Analysis
The state of public compliance evidence in 2026: what 3,000 vendors actually publish
CertReports Research · 18 Sep 2026 · 12 min read
attestation
PCI DSS evidence across 3,081 vendors
PCI DSS evidence that a buyer can verify is a registry listing or an attestation of compliance. CertReports mirrors the Visa Global Registry of Service Providers, counting only rows validated as PCI DSS with a validation date, and records the assessor and the date the validation runs through.
- Verified rows
- 3,081
- Vendor-stated
- 134
- Expired
- 267
- Last verified
- 2 Nov 2026
Nuance
Productivity
Transform workflows, boost productivity, and drive results more effectively than ever, thanks to industry-leading AI, security, and
Twic
Benefits and insurance
Forma’s flexible benefits software helps companies offer competitive benefits packages while reducing
Zuora
Payments
Zuora is the leading Quote to Cash and subscription management platform, unifying billing, payments, revenue, and AR to scale your modern
Expensify
Finance and accounting
Expensify, Inc. is an American software company that develops an expense management system for personal and business use
Mindbody
Mental health
Fuel the growth of your business with Mindbody's all-in-one software-the only platform powered by 20+ years of experience in fitness
Recurly
Finance and accounting
Recurly powers subscription management and recurring billing for high-volume digital
BigCommerce
E-commerce
BigCommerce, founded in 2009, is a leading open software-as-a-service (SaaS) ecommerce platform that empowers merchants of all sizes to
Vesta
Payments
Vesta helps telecom brands approve more payments, reduce fraud losses & grow revenue with specialized payment processing &
Remitly
Payments
Send money online faster and more securely with Remitly, and discover our great exchange rates and low money transfer
Travelport
Travel and hospitality
Travelport is on a mission to simplify the complexities of an industry we have known and loved for
Active Network
Payments
Discover software that powers community organizations, parks & recreation, and endurance
Cendyn
Marketing
DXC Technology
Business services
DXC Technology helps clients harness the power of innovation to thrive on
i2c
Payments
Outpace legacy and unproven modern platforms with i2c's next generation platform & composable solutions built for speed, reliability and
Marqeta
Finance and accounting
Transform your business with Marqeta's modern card issuing
PaySimple
Payments
Integrated payments to simplify and empower the lives of small business
Skyflow
Security
The runtime AI data control platform for
Subsplash
Nonprofit and fundraising
The Subsplash Platform equips churches with the best mobile apps, church management software, websites, online giving, and more to engage
TCN
Communications and CPaaS
TCN’s cloud contact center software and AI powered solutions empower your contact or call center with an elevated experience for agents &
Neustar
transunion.com
Viasat
Networking
Viasat is a global communications company connecting homes, businesses, governments & militaries with satellite internet, connectivity
VTEX
E-commerce
Modernize your stack and drive operational results with an AI-Native unified commerce
FR
FreedomPay
.com
2C2P
Payments
2C2P is a payment service provider that helps companies in emerging markets accept and make payments
Registry traps
Most Visa registry rows are Third Party Agent or ISO registrations, not PCI DSS validations. Those are excluded. The Mastercard SDP compliant service provider list is the second registry-grade source.
Level 1 service providers
Registries list Level 1 service providers with a QSA-signed ROC or AOC. Smaller merchants and service providers self-assess and do not appear.
Guides on PCI DSS
All articlesAnalysis
Three quarters of the Visa registry is not a PCI DSS validation
CertReports Research · 17 Sep 2026 · 10 min read
Explainers
Where PCI DSS evidence actually lives: the Visa and Mastercard registries
CertReports Research · 3 Sep 2026 · 10 min read