Analysis
The state of public compliance evidence in 2026: what 3,000 vendors actually publish
CertReports Research · 18 Sep 2026 · 12 min read
attestation
PCI DSS evidence across 3,215 vendors
PCI DSS evidence that a buyer can verify is a registry listing or an attestation of compliance. CertReports mirrors the Visa Global Registry of Service Providers, counting only rows validated as PCI DSS with a validation date, and records the assessor and the date the validation runs through.
- Verified rows
- 3,081
- Vendor-stated
- 134
- Expired
- 267
- Last verified
- 2 Nov 2026
PF
Pure Financial
purefinancegroup.com
PF
Purpose Financial
purpose.financial
QR
Qream
qash.ai
QI
Qixpay
qixpay.com
CD
COMPANIA DE CREDITOS RAPIDOS
rapicredit.com
RI
Rapid Info Soft
rapidinfosoft.com
Retriever Medical Dental Payments
rectanglehealth.com
FB
Fukushima Baseball
red-hopes.com
RF
Red F. Technology
redotpay.com
RELEASE ASAP
releaseasap.com
RS
Reli Solutions
relisolutions.com
Replicant Solutions
Customer support
Replicant scales your best agents with AI—automating routine calls, improving accuracy, reducing wait times, and giving every customer
DI
Disputify
reshop.com
Resonance Australia
resonanceaustralia.com.au
DP
Dandelion Payments
riamoneytransfer.com
RR
Robotic Retail KFT
roboticretail.ai
RT
Rosmerta Technologies
rosmertatech.com
RB
Royal Buying
rpgglobal.com
RB
RPS Bancard
rpsbancard.com
RP
Rubex Pay
rubexpay.com
RunSignUp
runsignup.com
RunSignup provides a simple way to register for
RYFT PAY
Payments
Say hello to unified payment processing with
Salucro Healthcare Solutions
Healthcare
Salucro is a healthcare financial technology company exclusively focused on patient payments and
SA
Sambapay
sambapay.com
Registry traps
Most Visa registry rows are Third Party Agent or ISO registrations, not PCI DSS validations. Those are excluded. The Mastercard SDP compliant service provider list is the second registry-grade source.
Level 1 service providers
Registries list Level 1 service providers with a QSA-signed ROC or AOC. Smaller merchants and service providers self-assess and do not appear.
Guides on PCI DSS
All articlesAnalysis
Three quarters of the Visa registry is not a PCI DSS validation
CertReports Research · 17 Sep 2026 · 10 min read
Explainers
Where PCI DSS evidence actually lives: the Visa and Mastercard registries
CertReports Research · 3 Sep 2026 · 10 min read