Skip to main content
LITTLEPAY logo

LITTLEPAY

Security and trust center evidence

Payments infrastructure for transit and

littlepay.comDevOps and observabilityLast verified 2 Nov 2026
Request the report Are you LITTLEPAY?

Summary

PCI DSS mark, CertReports state Verified as of 2 Nov 2026PCI DSSVerifiedISO/IEC 27001 mark, CertReports state Vendor-stated as of 21 Sep 2026ISO 27001Vendor-stated

LITTLEPAY has 1 registry-verified row and 1 vendor-stated row in the CertReports index, last verified 2 Nov 2026. The strongest row is PCI DSS: Listed on the Visa Global Registry as PCI DSS validated through 2027-04-30. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

As of 2 Nov 2026, CertReports holds 1 registry-verified row and 1 vendor-stated row for LITTLEPAY, drawn from the Visa Global Registry and its trust centre (Vanta). LITTLEPAY is listed in the Visa Global Registry of Service Providers for PCI DSS (Listed on the Visa Global Registry as PCI DSS validated through 2027-04-30), dated 5 Jun 2017, assessed by PCI Consulting Australia PTY, LTD. LITTLEPAY states on its trust centre that it holds an ISO/IEC 27001 certificate, captured 21 Sep 2026; these are vendor statements, not independent confirmations. No public evidence was found for SOC 2, HIPAA, GDPR and FedRAMP as of 2 Nov 2026; that is a gap in the public record, not a finding of non-coverage, and the vendor can supply it under NDA.

  • PCI DSS: Listed on the Visa Global Registry as PCI DSS validated through 2027-04-30, verified as of 2 Nov 2026
  • ISO/IEC 27001: Vendor states ISO 27001:2022 on its trust centre, vendor-stated as of 21 Sep 2026

Facts only, each dated; nothing here is inferred, scored or advised.

Among devops and observability vendors

1verified rows

Category median 1, across 193 indexed devops and observability vendors. LITTLEPAY has more verified rows than 44 percent of them.

contactless paymentsfare collectionopen loop paymentstransit payments

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for HIPAA, SOC 2, GDPR, FedRAMP, CSA STAR, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Subprocessors (7)

  • Amazon Web Services logo
    Amazon Web ServicesCloud provider · Ireland (EEA)
  • CC
    CardinalCommerce CorporationCard authentication · EEA
  • CF
    CrowdStrike FalconSecurity monitoring · UK
  • HO
    HoneycombCloud monitoring · UK
  • LP
    Littlepay Pty LtdShared intragroup services · Australia
  • Okta logo
    OktaIdentity provider · EEA / UK
  • ZE
    ZendeskCustomer support · EEA

Change history

  1. 19 Oct 2026PCI DSS renewedExpiry moved from 2026-10-31 to 2027-04-30.
  2. 19 Oct 2026PCI DSS auditor changedAuditor changed from VikingCloud, Inc. to PCI Consulting Australia PTY, LTD.
  3. 12 Oct 2026PCI DSS auditor changedAuditor changed from PCI Consulting Australia PTY, LTD to VikingCloud, Inc..
  4. 18 Sep 2026Subprocessor added: CrowdStrike FalconCrowdStrike Falcon appeared on the subprocessor list.
  5. 18 Sep 2026Subprocessor added: HoneycombHoneycomb appeared on the subprocessor list.
  6. 18 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Vendor-stated.
  7. 18 Sep 2026Subprocessor added: OktaOkta appeared on the subprocessor list.
  8. 18 Sep 2026Subprocessor added: ZendeskZendesk appeared on the subprocessor list.
  9. 18 Sep 2026Subprocessor added: Littlepay Pty LtdLittlepay Pty Ltd appeared on the subprocessor list.
  10. 18 Sep 2026Subprocessor added: Amazon Web ServicesAmazon Web Services appeared on the subprocessor list.

Similar vendors with evidence

Related by product tags and the DevOps and observability category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.

SPX Genfare Genfare logo

SPX Genfare Genfare

Payments

Genfare is a leader in solution-based fare

PCI DSS mark, CertReports state Verified
1 verified2 Nov 2026
Apptech Payments logo

Apptech Payments

DevOps and observability

AppTech Payments Corp provides multi-bank payment infrastructure designed for compliance, scale, and operational

PCI DSS mark, CertReports state Verified
1 verified2 Nov 2026
A360 DOO BEOGRAD logo

A360 DOO BEOGRAD

DevOps and observability

A360 delivers secure, scalable payment infrastructure for banks, processors, national payment operators and fintech

PCI DSS mark, CertReports state Verified
1 verified2 Nov 2026
Alacriti Payments logo

Alacriti Payments

DevOps and observability

Modernize your payments infrastructure with Alacriti's unified money movement

PCI DSS mark, CertReports state Verified
1 verified2 Nov 2026

Evidence against regulations

All regulations for LITTLEPAY

How much of each regulation’s vendor requirements LITTLEPAY’s public evidence reaches.

Reviewing a vendor on public evidence

All articles