PayPal
Online payments, checkout and money transfer for businesses and consumers, including Braintree, Zettle card readers and PayPal Business.
Certifications & Accreditations
| Certification | Certifying Body | Scope | Achieved | Expiry | Status |
|---|---|---|---|---|---|
| PCI DSS Level 1 Service Provider | Qualified Security Assessor | PayPal and Braintree payment processing and cardholder data environments | — | — | Current |
| SOC 1 Type II and SOC 2 Type II | Independent third-party auditor | PayPal payment services; reports available to customers under NDA | — | — | Current |
| ISO/IEC 27001 | Accredited third-party certification body | PayPal information security management system - confirm entity and product scope | — | — | Current |
Compliance Frameworks
PCI DSS v4.0
Full
PCI DSS Level 1 service provider
SOC 2 Type 2
Full
ISO/IEC 27001:2022
Full
GDPR 2016/679
Full
PayPal generally acts as an independent controller for payment data; review its data protection terms
Sarbanes-Oxley (SOX)
Full
PayPal Holdings is a US-listed company subject to SOX
Copyright © 2026 SnapGRC