Security / trust page — Checkout.com

Cited by

Facts read from this source

• Platform description Report an error

  “Checkout.com is a global payments platform that includes a gateway, acquirer, and processor. Our platform supports 145 currencies, major local payment methods, and fraud prevention.”

• Certifications Report an error

  “SOC 1 Type II SOC 2 Type II PCI DSS PCI 3DS ISO 27001:2022 GDPR CCPA COMPLIANT CCPA UK Cyber Essentials”

• SOC 2 period Report an error

  “SOC 2 Type II Certification: June 1, 2024 - November 30, 2024”

• Pci dss level Report an error

  “Checkout.com has successfully certified for PCI DSS as a Level 1 Service Provider in 2025!”

• Cyber essentials plus renewed Report an error

  “Checkout.com is pleased to announce that we have successfully renewed our Cyber Essentials Plus (CE+) certification for the year 2026.”

• Security controls infrastructure Report an error

  “Infrastructure security Unique production database authentication enforced Encryption key access restricted Unique account authentication enforced View 18 more Infrastructure security controls”

• Security controls organizational Report an error

  “Organizational security Asset disposal procedures utilized Production inventory maintained Portable media encrypted View 11 more Organizational security controls”

• Security controls product Report an error

  “Product security Data encryption utilized Control self-assessments conducted Penetration testing performed View 2 more Product security controls”

• Security controls internal Report an error

  “Internal security procedures Continuity and Disaster Recovery plans established Continuity and Disaster Recovery plans tested Cybersecurity insurance maintained View 33 more Internal security procedures controls”

• Privacy controls Report an error

  “Data and privacy Data retention procedures established Customer data deleted upon leaving Data classification policy established”

• Collected Report an error

  “Customer personally identifiable information Credit card information Merchant personally identifiable information”

• Named Report an error

  “Amazon Web Services • Cloud Storage Platform US/EEA/UK *Acquiring transaction traffic for US merchants will be processed via AWS in the US and EU Checkout Technology Ltd. • Payment Processing Services EEA/UK This wholly-owned subsidiary provides technology and security services to the rest of the Checkout Payments Group. Google Cloud Platform • BigQuery EEA/UK (BigQuery)”

• Data location Report an error

  “Our E-Commerce Infrastructure is hosted in the EU regions of the AWS Cloud Platform. AWS ensures compliance with PCI-DSS Level 1, ISO, and SOC standards, alongside various other industry-standard best practices.”

• Encryption Report an error

  “All cardholder data is protected according to PCI-DSS requirements. Transmission of customer transactions occurs via HTTPS using TLS 1.2+. Cardholder data is encrypted using AES-256.”

• Breach monitoring Report an error

  “Checkout.com has mechanisms to ensure that any potential or actual data breach incidents are detected and reported to the Information Security team.”

• Siem monitoring Report an error

  “System and security logs are collected and sent to our SIEM solution for correlation and monitoring. These logs are taken from a variety of systems including traffic flow logs, WAF, access logs, and instance event logs. The SIEM system is monitored by a Security Operations team.”

• Bug bounty Report an error

  “Bug Bounty Program”

• Identity verification policies Report an error

  “Please view the Resources and FAQ tabs for more information about Ubble / Checkout's Identity Verification policies and practices.”

• Resources available Report an error

  “SOC 2 Type II Checkout - SOC 2 Type II Report SOC 2 Type II - Bridge Letter SOC 1 Type II Checkout - SOC 1 Type 2 Report SOC 1 Type II - Bridge Letter ISO 27001 ISO 27001:2022 Certificate - Checkout.com ISO 27001:2022 Statement of Applicability - Checkout.com PCI DSS PCI DSS 4.0 Certificate 2026- Checkout.com.pdf PCI DSS AOC 2026- Checkout.com .pdf PCI 3DS PCI 3DS AoC 2026”

• Help portal Report an error

  “Visit support.checkout.com for help related to our services.”

1 fact read from this page is not shown because it could not be confirmed on the page as captured.