Skip to main content
Spreedly logo

Spreedly

Security and trust center evidence

Tens of thousands of global businesses depend on our robust orchestration platform, diverse ecosystem of services, and unmatched market

spreedly.comPaymentsLast verified 26 Oct 2026

Summary

Spreedly has 3 registry-verified rows in the CertReports index, last verified 26 Oct 2026. The strongest row is PCI DSS: Listed on the Visa Global Registry as PCI DSS validated through 2027-08-31. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

As of 26 Oct 2026, Spreedly is listed in the Visa Global Registry as PCI DSS validated, with the current certification period running through 31 Aug 2027 and the assessment performed by VikingCloud, Inc. As of 26 Oct 2026, Spreedly is listed in the CSA STAR registry as having completed a STAR Level 1 self-assessment (CAIQ), submitted 7 Dec 2022. As of 26 Oct 2026, Spreedly is listed in the EU-US Data Privacy Framework registry as active across the EU-US, Swiss-US, and UK Extension certifications, a status issued 29 Nov 2016 and set to expire 28 Apr 2027. No SOC 2 evidence was found for Spreedly as of 26 Oct 2026. No HIPAA evidence was found for Spreedly as of 26 Oct 2026.

  • PCI DSS: listed in Visa Global Registry, validated through 31 Aug 2027 (as of 26 Oct 2026)
  • CSA STAR: Level 1 self-assessment (CAIQ) listed, submitted 7 Dec 2022 (as of 26 Oct 2026)
  • EU-US Data Privacy Framework: listed as active, expires 28 Apr 2027 (as of 26 Oct 2026)

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 27 Oct 2026; it is regenerated whenever a row changes.

Among payments vendors

3verified rows

Category median 1, across 737 indexed payments vendors. Spreedly has more verified rows than 100 percent of them.

payment gatewaypayment orchestrationpci compliancetokenization

Compliance grid

Subprocessors

No subprocessor list captured yet.

Change history

  1. 26 Oct 2026PCI DSS renewedExpiry moved from 2027-04-30 to 2027-08-31.
  2. 26 Oct 2026PCI DSS auditor changedAuditor changed from CYBERCUBE SERVICES PVT. LTD. to VikingCloud, Inc..
  3. 19 Oct 2026PCI DSS renewedExpiry moved from 2026-10-31 to 2027-04-30.
  4. 19 Oct 2026PCI DSS auditor changedAuditor changed from Sikich LLP to CYBERCUBE SERVICES PVT. LTD..
  5. 12 Oct 2026PCI DSS auditor changedAuditor changed from SISA to Sikich LLP.
  6. 29 Sep 2026PCI DSS renewedExpiry moved from 2026-10-31 to 2027-08-31.
  7. 29 Sep 2026PCI DSS auditor changedAuditor changed from Sikich LLP to SISA.
  8. 18 Sep 2026First indexed by CertReports3 evidence rows across 3 frameworks entered the index.

Similar vendors with evidence

Related by product tags and the Payments category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.

Evidence against regulations

All regulations for Spreedly

How much of each regulation’s vendor requirements Spreedly’s public evidence reaches.

All articles