Analysis
The state of public compliance evidence in 2026: what 3,000 vendors actually publish
CertReports Research · 18 Sep 2026 · 12 min read
attestation
PCI DSS evidence across 3,081 vendors
PCI DSS evidence that a buyer can verify is a registry listing or an attestation of compliance. CertReports mirrors the Visa Global Registry of Service Providers, counting only rows validated as PCI DSS with a validation date, and records the assessor and the date the validation runs through.
- Verified rows
- 3,081
- Vendor-stated
- 134
- Expired
- 267
- Last verified
- 3 Nov 2026
Compass Plus GB Online
Payments
Compass Plus Technologies is passionate about payments technology and architecting it properly for the needs of today and
IVXS Technology SG Pte.Ltd
Compliance and GRC
Discover ComplyAdvantage solutions where we automate manual labor-intensive processes and significantly minimize false-positive hit
Concentrix Solutions
Business services
Concentrix is a global technology and services leader that powers the world’s best brands, today and into the
Concerto Software Systems Pvt
concertosoft.com
Concord Servicing
Finance and accounting
Credit administration servicing and software for specialty finance markets, connecting investors, originators, and
Conduent Business Services
Business services
Explore Conduent's solutions and services to streamline operations, enhance customer experiences, lower costs and drive measurable results
conekta
Payments
Somos la plataforma de pagos en línea que ayuda a tu negocio a cobrar en linea con efectivo, tarjeta o transferencia
Connect Fintech Services
connect.financial
Discover smarter financial solutions with Connect
OF
Optum Financial
Benefits and insurance
We improve health and financial well-being by transforming how people and organizations save, spend, invest and pay for health
Connfido
connfido.com
Constellation Technologies Switzerland
constellation.money
Consultants ESP
consultantsesp.com
ConsumerDirect
consumerdirect.com
contasimples
Finance and accounting
All-in-one financial platform for latam Startups and SMBs.
Contisystems
conti.systems
Emails, processos digitais, sms, cartas, folhetos, envelopes, cartões, extratos, faturas…Conheça tudo o que podemos fazer em conjunto na
CM
Continental Merchant Services
Payments
Continental Merchants - Innovative Payment
Continental Payment
Compliance and GRC
Your Payment Service Provider | Payment | c-paynow | Risk Management | Credit Assessment | Receivables Management | Debt Collection |
Coprte
coprte.com
Coral Commerce
Payments
One API. 40 countries. Card, mobile money, wallets and accounts all connected through one payment orchestration platform. PCI DSS compliant since 2020.
CO
cordisnetwork
cordisnetwork.com
CoreCard Software
Banking and lending
CoreCard provides an API-first credit issuing and processing platform for banks, fintechs, and lenders across credit, BNPL, prepaid, debit
CORE Cashless
Payments
CORE Cashless allows guests to create unforgettable memories without the hassle of cash, ensuring that their focus stays on the moments
CoreCommerce
Payments
CoreCommerce provides businesses, web developers, ISOs/agents, & software partners with the tools to seamlessly accept secure online
Koritchi
Media and content
小劇場・演劇・舞台のチケット予約サイト「こりっちチケット！」。受付中の公演からまもなく発売の公演、アーカイブ配信まで。観たい舞台のチケットがすぐに予約できます。
Registry traps
Most Visa registry rows are Third Party Agent or ISO registrations, not PCI DSS validations. Those are excluded. The Mastercard SDP compliant service provider list is the second registry-grade source.
Level 1 service providers
Registries list Level 1 service providers with a QSA-signed ROC or AOC. Smaller merchants and service providers self-assess and do not appear.
Guides on PCI DSS
All articlesAnalysis
Three quarters of the Visa registry is not a PCI DSS validation
CertReports Research · 17 Sep 2026 · 10 min read
Explainers
Where PCI DSS evidence actually lives: the Visa and Mastercard registries
CertReports Research · 3 Sep 2026 · 10 min read