Analysis
The state of public compliance evidence in 2026: what 3,000 vendors actually publish
CertReports Research · 18 Sep 2026 · 12 min read
attestation
PCI DSS evidence across 3,215 vendors
PCI DSS evidence that a buyer can verify is a registry listing or an attestation of compliance. CertReports mirrors the Visa Global Registry of Service Providers, counting only rows validated as PCI DSS with a validation date, and records the assessor and the date the validation runs through.
- Verified rows
- 3,081
- Vendor-stated
- 134
- Expired
- 267
- Last verified
- 2 Nov 2026
PA
Prospa Advance
prospa.com
PS
Protec Secure Card
protecsecurecard.com
PM
purse money platform
purse.money
PW
pwpw
Finance and accounting
Polish Security Printing Works is a sole-shareholder company of the State Treasury, a company engaged in the production of banknotes
qards
qards.de
QL
Quartz Labs
quartzpay.io
QH
QB Health Technologies Private
qubehealth.com
Quilt Holdco
quiltsoftware.com
Empower your local retail business with Quilt's specialized POS software, designed to enhance operations and customer experiences while
QS
Qwikcilver Solutions
qwikcilver.com
RM
Racional Money
racional.cl
RT
Rain Technologies
rainapp.com
IF
Isra Feel
raphael-official.com
AL
ARGENT LABS
ready.co
RP
Real Pay
realpay.net
redserfinsa
Payments
Procesamiento adquirente y emisor para bancos, fintechs y payfacs en toda
Super Pagos
E-commerce
Soluciones de pago para comercios y
RE
REJECT
reject.co.jp
Relay Financial Technologies
Banking and lending
Relay (Relay Financial), is an all-in-one business banking and money management platform helping businesses understand what they're
RE
REMOTEPASS
Compliance and GRC
Private payroll and compliance provider
IC
I.C.K. LLC dba RevitPay
revitpay.com
KL
KIWANO LABS
roobet.com
RM
Randall Merchant Solutions
selectmerchantsolutions.com
SS
SELP SECURE
selp.fr
WM
Winslow Meade
semperpayments.com
Registry traps
Most Visa registry rows are Third Party Agent or ISO registrations, not PCI DSS validations. Those are excluded. The Mastercard SDP compliant service provider list is the second registry-grade source.
Level 1 service providers
Registries list Level 1 service providers with a QSA-signed ROC or AOC. Smaller merchants and service providers self-assess and do not appear.
Guides on PCI DSS
All articlesAnalysis
Three quarters of the Visa registry is not a PCI DSS validation
CertReports Research · 17 Sep 2026 · 10 min read
Explainers
Where PCI DSS evidence actually lives: the Visa and Mastercard registries
CertReports Research · 3 Sep 2026 · 10 min read