Summary
global blue has 1 registry-verified row in the CertReports index, last verified 26 Oct 2026. The strongest row is PCI DSS: Listed on the Visa Global Registry as PCI DSS validated through 2027-05-31. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 26 Oct 2026, global blue is listed in the Visa Global Registry as PCI DSS validated, with the current validation period running through 31 May 2027. As of 26 Oct 2026, this PCI DSS listing was issued on 21 Aug 2026 and the assessment was conducted by SISA. No public evidence found for SOC 2 for global blue as of 26 Oct 2026. No public evidence found for ISO/IEC 27001 for global blue as of 26 Oct 2026. No public evidence found for HIPAA arrangements, such as a business associate agreement, for global blue as of 26 Oct 2026.
- Listed in Visa Global Registry as PCI DSS validated through 31 May 2027 (as of 26 Oct 2026)
- PCI DSS listing issued 21 Aug 2026, audited by SISA
- No public evidence found for SOC 2, ISO/IEC 27001, or HIPAA as of 26 Oct 2026
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 27 Oct 2026; it is regenerated whenever a row changes.
Evidence count
1verified rows
payment-processingtax-refundstravel-retailvat-reclaim
Compliance grid
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this.
Subprocessors
No subprocessor list captured yet.
Change history
- 26 Oct 2026PCI DSS auditor changedAuditor changed from A-LIGN Compliance and Security, Inc., dba A-LIGN to SISA.
- 19 Oct 2026PCI DSS auditor changedAuditor changed from KYTE Consultants, Ltd. to A-LIGN Compliance and Security, Inc., dba A-LIGN.
- 12 Oct 2026PCI DSS renewedExpiry moved from 2027-06-30 to 2027-08-31.
- 12 Oct 2026PCI DSS auditor changedAuditor changed from Reversec Finland Oy to KYTE Consultants, Ltd..
- 29 Sep 2026PCI DSS auditor changedAuditor changed from SRC Security Research & Consulting GmbH to Reversec Finland Oy.
- 29 Sep 2026PCI DSS renewedExpiry moved from 2026-10-31 to 2027-06-30.
- 18 Sep 2026First indexed by CertReports1 evidence row across 1 framework entered the index.
Evidence against regulations
All regulations for global blueHow much of each regulation’s vendor requirements global blue’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read