Compliance frameworks, security audits, and quality certifications this company maintains.
FIS holds SOC 1 Type II attestation covering its core banking and payment processing systems, required by every bank and financial institution that relies on FIS for account processing under their own financial reporting controls.
FIS's SOC 2 Type II report validates security, availability, and confidentiality of its cloud-hosted banking, capital markets, and payment platforms serving 20,000+ financial institution clients globally.
FIS maintains ISO 27001 certification across its global operations, providing financial institutions with assurance that FIS applies systematic information security controls to protect customer and transaction data.
FIS holds PCI DSS Level 1 service provider certification for its payment processing infrastructure, enabling financial institution clients to reduce their own PCI scope by leveraging FIS's certified environment.
Regulatory
FedRAMP Moderate
CertifiedFIS core banking and payment platforms are FedRAMP Moderate authorized, allowing federal credit unions, government banks, and agency financial operations to use FIS infrastructure.
FIS processes EU resident financial data in compliance with GDPR across its European banking and capital markets operations, with data processing agreements in place with all 20,000+ client institutions.
FIS complies with the EU Digital Operational Resilience Act (DORA), which classifies FIS as a Critical ICT Third-Party Provider and requires enhanced resilience testing and reporting for its European banking clients.
FIS holds ISO 22301 business continuity management certification, critical for banking clients whose regulatory obligations require proof of their core processing vendor's operational resilience.
FIS publishes SSAE 18 reports for its data center and processing operations, meeting AICPA attestation standards required by bank regulators and external auditors reviewing FIS as a service organization.
FIS complies with the California Consumer Privacy Act across its banking technology, payments processing, and capital markets platforms, providing financial institution clients with the data privacy controls needed to honor their own customers' CCPA rights.