Worldpay
Global payments technology and acquiring provider processing over 40 billion transactions a year across 146 countries and 135 currencies.
Certifications & Accreditations
| Certification | Certifying Body | Scope | Achieved | Expiry | Status |
|---|---|---|---|---|---|
| ISO 27001:2013 | Not stated by vendor | Worldpay’s DPA states its information security practices are "compliant with" ISO 27001:2013 — an alignment claim against a superseded version, not a statement of certification. No body, number, scope or dates. | — | — | Current |
| PCI DSS Level 1 | No QSA named | Claimed on the Worldpay for Platforms resource centre since 2010. Scope is Worldpay for Platforms, not necessarily all Worldpay entities. No AoC status or dates. | — | — | Current |
Compliance Frameworks
Legal & Privacy
- DPA Template View ↗
Contact & Responsible Disclosure
- Responsible Disclosure View policy ↗
- Bug Bounty Platform HackerOne (vulnerability disclosure)
Two hygiene findings worth raising
1. **The security.txt is stale and points at the former parent.** worldpay.com/.well-known/security.txt routes Contact and Policy to fisglobal.com and carries `Expires: 2023-12-31`.
2. **The DPA cites ISO 27001:2013**, a superseded version, and uses "compliant with" rather than "certified to".
⚠️ **Do not cite Worldpay SaferPayments as evidence of Worldpay’s own compliance** — it is a merchant PCI compliance management product Worldpay sells, and contains no statement about Worldpay’s own status.
Ownership: GTCR 55% / FIS 45% as at the Feb 2024 sale completion; Worldpay has since been subject to a further acquisition process — **verify current ownership**. An FCA Register entry exists for WorldPay (UK) Limited; the FRN was not confirmed.
Copyright © 2026 SnapGRC