Passport Labs
Security and trust center evidence
Passport is the #1 parking compliance platform for cities — mobile payments, digital enforcement, permitting, and curbside
Summary
Passport Labs has 1 registry-verified row and 2 vendor-stated rows, and 1 expired in the CertReports index, last verified 2 Nov 2026. The strongest row is SOC 2: Vendor states SOC 2 on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 2 Nov 2026, CertReports holds 1 registry-verified row, 2 vendor-stated rows and 1 expired row for Passport Labs, drawn from its trust centre (Drata), the Visa Global Registry and the Data Privacy Framework list. Passport Labs is listed in the Visa Global Registry of Service Providers for PCI DSS (Listed on the Visa Global Registry as PCI DSS validated through 2027-01-31), dated 13 Feb 2018, assessed by Bonadio & Co. Passport Labs states on its trust centre that it holds a SOC 2 Type II report and a SOC 1 Type II report, captured 21 Sep 2026; these are vendor statements, not independent confirmations. Passport Labs previously appeared with EU-US Data Privacy Framework evidence, but the listing is no longer active and CertReports found no renewal as of 2 Nov 2026. No public evidence was found for ISO/IEC 27001, HIPAA, GDPR and FedRAMP as of 2 Nov 2026; that is a gap in the public record, not a finding of non-coverage, and the vendor can supply it under NDA.
- PCI DSS: Listed on the Visa Global Registry as PCI DSS validated through 2027-01-31, verified as of 2 Nov 2026
- SOC 2: Vendor states SOC 2 on its trust centre, vendor-stated as of 21 Sep 2026
- SOC 1: Vendor states SOC 1 on its trust centre, vendor-stated as of 21 Sep 2026
Facts only, each dated; nothing here is inferred, scored or advised.
Among compliance and grc vendors
1verified rows
Category median 1, across 179 indexed compliance and grc vendors. Passport Labs has more verified rows than 47 percent of them.
curbside managementdigital enforcementmunicipal complianceparking management
Compare with similar vendors
Pick your own comparisonCompliance grid
SOC 2Vendor-statedVendor states SOC 2 on its trust centre
as of 21 Sep 20262 sources
PCI DSSVerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-01-31
as of 2 Nov 20266 sources · Bonadio & Co. LLP
SOC 1Vendor-statedVendor states SOC 1 on its trust centre
as of 21 Sep 20262 sources
EU-US Data Privacy FrameworkExpiredInactive
as of 2 Nov 20261 source
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this. Check the vendor trust centre.
Subprocessors
No subprocessor list captured yet.
Change history
- 19 Oct 2026PCI DSS auditor changedAuditor changed from CIPHER to Bonadio & Co. LLP.
- 12 Oct 2026PCI DSS auditor changedAuditor changed from Auditsafe Auditoria e Consultoria em Riscos Corporativos Ltda to CIPHER.
- 12 Oct 2026PCI DSS renewedExpiry moved from 2026-12-31 to 2027-02-28.
- 5 Oct 2026PCI DSS auditor changedAuditor changed from A-LIGN Compliance and Security, Inc., dba A-LIGN to Auditsafe Auditoria e Consultoria em Riscos Corporativos Ltda.
- 5 Oct 2026PCI DSS renewedExpiry moved from 2026-09-30 to 2026-12-31.
- 18 Sep 2026SOC 1 evidence addedA SOC 1 row entered the index with state Vendor-stated.
- 18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
Similar vendors with evidence
Related by product tags and the Compliance and GRC category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Continental Payment
Compliance and GRC
Your Payment Service Provider | Payment | c-paynow | Risk Management | Credit Assessment | Receivables Management | Debt Collection |
Wingspan Networks
Compliance and GRC
Wingspan runs onboarding, payments, compliance, and tax filing for 1099 contractors, international contractors, and contingent W-2
Key IVR
Compliance and GRC
Cloud-based Secure Payment Solutions to Organisations and Contact Centers to ensure PCI compliance and streamline the payment
Cleverbridge
Compliance and GRC
Manage payments, subscriptions, tax, and compliance through a single Merchant of Record (MoR)
Evidence against regulations
All regulations for Passport LabsHow much of each regulation’s vendor requirements Passport Labs’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read