No public evidencePayCom US and GDPR
CertReports found no public GDPR evidence for PayCom US as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Issued or listed
- 2 Nov 2023
- Scope
- The Pay.com group of companies is an international group of payments processing companies. The holding company, Pay Technologies (UK) Limited, is incorporated in the United Kingdom. This is the 100% owner of Paycomcy Limited and Pay Technologies (CY) Limited, both Cypriot companies, and Pay.Com US, Inc. Currently, data flows are segregated between EU/UK business and USA business, in order that data not be shared between the organisations. However, it would potentially improve operational efficiencies of the group if data can be shared cross-border. Currently envisaged within the scope of this sharing are: • Details of sales opportunities, for example Merchants which have an international presence. Currently the US ‘arm’ of any Merchant is dealt with purely by Pay.Com US, Inc., whereas the European ‘arm’ will be handled by EU/UK entities. It would be helpful to be able to record data relating to the Merchant group on a common resource, including Salesforce, Hubspot and Pay.com’s databases hosted in the EU and USA. • Payment requests are processed via data centres in the EU and US. Currently the US data centres are under the control of Paycomcy Limited but it would be helpful for the Pay group to maintain a local payments processing presence in the US, particularly for cross—border payments.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Pay.Com US, Inc.: Inactive | Live pagesha256 cb58d54228 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is PayCom US GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags) whose GDPR row is verified or vendor-stated, ranked by similarity.
No same-category vendor has GDPR evidence in the index yet.