrevenue management

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for HIPAA, GDPR, FedRAMP, ISO 27001, CSA STAR, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Legal artefacts

Data processing agreement

On request · Listed on the trust centre as "Data Processing Agreement" · as of 3 Nov 2026

Open

AI and data use policy

On request · Listed on the trust centre as "EU AI Act Regulation - Transparency Compliance Statement" · as of 3 Nov 2026

Open

Subprocessor list

On request · Listed on the trust centre as "Subprocessors" · as of 3 Nov 2026

Open

Subprocessors

No subprocessor list captured yet.

Security profile

Pen test cadence: report available

Displayed as a security profile from public statements, not as attestations, as of 3 Nov 2026.

Change history

19 Oct 2026PCI DSS renewedExpiry moved from 2026-09-30 to 2027-03-31.
19 Oct 2026PCI DSS auditor changedAuditor changed from Networks Group Inc to SecurityMetrics, Inc..
22 Sep 2026DPA changedThe data processing agreement URL changed.
18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.

Similar vendors with evidence

Related by product tags and the Travel and hospitality category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.