SWITCHFLY
Security and trust center evidence
Switchfly: Empowering employee rewards and loyalty programs with travel experiences for members, enhancing benefits with diverse travel
Summary
SWITCHFLY has 1 registry-verified row, and 1 expired in the CertReports index, last verified 2 Nov 2026. The strongest row is PCI DSS: Listed on the Visa Global Registry as PCI DSS validated through 2027-09-30. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 2 Nov 2026, CertReports holds 1 registry-verified row and 1 expired row for SWITCHFLY, drawn from the Visa Global Registry and the Data Privacy Framework list. SWITCHFLY is listed in the Visa Global Registry of Service Providers for PCI DSS (Listed on the Visa Global Registry as PCI DSS validated through 2027-09-30), dated 12 Aug 2022, assessed by Globaltech & Infosec Private Limited. SWITCHFLY previously appeared with EU-US Data Privacy Framework evidence, but the listing is no longer active and CertReports found no renewal as of 2 Nov 2026. No public evidence was found for SOC 2, ISO/IEC 27001, HIPAA and GDPR as of 2 Nov 2026; that is a gap in the public record, not a finding of non-coverage, and the vendor can supply it under NDA.
- PCI DSS: Listed on the Visa Global Registry as PCI DSS validated through 2027-09-30, verified as of 2 Nov 2026
- EU-US Data Privacy Framework: Inactive, expired as of 2 Nov 2026
Facts only, each dated; nothing here is inferred, scored or advised.
Among benefits and insurance vendors
1verified rows
Category median 1, across 24 indexed benefits and insurance vendors. SWITCHFLY has more verified rows than 29 percent of them.
employee rewardsincentivesloyalty programstravel benefits
Compare with similar vendors
Pick your own comparisonCompliance grid
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this.
Subprocessors
No subprocessor list captured yet.
Change history
- 26 Oct 2026PCI DSS renewedExpiry moved from 2026-10-31 to 2027-09-30.
- 26 Oct 2026PCI DSS auditor changedAuditor changed from Vectra Corporation Ltd. to Globaltech & Infosec Private Limited.
- 19 Oct 2026PCI DSS auditor changedAuditor changed from Paladion Networks Private LTD to Vectra Corporation Ltd..
- 18 Sep 2026First indexed by CertReports2 evidence rows across 2 frameworks entered the index.
Similar vendors with evidence
Related by product tags and the Benefits and insurance category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Nreach Online Services Private
xoxoday.com
The AI-first platform for rewards, incentives, loyalty, and
Collinson
Travel and hospitality
We are a global, privately-owned company helping the world travel with ease and
Inmar
Research and data providers
Inmar Intelligence leverages AI, analytics and technology to power reliable, dynamic data-driven business solutions for brands, retailers
somosredcompanies
Marketing
Somos una empresa de marketing y tecnologÃa, expertos en provocar ventas y la permanencia de sus clientes a través de soluciones
Evidence against regulations
All regulations for SWITCHFLYHow much of each regulation’s vendor requirements SWITCHFLY’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read