Shopify

Compliance evidence

Shopify Inc. is a Canadian multinational e-commerce company headquartered in Ottawa, Ontario that operates a cloud e-commerce management

shopify.com E-commerceLast verified 2 Nov 2026

Request the report Are you Shopify?

Compliance grid

PCI DSSVerified
Listed on the Visa Global Registry as PCI DSS validated through 2027-06-30
as of 2 Nov 2026
2 sources · Coalfire Systems, Inc
EU-US Data Privacy FrameworkExpired
Inactive
as of 2 Nov 2026
1 source
CCPA / CPRAVendor-stated
Vendor states CCPA on its trust centre
as of 2 Nov 2026
19 sources

No public evidence yet for HIPAA, SOC 2, GDPR, FedRAMP, ISO 27001, CSA STAR, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Official framework marks identify the scheme each row is about; the CertReports state chip beside each mark is our assessment of the public evidence. How states are decided.