While Toggle does not directly process payment card information, our platform is considered part of the "Cardholder Data Environment", and as such we take appropriate technical and organisational security measures in the form of maintaining adherence to PCI DSS standards, to protect against unauthorised or unlawful processing of customer cardholder data.
This includes a yearly external audit from an accredited QSA.
You can find a copy of our latest AoC (Attestation of Compliance) at the link below (2026).