Analysis
The state of public compliance evidence in 2026: what 3,000 vendors actually publish
CertReports Research · 18 Sep 2026 · 12 min read
attestation
PCI DSS evidence across 3,215 vendors
PCI DSS evidence that a buyer can verify is a registry listing or an attestation of compliance. CertReports mirrors the Visa Global Registry of Service Providers, counting only rows validated as PCI DSS with a validation date, and records the assessor and the date the validation runs through.
- Verified rows
- 3,081
- Vendor-stated
- 134
- Expired
- 267
- Last verified
- 2 Nov 2026
ZM
ZM3
sentinelservices.ltd
SF
Serve First Solutions
serve-first.com
SS
Servipay SARL
servipay.eu
Sfey Pay OU
sfey.com
shajonpay
shajonpay.net
SHOPLINE SOLUTIONS
E-commerce
SHOPLINE 提供開網店、社交媒體購物、iPad POS 等系統服務，由網店設計、直播購物，到庫存管理都能一站完成，助你輕鬆開店！已有超過 70 萬店家在 SHOPLINE
MS
Merchant Solutions
shopterminals.com
SD
SignaPay Direct
signapaydirect.com
SkipTheDishes Restaurant Services
Consumer apps
SkipTheDishes Restaurant Services Inc, branded as Skip, is a Canadian online food delivery service headquartered in Winnipeg, Manitoba and
Skrill
Payments
Whether you're placing a bet, gaming online, or sending money internationally, Skrill's digital wallet makes every payment quick and
EC
Ezadvance Consumer Lending
smoove.world
SF
Solrise Finance
solflare.com
NT
Novara Tech L.L.C S.O.C
spay.finance
GT
Giftrix Technologies Private
spendng.com
SpotOn Transact
Travel and hospitality
Run a more profitable restaurant with
PP
Paradise Payments
spscards.com
ST
STABO
stabo.io
SE
Standard Economics
standardeconomics.com
EP
Efficient Payments
stitchpayments.net
PS
Pockvue Solutions Private
streakcard.com
Zero Technologies
Payments
Get powerful payment processing and eliminate your fees with our compliant surcharge
SP
SWIFT PAY AUS
swiftpaytoday.com
Taekus
Banking and lending
Meet Taekus. We're building the traveler's dream credit card.
TA
Takenos
takenos.com
Registry traps
Most Visa registry rows are Third Party Agent or ISO registrations, not PCI DSS validations. Those are excluded. The Mastercard SDP compliant service provider list is the second registry-grade source.
Level 1 service providers
Registries list Level 1 service providers with a QSA-signed ROC or AOC. Smaller merchants and service providers self-assess and do not appear.
Guides on PCI DSS
All articlesAnalysis
Three quarters of the Visa registry is not a PCI DSS validation
CertReports Research · 17 Sep 2026 · 10 min read
Explainers
Where PCI DSS evidence actually lives: the Visa and Mastercard registries
CertReports Research · 3 Sep 2026 · 10 min read