Snapshot 157112
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Opens in new tab |Duffel's Trust Center Duffel Duffel is focused on democratising the travel industry through the use of easy-to-use APIs. We’re building infrastructure that underpins the travel industry in an effort to make it accessible for anyone who wishes sell travel. At Duffel, security is one of our top priorities. We care about protecting our systems and data, as well as our users and their data from nefarious activities. We know how important security is, and we put a lot of effort into ensuring that all of the appropriate safeguards are in place to support our business. security@duffel.com Privacy Policy Compliance PCI DSS 4.0.1 Resources View all 2026 Security Assessment - Duffel PCI Cardholder Data Environment 2026 PCI DSS v4.0.1 Attestation of Compliance 2025 Security Assessment - Duffel Production Environment (non-PCI) Controls Updated about 1 hour ago View all Infrastructure security Third party access monitored Third party access enabled only as needed Multiple designated time servers synchornized View 16 more Infrastructure security controls Organizational security Security policies and procedures for identification and authentication exist Internal security procedures System configuration standards include common system settings System configuration standards are applied Enabled functions documented View 7 more Internal security procedures controls Data and privacy Cardholder data deletion process exists Cardholder data deletion process exists for non-protocol deletions Stored cardholder data meets policy requirements Data collected Customer personally identifiable information Credit card information Personal health information Subprocessors View all Active Campaign LLC • Marketing email and automation US Customer data Anthropic • AI assistance (e.g. Notion connector) US Customer / User data Cloudflare • Platform security US Customer / User / Traveller Data Evervault Limited • Payment processing EU Cardholder data FAQ View all Updates View all General Update to Sub-Processors Published April 29, 2026 Hello, We are sending this message to let you know that we have made some changes to our current list of Sub-Processors to add the following: - Zoom for video conferencing - Notion for knowledge hub - Anthropic for AI assistance (e.g. Claude connectors are enabled in Notion/Slack) - Seon for fraud detection - Cloudflare for Duffel Platform security. Continued use of Duffel Services without objection will be deemed acceptance of the changes noted. If you have any questions or concerns about these changes, please contact us at privacy@duffel.com. Thanks, Duffel Legal Team Privacy Update to our Sub-Prcoessors List Published March 11, 2026 Hello, We are sending this message to let you know that we have made some changes to our current list of Sub-Processors to add the following: - IGT for Traveller Support; - Hybrid Travel d.b.a. Air1 as an aggregator providing access to certain Suppliers; - Plain and Linear for Customer support communications. Continued use of Duffel Services without objection will be deemed acceptance of the changes noted. If you have any questions or concerns about these changes, please contact us at privacy@duffel.com. Thanks, Duffel Legal Team Privacy Update to our Sub-Processors List Published February 26, 2026 Our list of Sub-Processors is available on this Trust Center. We will continue to update you of any changes to the Sub-Processor list in accordance with clause 2.6 of our DPA, but this will be actioned via the Trust Center rather than via email. Action required Therefore, in order to receive these updates we kindly ask you to click on the bell next to "Request access" at the top of the page. If you have any questions or concerns, please contact us at privacy@duffel.com. Read more about Update to Sub-Processors Opens in new tab |Duffel's Trust Center Duffel Duffel is focused on democratising the travel industry through the use of easy-to-use APIs. We’re building infrastructure that underpins the travel industry in an effort to make it accessible for anyone who wishes sell travel. At Duffel, security is one of our top priorities. We care about protecting our systems and data, as well as our users and their data from nefarious activities. We know how important security is, and we put a lot of effort into ensuring that all of the appropriate safeguards are in place to support our business. security@duffel.com Privacy Policy Compliance PCI DSS 4.0.1 Resources View all 2026 Security Assessment - Duffel PCI Cardholder Data Environment 2026 PCI DSS v4.0.1 Attestation of Compliance 2025 Security Assessment - Duffel Production Environment (non-PCI) Controls Updated about 1 hour ago View all Infrastructure security Third party access monitored Third party access enabled only as needed Multiple designated time servers synchornized View 16 more Infrastructure security controls Organizational security Security policies and procedures for identification and authentication exist Internal security procedures System configuration standards include common system settings System configuration standards are applied Enabled functions documented View 7 more Internal security procedures controls Data and privacy Cardholder data deletion process exists Cardholder data deletion process exists for non-protocol deletions Stored cardholder data meets policy requirements Data collected Customer personally identifiable information Credit card information Personal health information Subprocessors View all Active Campaign LLC • Marketing email and automation US Customer data Anthropic • AI assistance (e.g. Notion connector) US Customer / User data Cloudflare • Platform