Citcon

Security and trust center evidence

Accept digital payments

citcon.com PaymentsLast verified 19 Oct 2026

Request the report Are you Citcon?

SOC 2Vendor-stated

GDPRVendor-stated

PCI DSSVerified

Citcon has 1 registry-verified row and 2 vendor-stated rows in the CertReports index, last verified 19 Oct 2026. The strongest row is SOC 2: Vendor states SOC 2 Type 2 on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

Citcon is listed on the Visa Global Registry as PCI DSS validated, with the listing current through 31 Mar 2027 and issued 19 May 2025, as recorded as of 19 Oct 2026. The validation was performed by 1stSecureIT LLC (dba GM SECTEC), per the Visa Global Registry entry dated 19 Oct 2026. Citcon states on its trust centre that it holds a SOC 2 Type 2 report and maintains GDPR alignment, as of 21 Sep 2026. No independent registry evidence is available for the SOC 2 or GDPR claims beyond the vendor's own statement as of 21 Sep 2026. No public evidence found for ISO/IEC 27001 or HIPAA for Citcon as of 21 Sep 2026.

PCI DSS - listed in Visa Global Registry, validated through 31 Mar 2027, issued 19 May 2025 (as of 19 Oct 2026)
Vendor states on its trust centre: SOC 2 Type 2, GDPR (as of 21 Sep 2026)
No public evidence found for ISO/IEC 27001, HIPAA (as of 21 Sep 2026)

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 31 Oct 2026; it is regenerated whenever a row changes.

Among payments vendors

1verified rows

Category median 1, across 737 indexed payments vendors. Citcon has more verified rows than 6 percent of them.

digital paymentsglobal paymentspayment apipayment processing

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for HIPAA, FedRAMP, ISO 27001, CSA STAR, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Legal artefacts

Subprocessor list

Public · 7 subprocessors listed on the trust centre · as of 21 Sep 2026

Open

Public · as of 21 Sep 2026

Open

Subprocessors (7)

Amazon Web ServicesCloud provider
CloudflareCloud monitoring
CrowdStrikeSecurity
GitHubSource code repository
Google WorkspaceProductivity Tool
JamfSecurity
OktaIdentity Management

Change history

19 Oct 2026PCI DSS renewedExpiry moved from 2026-10-31 to 2027-03-31.
19 Oct 2026PCI DSS auditor changedAuditor changed from Online Enterprises DBA Online Business Systems to 1stSecureIT LLC (dba GM SECTEC).
18 Sep 2026Subprocessor added: Amazon Web ServicesAmazon Web Services appeared on the subprocessor list.
18 Sep 2026Subprocessor added: CloudflareCloudflare appeared on the subprocessor list.
18 Sep 2026Subprocessor added: CrowdStrikeCrowdStrike appeared on the subprocessor list.
18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
18 Sep 2026Subprocessor added: Google WorkspaceGoogle Workspace appeared on the subprocessor list.
18 Sep 2026Subprocessor added: JamfJamf appeared on the subprocessor list.
18 Sep 2026Subprocessor added: OktaOkta appeared on the subprocessor list.
18 Sep 2026Subprocessor added: GitHubGitHub appeared on the subprocessor list.