Paddle

Paddle publicly advertises 4 compliance frameworks through a trust center hosted by Vanta.

Fintech & Financial Services

4

Advertised frameworks

Vanta

Trust center platform

February 2026

First observed

Founding to trust center

Increase revenue, reduce risk and reduce cost with Paddle, the payment solution powering global revenue for n8n, Letterboxd & AdGuard. One platform that handles billing, tax and compliance.

Summary from the company’s website.

Publicly advertised compliance posture

As observed on September 8, 2026 on the organization’s public trust center.

  • SOC 2

    Independent CPA audit of controls for security, availability, and confidentiality.

  • PCI DSS

    Payment card industry standard for handling cardholder data securely.

  • GDPR

    Public claim of alignment with the EU General Data Protection Regulation.

  • CCPA

    Publicly advertised on the organization’s trust center.

Compliance timeline

  1. February 2026

    Trust center first observed in public web archives

  2. September 8, 2026

    Posture last observed by Trust Index

Subprocessors

Third parties Paddle discloses on its trust center. Linked entries have their own profile in the Trust Index.

48% chain trust: 15 of 31 disclosed subprocessors are themselves in the Trust Index.

  • Amazon Web Services Cloud hosting provider
  • Snowflake Business Intelligence
  • Onfido KYB/KYC Service
  • Salesforce CRM
  • Cloudflare Content delivery networkand web security platform
  • Google Cloud productivity and collaboration tools
  • Wiz Security
  • TokenEx Tokenisation Service
  • PayPal Payment Service Provider
  • Stripe Payment Service Provider
  • Checkout.com Payment Service Provider
  • Worldpay Payment Service Provider
  • Zendesk Customer Support Service
  • Kustomer Customer Support Service
  • Mobly Event lead capture and management platform
  • Gong Sales intelligence and conversation analytics platform
  • Rulai Customer Support Chatbot
  • Dust AI tooling and workflow processing
  • Mailgun Email Service
  • Postmark Email Service
  • Omni Business intelligence
  • HubSpot CRM
  • MixPanel Data analytics
  • incident.io Status Page
  • Vanta Security
  • Very Good Security Finance and payments
  • SUMSUB Identity verification (KYC/KYB) to support onboarding and fraud prevention.
  • Middesk Business verification (KYB) and company due diligence to support merchant onboarding and compliance checks.
  • Shufti Identity verification (KYC/KYB) for onboarding and fraud prevention.
  • AI Node (Gemini 2.5 model) AI-assisted processing within the Taktile workflow (e.g., extraction/standardisation, classification, or decision-support on onboarding inputs).
  • Taktile Decisioning/orchestration platform for customer (seller) onboarding.

Named as a subprocessor by

Organizations in the Trust Index that disclose Paddle as a subprocessor.

About this data

The Trust Index reports only what organizations publicly advertise. A missing framework here means no public claim was observed as of September 8, 2026; it never means an organization is non-compliant. HIPAA entries reflect a public claim of compliance; no HIPAA certification exists. Corrections are welcome and verified against public evidence. Read the full methodology.

More in Fintech & Financial Services

How can we work together

Schedule a discovery session

A complimentary, exploratory meeting to discuss your business goals and challenges, identify potential solutions, and determine if our services align with your needs.

Hire us for a project

Augmenting a specific initiative or project, leveraging our expertise and resources to deliver a defined outcome.

Retain us long term

Ongoing collaboration and support through regular meetings, check-ins, and access to our team's collective knowledge and experience, empowering you to make informed decisions and drive sustained growth.