security US Customer / User / Traveller Data Evervault Limited • Payment processing EU Cardholder data FAQ View all Updates View all General Update to Sub-Processors Published April 29, 2026 Hello, We are sending this message to let you know that we have made some changes to our current list of Sub-Processors to add the following: - Zoom for video conferencing - Notion for knowledge hub - Anthropic for AI assistance (e.g. Claude connectors are enabled in Notion/Slack) - Seon for fraud detection - Cloudflare for Duffel Platform security. Continued use of Duffel Services without objection will be deemed acceptance of the changes noted. If you have any questions or concerns about these changes, please contact us at privacy@duffel.com. Thanks, Duffel Legal Team Privacy Update to our Sub-Prcoessors List Published March 11, 2026 Hello, We are sending this message to let you know that we have made some changes to our current list of Sub-Processors to add the following: - IGT for Traveller Support; - Hybrid Travel d.b.a. Air1 as an aggregator providing access to certain Suppliers; - Plain and Linear for Customer support communications. Continued use of Duffel Services without objection will be deemed acceptance of the changes noted. If you have any questions or concerns about these changes, please contact us at privacy@duffel.com. Thanks, Duffel Legal Team Privacy Update to our Sub-Processors List Published February 26, 2026 Our list of Sub-Processors is available on this Trust Center. We will continue to update you of any changes to the Sub-Processor list in accordance with clause 2.6 of our DPA, but this will be actioned via the Trust Center rather than via email. Action required Therefore, in order to receive these updates we kindly ask you to click on the bell next to "Request access" at the top of the page. If you have any questions or concerns, please contact us at privacy@duffel.com. Read more about Update to our Sub-Processors List Opens in new tab |Duffel's Trust Center Duffel Duffel is focused on democratising the travel industry through the use of easy-to-use APIs. We’re building infrastructure that underpins the travel industry in an effort to make it accessible for anyone who wishes sell travel. At Duffel, security is one of our top priorities. We care about protecting our systems and data, as well as our users and their data from nefarious activities. We know how important security is, and we put a lot of effort into ensuring that all of the appropriate safeguards are in place to support our business. security@duffel.com Privacy Policy Compliance PCI DSS 4.0.1 Resources View all 2026 Security Assessment - Duffel PCI Cardholder Data Environment 2026 PCI DSS v4.0.1 Attestation of Compliance 2025 Security Assessment - Duffel Production Environment (non-PCI) Controls Updated about 1 hour ago View all Infrastructure security Third party access monitored Third party access enabled only as needed Multiple designated time servers synchornized View 16 more Infrastructure security controls Organizational security Security policies and procedures for identification and authentication exist Internal security procedures System configuration standards include common system settings System configuration standards are applied Enabled functions documented View 7 more Internal security procedures controls Data and privacy Cardholder data deletion process exists Cardholder data deletion process exists for non-protocol deletions Stored cardholder data meets policy requirements Data collected Customer personally identifiable information Credit card information Personal health information Subprocessors View all Active Campaign LLC • Marketing email and automation US Customer data Anthropic • AI assistance (e.g. Notion connector) US Customer / User data Cloudflare • Platform security US Customer / User / Traveller Data Evervault Limited • Payment processing EU Cardholder data FAQ View all Updates View all General Update to Sub-Processors Published April 29, 2026 Hello, We are sending this message to let you know that we have made some changes to our current list of Sub-Processors to add the following: - Zoom for video conferencing - Notion for knowledge hub - Anthropic for AI assistance (e.g. Claude connectors are enabled in Notion/Slack) - Seon for fraud detection - Cloudflare for Duffel Platform security. Continued use of Duffel Services without objection will be deemed acceptance of the changes noted. If you have any questions or concerns about these changes, please contact us at privacy@duffel.com. Thanks, Duffel Legal Team Privacy Update to our Sub-Prcoessors List Published March 11, 2026 Hello, We are sending this message to let you know that we have made some changes to our current list of Sub-Processors to add the following: - IGT for Traveller Support; - Hybrid Travel d.b.a. Air1 as an aggregator providing access to certain Suppliers; - Plain and Linear for Customer support communications. Continued use of Duffel Services without objection will be deemed acceptance of the changes noted. If you have any questions or concerns about these changes, please contact us at privacy@duffel.com. Thanks, Duffel Legal Team Privacy Update to our Sub-Processors List Published February 26, 2026 Our list of Sub-Processors is available on this Trust Center. We will continue to update you of any changes to the Sub-Processor list in accordance with clause 2.6 of our DPA, but this will be actioned via the Trust Center rather than via email. Action required Therefore, in order to receive these updates we kindly ask you to click on the bell next to "Request access" at the top of the page. If you have any questions or concerns, please contact us at privacy@duffel.com.