Analysis
The state of public compliance evidence in 2026: what 3,000 vendors actually publish
CertReports Research · 18 Sep 2026 · 12 min read
attestation
PCI DSS evidence across 3,081 vendors
PCI DSS evidence that a buyer can verify is a registry listing or an attestation of compliance. CertReports mirrors the Visa Global Registry of Service Providers, counting only rows validated as PCI DSS with a validation date, and records the assessor and the date the validation runs through.
- Verified rows
- 3,081
- Vendor-stated
- 134
- Expired
- 267
- Last verified
- 3 Nov 2026
Bay 2
centre-commercial.fr
Eurobill Tech
Payments
Unlock global payment possibilities with
SALEM INTERNACIONAL SA CV
centum.mx
Centum - Innovando Seriamente
Chain App
DevOps and observability
Chain provides enterprise-grade stablecoin infrastructure powering payments at
CHAKA CARD SN
chakacard.com
CW
Chan Wanich Security Printing
chanwanich.com
MB
Memen Brothers
charge.fun
International Risk Mitigation
Analytics
Chargeback Gurus helps businesses protect and recover revenue by providing innovative chargeback management solutions and advanced
Chargebacks911
Payments
Chargebacks911 is the original chargeback management company with solutions to prevent chargebacks before they happen and fight chargebacks
Checkbook
Payments
Our all-in-one push payments platform offers everything you need to disburse payments at
Checkout Champ
checkoutchamp.com
Chexy
Payments
Pay rent and every major bill with your credit
Chime Financial
chime.com
CHIP IN SDN BHD
Payments
CHIP is a Digital Finance Platform that helps Malaysian businesses collect payments, manage cashflow, control expenses, send payouts and
Choice Hotels
Travel and hospitality
Choice Hotels International, Inc. is an American multinational hospitality company based in North Bethesda, Maryland
Chord Payment Technologies
chordpay.com
The Chosen
chosenpayments.com
Church Community Builder
Analytics
See why 14,000+ churches run on Pushpay - the church engagement platform for giving, custom apps, analytics, and live
Secure Transactions
Payments
Recibe, paga y pon tu dinero a crecer de la forma más
Ciphertext Solutions
Payments
Enable cardholders to activate and use cards in seconds, not
PT. Cipta Srigati Lestari
cipta.com
CITYLINE HONG KONG
cityline.com
å¯ä»¥å°Citylineè²·é£åæ¶é£ï¼è¦ªèº«å ¥å ´æåç¾å ´æ°£æ° â æ¬å°å大ç£åæ¼å±æãé«è²åæåç¯ç®ã
C K Systems
Education
World-class retail management solutions with renowned support, implementation and training
CLAPP
Crypto and web3
Your cash and crypto in one
Registry traps
Most Visa registry rows are Third Party Agent or ISO registrations, not PCI DSS validations. Those are excluded. The Mastercard SDP compliant service provider list is the second registry-grade source.
Level 1 service providers
Registries list Level 1 service providers with a QSA-signed ROC or AOC. Smaller merchants and service providers self-assess and do not appear.
Guides on PCI DSS
All articlesAnalysis
Three quarters of the Visa registry is not a PCI DSS validation
CertReports Research · 17 Sep 2026 · 10 min read
Explainers
Where PCI DSS evidence actually lives: the Visa and Mastercard registries
CertReports Research · 3 Sep 2026 · 10 min read