Compensation Tool

As of 21 Sep 2026, Compensation Tool states on its trust centre that it holds a SOC 2 Type II report. As of 26 Oct 2026, the EU-US Data Privacy Framework registry lists the vendor's participation as Inactive, indicating the listing has expired. No public evidence found for PCI DSS as of 26 Oct 2026, leaving payment card compliance unconfirmed from the supplied data. No public evidence found for HIPAA as of 26 Oct 2026, so no BAA offering can be confirmed for this vendor. Based on the evidence available, Compensation Tool's documented posture combines a vendor-stated SOC 2 Type II report as of 21 Sep 2026 with an expired EU-US Data Privacy Framework listing as of 26 Oct 2026.

• SOC 2: vendor states it holds a Type II report on its trust centre as of 21 Sep 2026.
• EU-US Data Privacy Framework: listed as Inactive (expired) as of 26 Oct 2026.
• PCI DSS: no public evidence found as of 26 Oct 2026.

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 1 Nov 2026; it is regenerated whenever a row changes.