Due diligence before engaging a provider
An established process is implemented for engaging third-party service providers, including proper due diligence before engagement.
Independent security assurance
Evidence foundA current SOC 2 report or ISO/IEC 27001 certificate is the usual evidence that a supplier operates appropriate security measures.
- SOC 2Vendor states SOC 2 on its trust centreas of 21 Sep 2026
- SOC 2 report"2023 SOC 2 Type II Report" on the trust centreas of 21 Sep 2026
- SOC 2 report"2024 SOC 2 Type II Report" on the trust centreas of 21 Sep 2026
- SOC 2 report"2025 SOC 2 Type II Report" on the trust centreas of 21 Sep 2026
- and 2 more
Current PCI DSS validation
No public evidenceA current registry listing or attestation of compliance (AOC) shows the provider’s PCI DSS status for the year.