Coinflow Labs

Security and trust center evidence

Tech-driven payments solutions for your

coinflow.cash PaymentsLast verified 12 Oct 2026

Request the report Are you Coinflow Labs?

SOC 2Vendor-stated

PCI DSSVerified

ISO 27001Vendor-stated

Coinflow Labs has 1 registry-verified row and 2 vendor-stated rows in the CertReports index, last verified 12 Oct 2026. The strongest row is SOC 2: Vendor states SOC 2 Type II on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

As of 21 Sep 2026, Coinflow Labs states on its trust centre that it holds a SOC 2 Type II report. As of 12 Oct 2026, Coinflow Labs is listed on the Visa Global Registry as PCI DSS validated through 31 May 2027, with the underlying assessment issued 29 May 2025 by Insight Assurance LLC. As of 21 Sep 2026, Coinflow Labs states on its trust centre that it holds ISO/IEC 27001:2022 certification. As of 21 Sep 2026, no public evidence of a BAA offering under HIPAA was found for Coinflow Labs. As of 12 Oct 2026, no public evidence of EU-US Data Privacy Framework participation was found for Coinflow Labs.

SOC 2 Type II: vendor states on trust centre, as of 21 Sep 2026.
PCI DSS: listed on Visa Global Registry, validated through 31 May 2027, assessment issued 29 May 2025 by Insight Assurance LLC, as of 12 Oct 2026.
ISO/IEC 27001:2022: vendor states on trust centre, as of 21 Sep 2026.

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 1 Nov 2026; it is regenerated whenever a row changes.

Among payments vendors

1verified rows

Category median 1, across 742 indexed payments vendors. Coinflow Labs has more verified rows than 7 percent of them.

blockchaincrypto paymentspayment processingweb3 payments

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for HIPAA, GDPR, FedRAMP, CSA STAR, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Legal artefacts

Subprocessor list

Public · 26 subprocessors listed on the trust centre · as of 21 Sep 2026

Open

Subprocessors (26)

AT
AttioCRM
Basis TheoryCard Tokenisation
DialpadCustomer support
EL
ElasticSecurity
evervaultSecurity
GoogleDocument management
IntuitFinance and payments
IxopayCard Tokenisation
LexisNexisRisk Management
ME
MetakeepSecurity
MongoDBData storage and processing
NA
Nsure.aiTransaction data analytics
NuveiFinance and payments
OS
OscilarRisk and AML
PersonaIDVA
PlaidFinance and payments
RA
RainFinance and payments
RenderCloud provider
Shift4Finance and payments
SigNozCloud monitoring
SK
SumSub KYCKYC
SU
SupabaseEngineering
TRM Labs, Inc.Security
VantaSecurity
VE
VerisoulFinance and payments
WO
WorldpayFinance and payments

Change history

18 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Vendor-stated.
18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
18 Sep 2026Subprocessor added: AttioAttio appeared on the subprocessor list.
18 Sep 2026Subprocessor added: Basis TheoryBasis Theory appeared on the subprocessor list.
18 Sep 2026Subprocessor added: DialpadDialpad appeared on the subprocessor list.
18 Sep 2026Subprocessor added: ElasticElastic appeared on the subprocessor list.
18 Sep 2026Subprocessor added: GoogleGoogle appeared on the subprocessor list.
18 Sep 2026Subprocessor added: IntuitIntuit appeared on the subprocessor list.
18 Sep 2026Subprocessor added: IxopayIxopay appeared on the subprocessor list.
18 Sep 2026Subprocessor added: LexisNexisLexisNexis appeared on the subprocessor list.