Too Good To Go · Trust Center

Too Good To Go Trust Center

Trust center

Too Good To Go runs a hosted SafeBase trust center at trust.toogoodtogo.com covering product security, data security, access control, infrastructure, endpoint security, incident response, risk management, business continuity / disaster recovery, employee training and continuous monitoring. Reports are listed as gated downloads (NDA/request flow) rather than public PDFs; the certifications themselves are stated publicly. The host answers 403 to plain HTTP clients (Cloudflare bot challenge) and renders for a browser, so the 403 below is an edge policy, not an absent page.

Too Good To Go maintains a public trust center documenting SOC 2 Type 2 and PCI DSS v4.0.1 compliance.

CompanyFood WasteSurplus FoodMarketplaceSustainabilityGrocery RetailConsumer AppClimate TechB CorporationDenmark
Trust center: https://trust.toogoodtogo.com/

Certifications & Compliance

SOC 2 Type 2PCI DSS v4.0.1

Source

Trust Center

too-good-to-go-trust-center.yml Raw ↑
generated: '2026-08-30'
method: searched
probe: true
source: https://trust.toogoodtogo.com/
url: https://trust.toogoodtogo.com/
name: Too Good To Go Trust Center
platform: SafeBase (toogoodtogo.portals.safebase.io)
description: >-
  Too Good To Go runs a hosted SafeBase trust center at trust.toogoodtogo.com covering
  product security, data security, access control, infrastructure, endpoint security,
  incident response, risk management, business continuity / disaster recovery, employee
  training and continuous monitoring. Reports are listed as gated downloads (NDA/request
  flow) rather than public PDFs; the certifications themselves are stated publicly.
  The host answers 403 to plain HTTP clients (Cloudflare bot challenge) and renders for a
  browser, so the 403 below is an edge policy, not an absent page.
certifications:
- name: SOC 2 Type 2
  status: certified
  evidence: https://trust.toogoodtogo.com/
- name: PCI DSS v4.0.1
  status: certified
  evidence: https://trust.toogoodtogo.com/
documents:
- name: SOC 2 Report
  access: gated
- name: PCI DSS Report
  access: gated
- name: Pentest Report
  access: gated
auditor_named: Deloitte
evidence:
- source: https://trust.toogoodtogo.com/
  http_status: 403
  note: >-
    403 to curl with a browser User-Agent (Cloudflare challenge); content read via a
    rendering fetch on 2026-08-30, which returned the trust-center copy and the two
    certification names above.
  keywords:
  - soc 2 type 2
  - pci dss v4.0.1
  - pentest report
  - trust center

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact
curl "https://apis.io/api/v1/security/too-good-to-go-trust-center"
All security posture
curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

A second provider on the same verified email joins the account you already have.