Built to earn your trust — and keep it
Real cash moves through ShopBack every day. Here is how we protect the members, merchants, and data behind every transaction.
PCI DSS
Compliant
ISO 27001
2022 Certified
13
Markets, one standard
24 / 7
Security monitoring
Compliance
Certified to the highest standards
Secure payments
Every transaction through ShopBack is handled by PCI DSS-certified processors — the same standard required by Visa, Mastercard, and American Express. Your payment details are never stored on our servers.
The Payment Card Industry Data Security Standard is administered by the PCI Security Standards Council and verified by independent third-party assessment.
Enterprise-grade information security
ShopBack holds ISO/IEC 27001:2022 certification — the internationally recognised benchmark for information security management. Our systems, processes, and people are audited regularly against this standard.
Certification covers the confidentiality, integrity, and availability of data across all ShopBack platforms and markets.
Security
Found something? Tell us.
We value the work of security researchers in keeping our platform safe. If you discover a potential vulnerability in any ShopBack website, app, or API, please report it responsibly.
We respond to every report promptly and treat researchers fairly. Responsible disclosure details are in our policy below.
security@shopback.comTo help us respond quickly, please include:
Affected asset
URL, domain, API endpoint, or app screen where you found the issue.
Impact analysis
What the vulnerability is, who it could affect, and why it matters.
Steps to reproduce
Clear instructions, commands, or interactions. Attach screenshots or videos where helpful.
Policies