Capital on Tap
Security and trust center evidence
With the Capital on Tap business credit card, get up to £250k to grow your
Summary
Capital on Tap has 1 registry-verified row and 3 vendor-stated rows in the CertReports index, last verified 5 Oct 2026. The strongest row is SOC 2: Vendor states SOC 2 on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 30 Sep 2026, Capital on Tap states on its trust centre that it holds a SOC 2 report. As of 5 Oct 2026, Capital on Tap is listed in the Visa Global Registry as PCI DSS validated through 31 Oct 2026, with audits performed by Bravecraft (Pty) Ltd. As of 30 Sep 2026, Capital on Tap states on its trust centre that it holds ISO/IEC 27001:2022. As of 30 Sep 2026, Capital on Tap states on its trust centre that it holds UK Cyber Essentials. As of 30 Sep 2026, no public evidence found for a HIPAA BAA on the vendor's trust centre.
- SOC 2: vendor states on trust centre (as of 30 Sep 2026)
- PCI DSS: listed in Visa Global Registry, valid through 31 Oct 2026 (as of 5 Oct 2026)
- ISO/IEC 27001:2022 and UK Cyber Essentials: vendor states on trust centre (as of 30 Sep 2026)
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 25 Oct 2026; it is regenerated whenever a row changes.
Among banking and lending vendors
1verified rows
Category median 1, across 74 indexed banking and lending vendors. Capital on Tap has more verified rows than 12 percent of them.
business credit cardcashbackcreditlending
Compare with similar vendors
Pick your own comparisonCompliance grid
SOC 2Vendor-statedVendor states SOC 2 on its trust centre
as of 30 Sep 20262 sources
PCI DSSVerifiedListed on the Visa Global Registry as PCI DSS validated through 2026-10-31
as of 5 Oct 20262 sources · Bravecraft (Pty) Ltd
ISO/IEC 27001Vendor-statedVendor states ISO 27001:2022 on its trust centre
as of 30 Sep 20262 sources
Cyber EssentialsVendor-statedVendor states UK Cyber Essentials on its trust centre
as of 30 Sep 20262 sources
Legal artefacts
Subprocessors (11)
BobEmployee management
CloudflareCloud monitoring
DatadogCloud monitoring
FivetranData storage and processing
Google WorkspaceIdentity provider
HubSpotMarketing
JiraCollaboration
Microsoft AzureCloud provider
SlackCollaboration
SnowflakeData storage and processing
VantaSecurity
Security profile
- Pen test cadence
- annual
Displayed as a security profile from public statements, not as attestations, as of 30 Sep 2026.
Change history
- 29 Sep 2026PCI DSS evidence addedA PCI DSS row entered the index with state Verified.
- 18 Sep 2026First indexed by CertReports3 evidence rows across 3 frameworks entered the index.
Similar vendors with evidence
Related by product tags and the Banking and lending category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Empower Finance
Banking and lending
Tilt helps you access cash and credit by looking at your income and spending, not just your credit
Exa Labs
Banking and lending
Get your free Visa Signature Exa Credit Card and access fixed interest loans with the Exa
Mission Lane
Banking and lending
Join 2 million+ members who count on a Mission Lane Visa® Credit
MCA Investments
Banking and lending
Dosh is the app that helps you spend, save and
Evidence against regulations
All regulations for Capital on TapHow much of each regulation’s vendor requirements Capital on Tap’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read