Analysis
The state of public compliance evidence in 2026: what 3,000 vendors actually publish
CertReports Research · 18 Sep 2026 · 12 min read
attestation
PCI DSS evidence across 3,081 vendors
PCI DSS evidence that a buyer can verify is a registry listing or an attestation of compliance. CertReports mirrors the Visa Global Registry of Service Providers, counting only rows validated as PCI DSS with a validation date, and records the assessor and the date the validation runs through.
- Verified rows
- 3,081
- Vendor-stated
- 134
- Expired
- 267
- Last verified
- 3 Nov 2026
WT
WTY Technology Hongkong
wadzpay.com
PW
PT Wahyu Kartumasindo International
wahyukartu.com
WE
WallStreet Exchange
wallstreet.ae
WA
Wavetech
wavepaid.com
Waystar
Health plans and payers
Waystar’s cloud-based software provides end-to-end revenue cycle management solutions to simplify healthcare payments and accelerate
WEAT Electronic Datenservice
weat.de
Wellfit Technologies
Payments
Transform your dental practice with Wellfit’s all-in-one platform for patient financing, payment processing, and dental plans that boost
WHITEGATE PRO
whitegate.io
WhiteGate, your trust partner at payment
WD
WisdomTree Digital Movement
wisdomtreeprime.com
AS
AGREGADORAMASS S.A.P.I de C.V
woowpay.mx
WA
WOW Ambassador Consulting
wow-payments.com
CV
CW Ventures Private
wyl.cards
Yamaguchi Data Processing Services
yamajyo.co.jp
高品質なサービスとセキュリティを山口情報処理サービスセンター(YDS)がご支援させていただきます。
YA
YANUS
yanus.ca
YE
YEX EXCHANGE
yex.io
YL
Yoshimoto Laugh Peace
yoshimoto.co.jp
BI
BILITECH
yunlen.com
1C
13502457 Canada
yuzera.com
ZM
ZAIDY MULTI SERVICE
zaidy-ms.com
GA
Golden Age Dev Lab
zarpay.app
ZP
Zelis Payments
zelis.com
ZE
ZenythPay
zenythpay.com
SD
Secoiateq DMCC
zyyp.io
SECOM
Security
Secom Co., Ltd. is a Japanese security company headquartered in Tokyo, Japan
Registry traps
Most Visa registry rows are Third Party Agent or ISO registrations, not PCI DSS validations. Those are excluded. The Mastercard SDP compliant service provider list is the second registry-grade source.
Level 1 service providers
Registries list Level 1 service providers with a QSA-signed ROC or AOC. Smaller merchants and service providers self-assess and do not appear.
Guides on PCI DSS
All articlesAnalysis
Three quarters of the Visa registry is not a PCI DSS validation
CertReports Research · 17 Sep 2026 · 10 min read
Explainers
Where PCI DSS evidence actually lives: the Visa and Mastercard registries
CertReports Research · 3 Sep 2026 · 10 min read