Bitrise achieves PCI DSS compliance to strengthen customer data security
Blog post from Bitrise
Bitrise, a leading mobile DevOps platform supporting over 8,500 brands such as Shopify, TripAdvisor, and BuzzFeed, has achieved PCI DSS compliance, marking a significant milestone in its commitment to security best practices. Although Bitrise does not handle credit card data directly, its compliance assures customers that their data is protected in line with globally recognized standards when using Bitrise for mobile app development. In addition to maintaining its SOC 2 Type 2 certification, Bitrise plans to renew its PCI DSS Attestation of Compliance annually starting in November 2025. The company has also introduced a new Trust Center, which serves as a comprehensive resource for security, compliance, and privacy information, detailing how customer data is safeguarded. Bitrise's compliance process involved collaboration with Apersky, a Qualified Security Assessor, and included updates to controls, policies, and employee training to align with PCI DSS requirements. The company emphasizes that continuous monitoring and regular assessments are essential to maintaining compliance and ensuring data security.