Due diligence before engaging a provider
An established process is implemented for engaging third-party service providers, including proper due diligence before engagement.
Independent security assurance
No public evidenceA current SOC 2 report or ISO/IEC 27001 certificate is the usual evidence that a supplier operates appropriate security measures.
Current PCI DSS validation
Evidence foundA current registry listing or attestation of compliance (AOC) shows the provider’s PCI DSS status for the year.
- PCI DSSListed on the Visa Global Registry as PCI DSS validated through 2027-03-31as of 2 Nov 2026
- PCI DSS attestation of compliance"PCI DSS (AOC)" on the trust centreas of 21 Sep 2026
- PCI DSS attestation of compliance"PCI DSS v4.0.1" on the trust centreas of 21 Sep 2026