Companies / LegitScript
LegitScript provides certification and merchant risk monitoring for businesses in regulated high-risk markets. It serves payment facilitators, banks, search engines, social platforms, and e-commerce marketplaces.
Summarized from its homepage on 4 Nov 2026.
Vendors of LegitScript and the evidence for each
LegitScript declares 12 subprocessors, including AI providers OpenAI.
Google WorkspaceProductivityConfirmed
1PasswordSecurity and identityConfirmed
Amazon Web ServicesCloud and infrastructureConfirmed
Auth0Security and identityConfirmed
DatabricksDataConfirmed
EquifaxSecurity and identityConfirmed
IntercomSupport and chatConfirmed
IroncladProductivityConfirmed
MarketoCRM and salesConfirmed
OpenAIAI and LLM providersConfirmed
5 more vendors
See LegitScript's full stack and the source for every claim.
Create a free accountWork email, no card. Already have one? Log inQuestions about LegitScript
Certifications
| Standard | What the source says | Checked |
|---|---|---|
| ISO 27001Company's statement | “ISO 27001 : 2022 — international ISMS standard”The company's own statement. We have not checked an accreditation registry. | 11 Nov 2026Source |
| SOC 2 Type IICompany's statement | “SOC 2 Type 2 — annual third-party audit”The company's own statement. SOC 2 has no public registry; the report itself is shared by the company, usually under NDA. | 11 Nov 2026Source |
We last read its homepage on 11 Nov 2026 and the FedRAMP Marketplace on 8 Nov 2026. A standard not shown here was not found in these sources. That does not mean LegitScript lacks it.
Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.
See LegitScript's full stack
Every vendor with its source and date, and an alert when LegitScript adds or drops one. The same lookup works for any company.
- Every company and vendor, with its public source
- 100 API calls a month, plus MCP and the Chrome extension
- Work email only. No card, no sales call