Analysis
The state of public compliance evidence in 2026: what 3,000 vendors actually publish
CertReports Research · 18 Sep 2026 · 12 min read
attestation
PCI DSS evidence across 3,215 vendors
PCI DSS evidence that a buyer can verify is a registry listing or an attestation of compliance. CertReports mirrors the Visa Global Registry of Service Providers, counting only rows validated as PCI DSS with a validation date, and records the assessor and the date the validation runs through.
- Verified rows
- 3,081
- Vendor-stated
- 134
- Expired
- 267
- Last verified
- 2 Nov 2026
blackbulls
blackbulls.jp
BLAUBLITZ AKITA
blaublitz.jp
Blaublitz Akita is a Japanese professional association football team based in Akita, capital of Akita Prefecture
BluePenguin Payments
No-code and automation
Simplify and streamline outbound payments with our versatile and secure payment automation
cac ci
cac-ci.com
Capital on Tap
Banking and lending
With the Capital on Tap business credit card, get up to £250k to grow your
card cutters
E-commerce
Card Cutters are a leading credit card swipe machine UAE
Card Industry Professionals
cardindustryprofessionals.co.uk
Cardo
Payments
Cárdo Payment Solutions: B2B payment infrastructure with Level 2/3 rates, hosted payment pages, gateways and accounting integrations, with
CASTLE IT SOLUTIONS
Travel and hospitality
Castle IT provides interactive kiosks, event kiosk rentals, wayfinding solutions and restaurant POS systems for businesses across Dubai and
CI
Cathay International Shopping Center
Payments
กระเป๋าเงินของคนรุ่นใหม่ รับ-จ่าย ง่ายๆแค่ปลายนิ้ว บริษัท คาเธ่ย์เพย์ (ประเทศไทย)
Celeriz
celeriz.com
Centralsquare Canada Software
Government and public sector
Public sector software for public safety and
Challas
challasgroup.com
Approved POS
Payments
Explore Innovation, Explore Solutions Allow us to help you with your payment system and merchant needs,so you can focus on growing your
ClearPay
clearpay.us
Comprise Technologies
comprisetechnologies.com
Comun
Banking and lending
Cuenta bancaria sin comisiones ni saldo
WE
WEX Europe
corporatepay.com
CPOS
Manufacturing and industrial
Turn your phone into a card
CULQI
Payments
Culqi ofrece soluciones de pago, como POS y pasarelas, para que aceptes tarjetas, billeteras digitales y otros medios de pago de forma
CypherD Wallet
Crypto and web3
Crypto Neo-Bank (WhatsApp moment for bank accounts)
Decaf
Payments
Receive, hold, convert, pay suppliers, run disbursements, and automate global money movement through one Decaf Business
DS
Del s Equipment Services
Payments
Professional merchant services and payment processing solutions with competitive rates and exceptional
FORTCAR
Payments
The unified platform to grow and simplify
Registry traps
Most Visa registry rows are Third Party Agent or ISO registrations, not PCI DSS validations. Those are excluded. The Mastercard SDP compliant service provider list is the second registry-grade source.
Level 1 service providers
Registries list Level 1 service providers with a QSA-signed ROC or AOC. Smaller merchants and service providers self-assess and do not appear.
Guides on PCI DSS
All articlesAnalysis
Three quarters of the Visa registry is not a PCI DSS validation
CertReports Research · 17 Sep 2026 · 10 min read
Explainers
Where PCI DSS evidence actually lives: the Visa and Mastercard registries
CertReports Research · 3 Sep 2026 · 10 min read