Policies and Certifications
This page provides information on ExchangeBox USA's approach to security, data privacy, compliance, and reliability.
Our Compliance and Certifications
ExchangeBox USA complies with global industry standards and regulatory requirements to protect both our business data and our customers' business data across the world. Parcel Pending solutions are subject to multiple certifications, assessments, and legal requirements, which are regularly and independently validated.
Please use the section below to view the certifications and assessments applicable to each Parcel Pending solution.
ExchangeBox USA complies with the General Data Protection Regulation (GDPR), the European Union regulation that governs the processing of personal data and protects the fundamental rights and freedoms of individuals, in particular their right to the protection of personal data.
ExchangeBox USA complies with the California Consumer Privacy Act (CCPA), the California state privacy law that establishes rights for consumers regarding the collection, use, and disclosure of their personal information, and imposes obligations on businesses to ensure transparency, data protection, and accountability.
ExchangeBox USA maintains the PCI DSS compliance for our e-commerce environment through Self-Assessment Questionnaire A (SAQ A). All payment card data is handled exclusively by PCI DSS-compliant third-party payment processors; no cardholder data is stored, processed, or transmitted on our systems.
Certification Documentation
To request certification documents, please contact your ExchangeBox USA representative.