Due diligence before engaging a provider
An established process is implemented for engaging third-party service providers, including proper due diligence before engagement.
Independent security assurance
No public evidenceA current SOC 2 report or ISO/IEC 27001 certificate is the usual evidence that a supplier operates appropriate security measures.
Current PCI DSS validation
Evidence foundA current registry listing or attestation of compliance (AOC) shows the provider’s PCI DSS status for the year.
- PCI DSSVendor states PCI DSS 4.0.1 on its trust centreas of 21 Sep 2026
- PCI DSS attestation of compliance"2026_RYCOR_PCI-DSS-v4.0.1 - Attestation of Compliance" on the trust centreas of 21 Sep 2026
- PCI DSS attestation of compliance"PCI DSS v4.0 ROC - AOC Service Providers - Rycor Solutions Inc.pdf" on the trust centreas of 21 Sep 2026
- PCI DSS attestation of compliance"PCI-DSS-v4-0-1-ROC-AOC-Rycor Solution Inc" on the trust centreas of 21 Sep 2026
- and 1 more