Analysis
The state of public compliance evidence in 2026: what 3,000 vendors actually publish
CertReports Research · 18 Sep 2026 · 12 min read
attestation
PCI DSS evidence across 3,215 vendors
PCI DSS evidence that a buyer can verify is a registry listing or an attestation of compliance. CertReports mirrors the Visa Global Registry of Service Providers, counting only rows validated as PCI DSS with a validation date, and records the assessor and the date the validation runs through.
- Verified rows
- 3,081
- Vendor-stated
- 134
- Expired
- 267
- Last verified
- 2 Nov 2026
Waystar
Health plans and payers
Waystar’s cloud-based software provides end-to-end revenue cycle management solutions to simplify healthcare payments and accelerate
WEAT Electronic Datenservice
weat.de
Wellfit Technologies
Payments
Transform your dental practice with Wellfit’s all-in-one platform for patient financing, payment processing, and dental plans that boost
WHITEGATE PRO
whitegate.io
WhiteGate, your trust partner at payment
WD
WisdomTree Digital Movement
wisdomtreeprime.com
AS
AGREGADORAMASS S.A.P.I de C.V
woowpay.mx
WA
WOW Ambassador Consulting
wow-payments.com
CV
CW Ventures Private
wyl.cards
Yamaguchi Data Processing Services
yamajyo.co.jp
高品質なサービスとセキュリティを山口情報処理サービスセンター(YDS)がご支援させていただきます。
YA
YANUS
yanus.ca
YE
YEX EXCHANGE
yex.io
YL
Yoshimoto Laugh Peace
yoshimoto.co.jp
BI
BILITECH
yunlen.com
1C
13502457 Canada
yuzera.com
ZM
ZAIDY MULTI SERVICE
zaidy-ms.com
GA
Golden Age Dev Lab
zarpay.app
ZP
Zelis Payments
zelis.com
ZE
ZenythPay
zenythpay.com
SD
Secoiateq DMCC
zyyp.io
SECOM
Security
Secom Co., Ltd. is a Japanese security company headquartered in Tokyo, Japan
FiT
Consumer apps
ライフフィットは30日2,780円~(税抜)で24h使い放題の本格フィットネスジム。アプリで1分簡単登録ですぐに始められます！
HQ
Benefits and insurance
AIデータをフル活用し、社員一人ひとりを個別最適にサポート。生産性を最大化する今までにない新しい福利厚生。次世代福利厚生として、カフェテリアHQ、リモートHQを提供
YA
YARD
Design tools
YARD is a Tokyo-based creative collective and management company representing leading Japanese music
Uphold
Crypto and web3
Buy and sell over 200 cryptocurrencies directly to and from your self-custodial
Registry traps
Most Visa registry rows are Third Party Agent or ISO registrations, not PCI DSS validations. Those are excluded. The Mastercard SDP compliant service provider list is the second registry-grade source.
Level 1 service providers
Registries list Level 1 service providers with a QSA-signed ROC or AOC. Smaller merchants and service providers self-assess and do not appear.
Guides on PCI DSS
All articlesAnalysis
Three quarters of the Visa registry is not a PCI DSS validation
CertReports Research · 17 Sep 2026 · 10 min read
Explainers
Where PCI DSS evidence actually lives: the Visa and Mastercard registries
CertReports Research · 3 Sep 2026 · 10 min read