{"statement_id":"st_880d886cb8cd62e257f9","subject":{"kind":"product","slug":"spendesk","name":"Spendesk","url":"https://sourcetier.com/products/spendesk"},"attribute":{"key":"pci_dss","label":"PCI DSS stated","unit":null,"core":true},"scope":null,"region":null,"first_recorded_at":"2026-09-02T00:15:14.886Z","current":{"claim_id":"39623f6b-1c19-44dd-8ee7-0c017b910429","value":true,"unit":null,"verification_state":"verified","confidence_recorded":71,"observed_on":"2026-09-13","recorded_at":"2026-09-14T12:21:35.127Z","ended_at":null,"ended_by":null,"superseded_by_claim_id":null,"withdrawal_reason":null,"valid_from":null,"extraction":"muster:(?<!(?:best practices from|standards \\(?like|aligned with|in line with|based on|in accordance with|framework)[^.?!]{0,80})(?<!(?:data cent(?:er|re)s?|hosting provider|third[- ]party service provider|payment processor)[^.?!]{0,140})\\bPCI[\\s-]?DSS\\b(?![^.?!]{0,40}(?:readiness|[- ]ready\\b))(?![^.?!]{0,60}(?:certified )?data cent(?:er|re)s?)","reader":"text pattern","parser_version":null,"method":null,"excerpt":"...ery payment, every invoice, every expense claim. We're ISO 27001:2022 certified, GDPR and PCI-DSS compliant, and in 2025 we became the first spend management platform to reach profitabili...","sources":[{"url":"https://www.spendesk.com/","tier":1,"type":"official_documentation","retrieved_on":"2026-09-13","role":"evidence"},{"url":"https://www.spendesk.com/","tier":1,"type":"official_documentation","retrieved_on":"2026-10-02","role":"evidence"}]},"version_count":2,"versions":[{"claim_id":"5c155619-93aa-409b-a6bf-603f62aaf429","value":null,"unit":null,"verification_state":"unknown","confidence_recorded":0,"observed_on":"2026-09-02","recorded_at":"2026-09-02T00:15:14.886Z","ended_at":"2026-09-14T12:21:35.127Z","ended_by":"superseded","superseded_by_claim_id":"39623f6b-1c19-44dd-8ee7-0c017b910429","withdrawal_reason":null,"valid_from":null,"extraction":"abruf:nicht-lesbar","reader":"fetch; the page could not be read","parser_version":null,"method":null,"excerpt":null,"sources":[{"url":"https://trust.spendesk.com/","tier":1,"type":"security_documentation","retrieved_on":"2026-09-02","role":"checked_without_finding"},{"url":"https://trust.spendesk.com/","tier":1,"type":"security_documentation","retrieved_on":"2026-09-07","role":"checked_without_finding"},{"url":"https://trust.spendesk.com/","tier":1,"type":"security_documentation","retrieved_on":"2026-09-12","role":"checked_without_finding"}]},{"claim_id":"39623f6b-1c19-44dd-8ee7-0c017b910429","value":true,"unit":null,"verification_state":"verified","confidence_recorded":71,"observed_on":"2026-09-13","recorded_at":"2026-09-14T12:21:35.127Z","ended_at":null,"ended_by":null,"superseded_by_claim_id":null,"withdrawal_reason":null,"valid_from":null,"extraction":"muster:(?<!(?:best practices from|standards \\(?like|aligned with|in line with|based on|in accordance with|framework)[^.?!]{0,80})(?<!(?:data cent(?:er|re)s?|hosting provider|third[- ]party service provider|payment processor)[^.?!]{0,140})\\bPCI[\\s-]?DSS\\b(?![^.?!]{0,40}(?:readiness|[- ]ready\\b))(?![^.?!]{0,60}(?:certified )?data cent(?:er|re)s?)","reader":"text pattern","parser_version":null,"method":null,"excerpt":"...ery payment, every invoice, every expense claim. We're ISO 27001:2022 certified, GDPR and PCI-DSS compliant, and in 2025 we became the first spend management platform to reach profitabili...","sources":[{"url":"https://www.spendesk.com/","tier":1,"type":"official_documentation","retrieved_on":"2026-09-13","role":"evidence"},{"url":"https://www.spendesk.com/","tier":1,"type":"official_documentation","retrieved_on":"2026-10-02","role":"evidence"}]}],"changes":[{"id":"2090","type":"research_update","label":"Research update","material":false,"sentence":"Spendesk: PCI DSS stated is now recorded as not measured.","noticed_at":"2026-09-02T00:15:14.886Z","subject":{"kind":"product","slug":"spendesk","name":"Spendesk"},"before":null,"after":{"value":null,"verification_state":"unknown","confidence":0},"claim_id":"5c155619-93aa-409b-a6bf-603f62aaf429","statement_id":"st_880d886cb8cd62e257f9","corrected":null},{"id":"101213","type":"documented","label":"First documented","material":true,"sentence":"Spendesk: PCI DSS stated documented (verified). This is a finding of ours, not necessarily a new certification.","noticed_at":"2026-09-14T12:21:35.127Z","subject":{"kind":"product","slug":"spendesk","name":"Spendesk"},"before":{"value":null,"verification_state":"unknown","confidence":0},"after":{"value":true,"verification_state":"verified","confidence":71},"claim_id":"39623f6b-1c19-44dd-8ee7-0c017b910429","statement_id":"st_880d886cb8cd62e257f9","corrected":null}],"page_url":"https://sourcetier.com/statements/st_880d886cb8cd62e257f9","contract":"A statement is the question a claim answers: one subject, one attribute, one scope and region. statement_id stays the same when a new value supersedes the old one, when we withdraw it and when two duplicate entities are merged (the old id then redirects). claim_id identifies one version. versions lists every version oldest first; ended_by is superseded, withdrawn or null for the current one. confidence_recorded is the confidence stored when that version was written, not a recomputation. unknown describes our research, never the product."}