here

# Compliance Reports
Review and access Shopify compliance reports

## June 26, 2026 - June 26, 2027
PCI Attestation of Compliance (AoC)

This is Shopify's service provider PCI DSS AOC which is the best evidence of the PCI DSS compliance of Shopify's services. It is valid for one year and annually and completed by a Qualified Security Assessor.

View Report

## September 9, 2026
PCI External ASV Vulnerability Scan Attestation of Scan Compliance (AoSC)

Shopify's ASV scan attestation for PCI DSS compliance. Shopify completes ASV scans quarterly.

View Report

## June 17, 2026
PCI External ASV Vulnerability Scan Attestation of Scan Compliance (AoSC)

Shopify's ASV scan attestation for PCI DSS compliance. Shopify completes ASV scans quarterly.

View Report

## April 8, 2026
PCI External ASV Vulnerability Scan Attestation of Scan Compliance (AoSC)

Shopify's ASV scan attestation for PCI DSS compliance. Shopify completes ASV scans quarterly.

View Report

## February 18, 2026
PCI External ASV Vulnerability Scan Attestation of Scan Compliance (AoSC)

Shopify's ASV scan attestation for PCI DSS compliance. Shopify completes ASV scans quarterly.

View Report

## December 26, 2025
PCI External ASV Vulnerability Scan Attestation of Scan Compliance (AoSC)

Shopify's ASV scan attestation for PCI DSS compliance. Shopify completes ASV scans quarterly.

View Report

## April 1, 2025 - March 31, 2026
SOC 3 Report

This report provides assurance over the organization's system and company-level controls governing processes and is based upon the Trust Services Criteria. This report covers the reporting period specified on the cover letter and is publicly accessible.

View Report

## October 1, 2024 - September 30, 2025
SOC 3 Report

This report provides assurance over the organization's system and company-level controls governing processes and is based upon the Trust Services Criteria. This report covers the reporting period specified on the cover letter and is publicly accessible.

View Report