Paddle is listed with paid pricing.

What compliance standards does Paddle support?

Paddle is marked as compliant with SOC 2 Type II, PCI DSS 4.0.1, GDPR, CCPA.

Paddle

Paid

Paddle is an AI-powered payments and billing platform for software companies that acts as merchant of record, handling payments, subscriptions, tax compliance, and fraud prevention globally. It eliminates the complexity of international sales tax and VAT by taking on legal tax responsibility.

Category

Finance

Subcategory

Tax

Free Tier

Not available yet

Paid Plans

5% + 50¢ per transaction; custom pricing for enterprise

API Cost

Not available yet

Web AppAPI

Paddle Trust & Security Report

Certifications, AI-training posture, and security controls, with sourced proof.

VIEW

●SOC 2 Type II●PCI DSS 4.0.1●GDPR●CCPA

Verified against Paddle's own trust and security pages. See the full report for sourced proof →

Region

Primarily United States (AWS cloud hosting for Paddle SaaS platform). EU/Ireland (Snowflake for business intelligence/analytics). Personal data may be transferred internationally among Paddle entities in UK, US, Ireland, and Canada per privacy policy. Standard Contractual Clauses used for EU-to-non-adequate-country transfers.

Self-hostable

SaaS companies selling globally without managing international taxIndie developers monetizing software without payment complexityManaging EU VAT and US sales tax automatically as merchant of recordSubscription management with automated renewals and failed payment recoveryReducing fraud through AI-powered payment optimization