Moon Pay Ltd

Reaffirming our commitment to payment data security MoonPay is proud to announce that we have achieved PCI DSS 4.0.1 recertification, the latest version of the Payment Card Industry Data Security Standard! After first achieving PCI DSS 4.0 in March 2025, we have successfully maintained our compliance under the updated 4.0.1 standard. This latest version does not introduce new requirements but instead refines the original framework – clarifying intent, improving guidance, and supporting more consistent implementation. We also continue to maintain our PCI Level 1 status, the most rigorous of the four compliance levels. "Re-certifying under PCI DSS 4.0.1 reflects our continued commitment to security excellence," said Doug Innocenti, Chief Information Security Officer at MoonPay. "As the standard evolves, so do we — staying ahead of changes so our customers can transact with confidence." This milestone builds on our broader security program, which includes SOC 2 Type 2, ISO 27001, ISO 27018, and ISO 27701 certifications. We remain committed to upholding the highest standards of payment security for every user on our platform.

We are excited to announce that MoonPay has successfully completed its SOC 2 Type 2 recertification! This achievement underscores our unwavering commitment to maintaining the highest standards in information security and operational excellence. What Does SOC 2 Type 2 Mean for You? SOC 2 Type 2 certification is a critical benchmark that evaluates our effectiveness in managing and protecting sensitive data over a specified period. It not only assesses security but also ensures our commitment to privacy, processing integrity, and confidentiality. Why This Matters As part of the AICPA’s Service Organization Control reports, SOC 2 Type 2 provides assurance that our control environment consistently meets rigorous industry standards. Here are some key highlights: - Enhanced Security Protocols: Our robust security measures protect your data effectively. - Long-Term Commitment: This certification reflects our sustained efforts towards operational excellence. - Customer Trust: Achieving this certification reinforces our commitment to transparency and accountability. A Team Effort We’d like to extend our gratitude to the exceptional team at MoonPay who worked diligently to achieve this milestone. Your commitment to ensuring the safety and reliability of our platform is invaluable. Looking Ahead At MoonPay, our mission is to provide a secure and seamless payment platform for our…

At MoonPay, trust, security, and innovation are at the heart of everything we do. We’re thrilled to announce that we’ve achieved PCI DSS 4.0 - Level 1 Certification, the highest level of compliance within the payment card industry. This milestone underscores our ongoing commitment to protecting payment card data and delivering seamless, secure experiences for our users. The latest PCI DSS 4.0 standard not only solidifies existing protocols but also introduces stricter measures to ensure even greater protection against evolving threats. ### Why This Achievement Matters As global transactions continue to grow at an exponential rate, the risks associated with payment fraud are becoming increasingly sophisticated. By adhering to the new global standard for safeguarding payment card data, we are reinforcing defenses and proactively adapting to a fast-changing landscape. Here’s what this certification means for our users and partners: - Enhanced Data Security: Strengthened measures to protect sensitive payment card information. - Cutting-edge Compliance: Compliance with the most advanced standards in the industry. - Customer Confidence: Demonstrating our dedication to building and maintaining trust. ### A Team Effort Our PCI DSS 4.0 - Level 1 Certification was made possible by the relentless efforts of our incredible team. A special shoutout to David Silva Cordeiro, Jonathan…

MoonPay is proud to announce that we have achieved ISO 27018 certification. This internationally recognized standard demonstrates MoonPay's commitment to protecting the privacy of personally identifiable information (PII) processed in the cloud. The certification builds upon our existing robust security posture, including ISO27001, SOC 2 Type 2 and PCI Level 1 certifications. ISO 27018 provides a framework for organizations to implement and manage data privacy controls specifically for PII held in the cloud. This certification underscores our dedication to transparency, accountability, and the highest standards of data protection for its customers. "We remain committed to upholding the best standards of data security and privacy. As we continue to build on our ISO compliance, we’re ensuring the highest level of trust and confidence for our customers and partners worldwide.” said Doug Innocenti, MoonPay’s Chief Information Security Officer. For media inquiries, please contact [media@moonpay.com](mailto:media@moonpay.com).

MoonPay is proud to announce that we are now SOC 2 Type 2 certified! SOC 2 Type 2 stands as one of the most prominent and globally respected benchmarks for information security management. As part of the AICPA’s Service Organization Control reports, it was designed to help organizations manage and protect sensitive information. Whereas SOC 2 Type 1 audits assess MoonPay at a single point in time, SOC 2 Type 2 measures effectiveness over a period of time (typically 3-12 months). This provides a more comprehensive assessment of MoonPay’s control environment, going beyond security to address availability, processing integrity, confidentiality, and privacy, and allows us to demonstrate our long-term resilience in protecting sensitive data. “With the SOC 2 Type 2 certification, MoonPay will continue to uphold the highest standards in security, technology risk management, operational excellence, and the protection of customer data,” said Doug Innocenti, Chief Information Security Officer at MoonPay. “This achievement reflects our unwavering dedication to exemplary security and reinforces our commitment to providing the most safe and reliable services.” Last year MoonPay earned its ISO 27001 certification, often referred to as the gold standard for information security. By earning this certification, we have demonstrated our commitment to protecting customer data and maintaining…