Skip to main content
checkout logo

checkout

Security and trust center evidence

Boost your acceptance rate, cut processing costs, fight fraud, and create extraordinary customer experiences with Checkout.com's payment

checkout.comPaymentsLast verified 19 Oct 2026

Summary

checkout has 1 registry-verified row and 6 vendor-stated rows in the CertReports index, last verified 19 Oct 2026. The strongest row is SOC 2: Vendor states SOC 2 Type II on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

checkout states on its trust centre that it has a SOC 2 Type II report, as of 30 Sep 2026. checkout also states on its trust centre that it holds GDPR, ISO/IEC 27001:2022, UK Cyber Essentials, a SOC 1 Type II report and CCPA/CPRA, as of 30 Sep 2026. checkout is listed in the Visa Global Registry as PCI DSS validated through 31 Jul 2027, under an entry issued 3 May 2011 and audited by SISA, as of 19 Oct 2026. No public evidence found for HIPAA as of 19 Oct 2026, meaning no BAA availability has been documented. No public evidence found for FedRAMP as of 19 Oct 2026.

  • SOC 2: has a SOC 2 Type II report, per vendor statement (as of 30 Sep 2026)
  • PCI DSS: listed in Visa Global Registry, validated through 31 Jul 2027, auditor SISA (as of 19 Oct 2026)
  • HIPAA: no public evidence found (as of 19 Oct 2026)

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 19 Oct 2026; it is regenerated whenever a row changes.

Among payments vendors

1verified rows

Category median 1, across 737 indexed payments vendors. checkout has more verified rows than 6 percent of them.

acceptance ratecheckout optimizationfraud preventionpayment processing

Compliance grid

Subprocessors (3)

Change history

  1. 19 Oct 2026PCI DSS auditor changedAuditor changed from Foregenix Ltd. to SISA.
  2. 17 Sep 2026Cyber Essentials evidence addedA Cyber Essentials row entered the index with state Vendor-stated.
  3. 17 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
  4. 17 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Vendor-stated.
  5. 17 Sep 2026SOC 1 evidence addedA SOC 1 row entered the index with state Vendor-stated.
  6. 17 Sep 2026CCPA / CPRA evidence addedA CCPA / CPRA row entered the index with state Vendor-stated.
  7. 17 Sep 2026Subprocessor added: Amazon Web ServicesAmazon Web Services appeared on the subprocessor list.
  8. 17 Sep 2026Subprocessor added: Checkout Technology Ltd.Checkout Technology Ltd. appeared on the subprocessor list.
  9. 17 Sep 2026Subprocessor added: Google Cloud PlatformGoogle Cloud Platform appeared on the subprocessor list.
  10. 17 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.

Similar vendors with evidence

Related by product tags and the Payments category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.

Evidence against regulations

All regulations for checkout

How much of each regulation’s vendor requirements checkout’s public evidence reaches.

All articles