Analysis
The state of public compliance evidence in 2026: what 3,000 vendors actually publish
CertReports Research · 18 Sep 2026 · 12 min read
attestation
PCI DSS evidence across 3,081 vendors
PCI DSS evidence that a buyer can verify is a registry listing or an attestation of compliance. CertReports mirrors the Visa Global Registry of Service Providers, counting only rows validated as PCI DSS with a validation date, and records the assessor and the date the validation runs through.
- Verified rows
- 3,081
- Vendor-stated
- 134
- Expired
- 267
- Last verified
- 3 Nov 2026
FiT
Consumer apps
ライフフィットは30日2,780円~(税抜)で24h使い放題の本格フィットネスジム。アプリで1分簡単登録ですぐに始められます！
HQ
Benefits and insurance
AIデータをフル活用し、社員一人ひとりを個別最適にサポート。生産性を最大化する今までにない新しい福利厚生。次世代福利厚生として、カフェテリアHQ、リモートHQを提供
YA
YARD
Design tools
YARD is a Tokyo-based creative collective and management company representing leading Japanese music
Uphold
Crypto and web3
Buy and sell over 200 cryptocurrencies directly to and from your self-custodial
Aspire
Payments
All-in-one Finance OS for businesses
Grey
Consumer apps
Banking services for remote workers and digital nomads
GWC
eftokyo-z.jp
B.LEAGUE所属のプロバスケットボールチーム、アースフレンズ東京Zの公式サイトです。
Getz
Travel and hospitality
Full omni-channel F&B Restaurant Management Solution to Increase your Sales, streamline your Costs across Sales, Marketing, Operations and
Givelify
Nonprofit and fundraising
Givelify is the leader in mobile and online giving for churches and
DR
drown
go.jp
NID
nid.swiss
NiD SA (anciennement NagraID) est experte en identification sécurisée et traitement des données
KDDI
povo.jp
povo2.0はeSIM対応のスマホプラン。au回線だから速度もエリアも品質も安定！基本料も0円で期間の縛りなし。事務手数料も無料。データ使い放題も選べて、5Gにも対応！乗り換えにもおススメ！
VersaPay
Finance and accounting
Accounts receivable should fuel
Whop
E-commerce
Whop, Inc. is an American social commerce platform and online marketplace that enables entrepreneurs, influencers, and small businesses to
A-Sketch
Media and content
Amuse Inc. is a Japanese entertainment company that provides artist management services
A-TOM
a-tom.jp
Abacus Business Computer
Travel and hospitality
30+ years of trusted
ACBA BANK OJSC
Banking and lending
Ակբա Բանկ էջում գտեք օգտակար տեղեկություններ, ծառայություններ և հնարավորություններ։ Իմացեք ավելին Ակբայի առաջարկների, լուծումների և
AC
Accountax
accountax.co.jp
AC
Acordpay Canada
acordpay.com
Adyen
Payments
Run payments, manage your data, and offer financial products in one
AL
AFRICAN LEASE TOGO
africanlease.tg
aiKATE D.o.o
aikate.eu
Aliniex UAB
Crypto and web3
AliX is the leading Fiat-to-Crypto On & Off Ramp, offering the Widest Range of Payment
Registry traps
Most Visa registry rows are Third Party Agent or ISO registrations, not PCI DSS validations. Those are excluded. The Mastercard SDP compliant service provider list is the second registry-grade source.
Level 1 service providers
Registries list Level 1 service providers with a QSA-signed ROC or AOC. Smaller merchants and service providers self-assess and do not appear.
Guides on PCI DSS
All articlesAnalysis
Three quarters of the Visa registry is not a PCI DSS validation
CertReports Research · 17 Sep 2026 · 10 min read
Explainers
Where PCI DSS evidence actually lives: the Visa and Mastercard registries
CertReports Research · 3 Sep 2026 · 10 min read