Snapshot 257625

Document
Trust center
URL
https://trust.citcon.com/
Fetched
HTTP status
200
Content type
text/html
Fetch mode
browser
Size
123188 bytes
SHA-256 (raw)
efb8e79e07520e854fe14b115cd2c89a7c2ad0bf0dfce849068b255ce00249bf
SHA-256 (normalized text)
355aa66e94b1fbb7378f37780ebfd55da4bee6538b21f54804fb77290d72f6de

Raw (normalized text)

Scripts and page chrome removed; this is what change detection compares.

Skip to navigationSkip to main content
Opens in new tab
|Citcon's Trust Center
Citcon
Citcon, a global all-in-one payment platform with a unified API to integrate 100+ digital wallets, offers a full-stack solution from payment processing and gateway services to reporting and fund settlement.
We Connect Leading Brands to Billions of Consumers Every Day
Headquartered in Silicon Valley, Citcon provides in-store, online, and mobile payment solutions for thousands of the biggest brands worldwide including Nordstrom, Samsonite, Macy’s, MGM Resorts, Bloomingdale’s, Hyatt, L’Oréal, and many others.
Our platform helps more than 10,000 global merchants securely process millions of payment transactions daily. In essence, Citcon is a leading payment gateway solution that helps consumers pay for their products and services anywhere, anytime.
Citcon began as the first authorized US merchant acquirer for WeChat Pay and Alipay—two of the most popular mobile wallet providers in China. Today, we connect more than 20 global wallet providers, including PayPal and Venmo, reaching over 2 billion mobile wallet users worldwide.
security@citcon-inc.com
Privacy Policy
Compliance
SOC 2 Type I
PCI DSS - SAQ D, SP and ROC Prep
GDPR
US Data Privacy
SOC 2 Type 2
Resources
View all
PCI DSS
Citcon_USA_-_20241025_-_PCI_DSS_v4.0.1_-_AOC_Service_Providers.pdf
Visa_Global_Registry_of_Service_Providers_August_31_2025.pdf
Citcon PCI DSS v4.0.1 AOC 2025
Citcon_USA_-_20261026_-_PCI_DSS_v4.0.1_-_AOC_Service_Providers.pdf
SOC 2
SOC 2 Type I
Citcon-Inc SOC 2 Type II 03.31.25.pdf
SOC 2 Type II report 2026
Privacy
Privacy Compliance Policy
Controls
View all
Infrastructure security
Unique production database authentication enforced
Encryption key access restricted
Unique account authentication enforced
View 15 more Infrastructure security controls
Organizational security
Asset disposal procedures utilized
Portable media encrypted
Employee background checks performed
View 6 more Organizational security controls
Product security
Data encryption utilized
Control self-assessments conducted
Penetration testing performed
View 1 more Product security control
Internal security procedures
Continuity and Disaster Recovery plans established
Continuity and Disaster Recovery plans tested
Cybersecurity insurance maintained
View 31 more Internal security procedures controls
Data and privacy
Data retention procedures established
Customer data deleted upon leaving
Data classification policy established
Subprocessors
View all
Amazon Web Services • Cloud provider
Provide cloud based production transactional processing
Cloudflare • Cloud monitoring
GitHub • Source code repository
Source code repository
Google Workspace • Productivity Tool
Google Workspace
FAQ
Updates
View all
Compliance
2025 PCI DSS 4.0.1 Audit Completed
Published October 25, 2025
Citcon has completed the 2025 PCI DSS 4.0.1 audit, and you are welcome to request the updated version as needed.