Analysis
The state of public compliance evidence in 2026: what 3,000 vendors actually publish
CertReports Research · 18 Sep 2026 · 12 min read
attestation
PCI DSS evidence across 3,215 vendors
PCI DSS evidence that a buyer can verify is a registry listing or an attestation of compliance. CertReports mirrors the Visa Global Registry of Service Providers, counting only rows validated as PCI DSS with a validation date, and records the assessor and the date the validation runs through.
- Verified rows
- 3,081
- Vendor-stated
- 134
- Expired
- 267
- Last verified
- 2 Nov 2026
OC
OSL Cards HK
osl.com
OT
OTAGROUP
otagroup.co.jp
Paidy
Payments
ãã¨æããã¤ãã£ã¯ãã¯ã¬ã¸ããã«ã¼ãä¸è¦ãäºåç»é²ä¸è¦ãã¹ããã
PA
Paneleven
paneleven.com
NI
Nuvei Integrated Payments
paragonsolutions.com
PT
Passport Technology Canada
passporttechnology.com
PP
Patel Processing
patelprocessing.com
PS
Payac Services CLG
payac.ie
PayByPhone Technologies
paybyphone.com
Pay for parking with PayByPhone - the smart cashless parking app that'll help you avoid tickets & remind you when it's time to
PayCaps Technology
Payments
PayCaps the best Payment Gateway in UAE for Online Payments, Ecommerce Stores &
A2
Acorn 2 Oak
paycardinal.com
PA
Paydemand
paydemand.com
PA
PAYGENT
paygent.co.jp
PK
Pay Koncept Merchant Services
paykoncept.com
PN
Payland net
paylandnet.pl
PayLink Sh.A
paylink.al
Shërbimet e personalizuara të ofruara nga PayLink çojnë në zgjidhje më të shpejta, më efikase dhe më
PA
Paymatrix
paymatrix.io
PA
Paymentsave
paymentsave.co.uk
PayMitto
Payments
PayMitto provides simplified, fully-compliant cross-border payment solutions for financial institutions and
Paymob Technologies
paymob.com
PS
PayNet Systems
paynetsystemsllc.com
ET
Eland Toyar
paypayhome.com
PayPoint Network
Payments
Experience seamless bill payments and mobile top-ups with
Payrails
Research and data providers
AI-enabled operating system for payment orchestration, tokenization, chargeback management, and automated
Registry traps
Most Visa registry rows are Third Party Agent or ISO registrations, not PCI DSS validations. Those are excluded. The Mastercard SDP compliant service provider list is the second registry-grade source.
Level 1 service providers
Registries list Level 1 service providers with a QSA-signed ROC or AOC. Smaller merchants and service providers self-assess and do not appear.
Guides on PCI DSS
All articlesAnalysis
Three quarters of the Visa registry is not a PCI DSS validation
CertReports Research · 17 Sep 2026 · 10 min read
Explainers
Where PCI DSS evidence actually lives: the Visa and Mastercard registries
CertReports Research · 3 Sep 2026 · 10 min read