At Amadeus, we are dedicated to safeguarding the company’s assets, reputation, and stakeholders’ interests by integrating regulatory compliance frameworks across all Amadeus business operations. We drive robust and sustainable decision-making and accountability. We guide the organisation to own, proactively identify and manage risks, strengthen controls, and ensure compliance by design.
Our Trust Center serves as a centralized hub for communicating Amadeus' commitment to compliance and transparency to its customers, partners and other stakeholders. We believe that trust is earned through openness and accountability.
At Amadeus we are strongly commited to privacy and data protection. We have implemented robust privacy compliance framework grounded in global standards like the GDPR and we continuously review and adapt our policies to meet evolving legal requirements. Our governance model ensures that privacy is embedded across our operations.
Protecting information is central to our mission of delivering trusted and innovative travel technology. Our security program follows global standards like ISO/IEC 27001, PCI DSS, and SOC 1 & 2, supported by strong internal governance to ensure compliance and risk management. We extend these standards to partners through clear requirements and validation. With layered controls, from physical security to access policies, we safeguard data integrity, confidentiality, and availability at every level.
Risk management at Amadeus focuses on coordinating assurance activities through strong governance and oversight. We apply the Three Lines of Defense model to ensure clarity, accountability, and resilience — with the 1st Line (management and staff) owning risks, the 2nd Line (governance functions) providing oversight, and the 3rd Line (Group Internal Audit) delivering independent assurance.
Ranked among the world’s most trustworthy companies, Amadeus offers certified compliance with standards like PCI DSS, SOC, and ISO. By accessing this section, customers can access our repository to request the specific certificates they need.
We believe that strong, sustainable partnerships are essential to delivering value across the global travel ecosystem, as well as we are committed to building long‑term, trusted relationships with our vendors.
We carefully select our partners through a rigorous due diligence process and maintain a robust third‑party risk management framework to uphold the highest standards of compliance and integrity, an increasingly critical focus in today’s business environment.
Explore our vendor portal to find updated terms and conditions for procurement, what vendors need to achieve in order to become a compliant vendor, and other information about doing business with entities across the Amadeus group.
Visit the Vendor PortalDiscover how we collaborate across the industry and what it takes to become part of our trusted network.
Visit the Partner Portal
Our Trust Center is your central destination for understanding how we protect your data, uphold your privacy, mitigate risks, foster and guarantee an ethical work environment and ensure responsible use of technology—especially in areas like AI compliance, security, and transparency. We believe that trust is earned through openness and accountability. That’s why we’ve created this space to give you clear, accessible, and up-to-date information about the policies, practices, and safeguards we have in place.
You will find information related to Risk Management, Data Security, Privacy Commitments, AI Compliance, and Corporate Ethics, and all the principles that guide our repsonsible use of data and technology. Whether you're a customer, partner, or regulator, our Trust Center is designed to give you the confidence and clarity you need to work with us securely and responsibly.
At Amadeus, we take a proactive and structured approach to global compliance. We’ve established robust governance frameworks and dedicated teams to ensure we stay aligned with evolving legal and ethical standards across all regions. For data protection, we fully comply with the General Data Protection Regulation (GDPR) and other international privacy laws. Our practices are built around transparency, user control, and strong data security. In terms of artificial intelligence, we’ve implemented a comprehensive AI Compliance Program that aligns with the EU AI Act and other global AI regulations.
At Amadeus, we believe that responsible innovation and regulatory compliance are not opposing forces—they are mutually reinforcing. Our approach is to embed ethical, legal, and security considerations directly into the innovation process, rather than treating them as afterthoughts or obstacles. By embedding compliance into our technology, operations, and culture, we ensure that innovation is not only fast and scalable—but also trustworthy, sustainable, and aligned with our values. This approach allows us to deliver cutting-edge solutions without compromising the rights, safety, or expectations of our users and partners.
