Analysis
The state of public compliance evidence in 2026: what 3,000 vendors actually publish
CertReports Research · 18 Sep 2026 · 12 min read
attestation
PCI DSS evidence across 3,081 vendors
PCI DSS evidence that a buyer can verify is a registry listing or an attestation of compliance. CertReports mirrors the Visa Global Registry of Service Providers, counting only rows validated as PCI DSS with a validation date, and records the assessor and the date the validation runs through.
- Verified rows
- 3,081
- Vendor-stated
- 134
- Expired
- 267
- Last verified
- 3 Nov 2026
bvnk
Payments
Enterprise stablecoin payments
Bybit Technology
bybit.com
Axiom Nexus
Crypto and web3
Unlock cashback, offers, and off-ramp earnings with Bybit Crypto
Siemens Mobility
Customer support
Bytemark, Inc. is a Siemens Company that enables digital ticketing technology for public transit agencies. The offer account-based ticketing, mobile ticketing, back office solution
Cadana Pay
DevOps and observability
Purpose-built for talent marketplaces, staffing platforms international HR providers, Cadana's white-label infrastructure enables you to
CE
CADAP EAST AFRICA
cadapworld.com
Technologies that connect
Cale Systems
calesystems.com
Flowbird's solutions in parking and transport make urban life more accessible, efficient, and environmentally
CALLPHONE
callphoneng.com
Cambey West
cambeywest.com
CA
camelfin
camelfin.com
Camis
camis.com
Reservations and park management
Computer Age Management Services
camspay.com
Cantaloupe
E-commerce
Cantaloupe powers self-service commerce around the world with innovative technology and software solutions for businesses of all
CAPI MONEY CANADA
Payments
Helping businesses in emerging markets make pay their international…
Capital Payments
capitalpaymentsusa.com
CP
Capital Processors
capitalprocessors.com
Q-Man
Payments
Credit Card Processing
Capital Software Pty
capitalsoftware.net
Capstone Logistics
Logistics and supply chain
Capstone Logistics is a third-party logistics (3PL) company that provides warehouse management and transportation services for supply chain
CA
CarCarePit
carcarepit.com
MF
MONEPEAK FINTECH PRIVATE
DevOps and observability
CARD91 builds regulated payment infrastructure for banks and NBFCs—covering issuing, acquiring, risk, governance, and AI-driven decisioning
Card Access Services
Payments
Australia’s most experienced Payment Gateway Helping merchants accept payments since
UC
UBS Card Center
cardcenter.ch
CardCentral
Procurement
CardCentral® is a full-service incentive and loyalty program fulfillment
Registry traps
Most Visa registry rows are Third Party Agent or ISO registrations, not PCI DSS validations. Those are excluded. The Mastercard SDP compliant service provider list is the second registry-grade source.
Level 1 service providers
Registries list Level 1 service providers with a QSA-signed ROC or AOC. Smaller merchants and service providers self-assess and do not appear.
Guides on PCI DSS
All articlesAnalysis
Three quarters of the Visa registry is not a PCI DSS validation
CertReports Research · 17 Sep 2026 · 10 min read
Explainers
Where PCI DSS evidence actually lives: the Visa and Mastercard registries
CertReports Research · 3 Sep 2026 · 10 min read