generated: '2026-07-20'
method: searched
source: https://www.moonpay.com/security
standards:
  - id: pci-dss
    conforms: true
    evidence: MoonPay security page lists PCI DSS compliance (payment card handling).
  - id: soc2
    conforms: true
    evidence: SOC 2 listed on moonpay.com/security trust surface.
  - id: iso-27001
    conforms: true
    evidence: ISO 27001 listed on moonpay.com/security.
  - id: gdpr
    conforms: true
    evidence: GDPR listed on moonpay.com/security.
  - id: oauth2
    conforms: false
    evidence: Auth is API-key + short-lived bearer accessToken; no OAuth2 authorization server.
  - id: oidc
    conforms: false
  - id: rfc9457-problem-details
    conforms: false
    evidence: Errors use a custom {code,type,message} envelope, not application/problem+json.
  - id: cursor-pagination
    conforms: true
    evidence: Platform API uses cursor-based pagination (pageInfo.nextCursor).
compliance_program:
  published: true
  url: https://www.moonpay.com/security
  certifications: [SOC 2, ISO 27001, PCI DSS, GDPR]