Summary
GRUPO M has 1 registry-verified row in the CertReports index, last verified 26 Oct 2026. The strongest row is PCI DSS: Listed on the Visa Global Registry as PCI DSS validated through 2026-10-31. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 26 Oct 2026, CertReports holds 1 registry-verified row for GRUPO M, drawn from the Visa Global Registry. GRUPO M is listed in the Visa Global Registry of Service Providers for PCI DSS (Listed on the Visa Global Registry as PCI DSS validated through 2026-10-31), dated 23 Feb 2007, assessed by A-LIGN Compliance and Security, Inc., dba A-LIGN. No public evidence was found for SOC 2, ISO/IEC 27001, HIPAA and GDPR as of 26 Oct 2026; that is a gap in the public record, not a finding of non-coverage, and the vendor can supply it under NDA.
- PCI DSS: Listed on the Visa Global Registry as PCI DSS validated through 2026-10-31, verified as of 26 Oct 2026
Facts only, each dated; nothing here is inferred, scored or advised.
Evidence count
1verified rows
Compliance grid
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this.
Subprocessors
No subprocessor list captured yet.
Change history
- 19 Oct 2026PCI DSS state changedState moved from Expired to Verified.
- 19 Oct 2026PCI DSS auditor changedAuditor changed from 1stSecureIT LLC (dba GM SECTEC) to A-LIGN Compliance and Security, Inc., dba A-LIGN.
- 18 Sep 2026First indexed by CertReports1 evidence row across 1 framework entered the index.
Evidence against regulations
All regulations for GRUPO MHow much of each regulation’s vendor requirements GRUPO M’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read