The state of public compliance evidence in 2026: what 3,000 vendors actually publish
CertReports Research · 18 Sep 2026 · 12 min read
attestation
PCI DSS evidence that a buyer can verify is a registry listing or an attestation of compliance. CertReports mirrors the Visa Global Registry of Service Providers, counting only rows validated as PCI DSS with a validation date, and records the assessor and the date the validation runs through.
polly-service.com
posbrokers.com
procaresoftware.com
prtimes.jp
pspangels.com
rampeasy.com
sakura-tempesta.org
sankmoney.com
sbga.com
scriptedhost.com
sendana.com
singularpayments.com
slatefi.com
sobit.cz
solventa.co
sonymusic.co.jp
splitfirstatm.com
spp-pay.com
stardatapays.com
stashfin.com
Finance and accounting
A spend management software that provides businesses visibility,…
sumup.cl
sundayapp.com
swipe-tech.com
Most Visa registry rows are Third Party Agent or ISO registrations, not PCI DSS validations. Those are excluded. The Mastercard SDP compliant service provider list is the second registry-grade source.
Registries list Level 1 service providers with a QSA-signed ROC or AOC. Smaller merchants and service providers self-assess and do not appear.
CertReports Research · 18 Sep 2026 · 12 min read
CertReports Research · 17 Sep 2026 · 10 min read
CertReports Research · 3 Sep 2026 · 10 min read