The state of public compliance evidence in 2026: what 3,000 vendors actually publish
CertReports Research · 18 Sep 2026 · 12 min read
attestation
PCI DSS evidence that a buyer can verify is a registry listing or an attestation of compliance. CertReports mirrors the Visa Global Registry of Service Providers, counting only rows validated as PCI DSS with a validation date, and records the assessor and the date the validation runs through.
poupelle.com
ppsusa.com
reversemyfees.com
self.inc
serfinsarl.com
shirefunding.co.uk
somafi.be
stspayone.com
sunshinewithme.com
tectah.com
transactin.co.uk
tricera.co.jp
voltms.com
ware-everpay.com
xe.com
zipmex.com
bosch.com
Moving stories and inspiring
Finance and accounting
The financial platform for MSPs, accounting firms, and service
E-commerce
Aurumpay provides Clover POS, surcharge-compliant payment solutions with next-day funding and bilingual support for restaurants, retail &
bannercard.com
blackstarmerchants.com
blumonpay.com
Finance and accounting
Need car repair finance? Spread the cost of your car repairs with 0%
ctwygroup.com
Most Visa registry rows are Third Party Agent or ISO registrations, not PCI DSS validations. Those are excluded. The Mastercard SDP compliant service provider list is the second registry-grade source.
Registries list Level 1 service providers with a QSA-signed ROC or AOC. Smaller merchants and service providers self-assess and do not appear.
CertReports Research · 18 Sep 2026 · 12 min read
CertReports Research · 17 Sep 2026 · 10 min read
CertReports Research · 3 Sep 2026 · 10 min read