The state of public compliance evidence in 2026: what 3,000 vendors actually publish
CertReports Research · 18 Sep 2026 · 12 min read
attestation
PCI DSS evidence that a buyer can verify is a registry listing or an attestation of compliance. CertReports mirrors the Visa Global Registry of Service Providers, counting only rows validated as PCI DSS with a validation date, and records the assessor and the date the validation runs through.
Customer support
Close the AI outcomes gap with the Verint Open
Developer tools
Postman is an API platform for building and using
Analytics
Pendo feeds product context to the apps and AI agents you build or buy, so you can understand your users, act where it counts, and drive
Communications and CPaaS
8x8 business VoIP helps you serve your customers better with mobile, flexible solutions that help you do business anywhere
Education
Docebo’s AI-powered LMS helps world-class organizations train employees, partners, and customers on a unified
Cloud storage
The Druva Data Resiliency Cloud is the only at-scale SaaS platform designed for your multi-cloud
Security
Explore Illumio, the world's first breach containment
Networking
Infoblox's mission is to dramatically simplify complex distributed networking and security by delivering modern, cloud-first networking and
Analytics
Sigma is the next-generation of analytics for cloud data warehouses with a familiar spreadsheet-like interface that gives business experts
Nonprofit and fundraising
Social good software for nonprofits, corporations, public agencies, and
Collaboration
Build a home for your community, events, and courses — all under your own
Finance and accounting
C&R Software delivers solutions across the Debt Collection and Recovery lifecycle, empowering organizations to manage their end-to-end
Automotive and mobility
We provide the comprehensive solutions and resources needed to run, repair and optimize vehicles and assets, so fleets gain control of
HR and HRIS
The OS for Embedded Telecom
DevOps and observability
Grafana has become the world’s most popular technology used to compose observability dashboards with everything from Prometheus & Graphite
Translation and localization
Localize is a cloud-based translation management system that enables companies to bring their products to multilingual international
Cloud and hosting
As the industry-leading Mac private cloud and software-as-a-service provider enabling macOS workloads, MacStadium has been solely focused
Sales tools
Sybill is the AI revenue intelligence platform trusted by 750+ revenue teams to turn every customer conversation into CRM data
AI tools
ElevenLabs Inc. is a software company that specializes in developing natural-sounding speech synthesis software using deep learning
Sales tools
Gong Revenue AI OS helps your entire GTM organization
Travel and hospitality
Streamline your corporate travel management and expense processes in one
Collaboration
Modernize workflows with Zoom's trusted collaboration tools: including video meetings, Zoom Chat, VoIP phone, webinars, whiteboard, contact
Customer support
Your support team talks to more customers than anyone in your
Cloud and hosting
The autonomous stack for every app and
Most Visa registry rows are Third Party Agent or ISO registrations, not PCI DSS validations. Those are excluded. The Mastercard SDP compliant service provider list is the second registry-grade source.
Registries list Level 1 service providers with a QSA-signed ROC or AOC. Smaller merchants and service providers self-assess and do not appear.
CertReports Research · 18 Sep 2026 · 12 min read
CertReports Research · 17 Sep 2026 · 10 min read
CertReports Research · 3 Sep 2026 · 10 min read