Analysis
The state of public compliance evidence in 2026: what 3,000 vendors actually publish
CertReports Research · 18 Sep 2026 · 12 min read
attestation
PCI DSS evidence across 3,215 vendors
PCI DSS evidence that a buyer can verify is a registry listing or an attestation of compliance. CertReports mirrors the Visa Global Registry of Service Providers, counting only rows validated as PCI DSS with a validation date, and records the assessor and the date the validation runs through.
- Verified rows
- 3,081
- Vendor-stated
- 134
- Expired
- 267
- Last verified
- 4 Nov 2026
Contentful
Developer tools
Contentful is a German-American headless content management system (CMS), founded in 2013 in Berlin, Germany, by Sascha Konietzke and Paolo
Vanta
Compliance and GRC
Vanta—the proven leader in automated compliance helping startups…
Snowflake
Data platforms
Snowflake is a data platform built for the
Iron Mountain
Cloud storage
Offsite storage facility of the United States National Archives and Records Administration
CGI
Business services
Since 1976, CGI has grown into one of the largest IT and business consulting services firms in the
DataBank
Cloud and hosting
DataBank’s Managed Cloud transforms our Standard Cloud (IaaS) service into a comprehensively managed Platform-as-a-Service (PaaS)
Salesforce
CRM
Salesforce, Inc. is an American enterprise software company headquartered in San Francisco, California
CVENT
Marketing
Cvent is the global leader in event management
Blackbaud
Nonprofit and fundraising
Blackbaud is the world’s leading cloud software company powering social
Chargebee
Finance and accounting
Chargebee is the world’s leading Revenue Growth Management (RGM) platform for subscription
Forter
Networking
The only fraud prevention platform, powered by the largest network of online retailers, that knows which customers to trust, in real-time
Spreedly
Payments
Tens of thousands of global businesses depend on our robust orchestration platform, diverse ecosystem of services, and unmatched market
FIS FL
Finance and accounting
FIS is fintech for bold
Sierra Technologies
AI assistants
Sierra is the conversational AI platform for
OpenAI
AI infrastructure
OpenAI is an AI research and deployment
Wiz
Security
Wiz is on a mission to transform cloud security for customers – which include 40% of the Fortune 100 – by empowering them to embrace a new
Dropbox
Cloud storage
Backup and share files in the cloud.
Twilio
Communications and CPaaS
Build amazing customer experiences on the Twilio platform with APIs for SMS, RCS, voice, and email, plus conversational AI for smarter
Ramp
Finance and accounting
Make expense management easy with Ramp's spend management
Fivetran
Data platforms
The leader in automated data movement
BeyondTrust
Identity and access
BeyondTrust Corporation is an American company that develops privileged access management (PAM) and vulnerability management software
Postman
Developer tools
Postman is an API platform for building and using
Pendo
Analytics
Pendo feeds product context to the apps and AI agents you build or buy, so you can understand your users, act where it counts, and drive
Druva
Cloud storage
The Druva Data Resiliency Cloud is the only at-scale SaaS platform designed for your multi-cloud
Registry traps
Most Visa registry rows are Third Party Agent or ISO registrations, not PCI DSS validations. Those are excluded. The Mastercard SDP compliant service provider list is the second registry-grade source.
Level 1 service providers
Registries list Level 1 service providers with a QSA-signed ROC or AOC. Smaller merchants and service providers self-assess and do not appear.
Guides on PCI DSS
All articlesAnalysis
Three quarters of the Visa registry is not a PCI DSS validation
CertReports Research · 17 Sep 2026 · 10 min read
Explainers
Where PCI DSS evidence actually lives: the Visa and Mastercard registries
CertReports Research · 3 Sep 2026 · 10 min read