Analysis
The state of public compliance evidence in 2026: what 3,000 vendors actually publish
CertReports Research · 18 Sep 2026 · 12 min read
attestation
PCI DSS evidence across 3,215 vendors
PCI DSS evidence that a buyer can verify is a registry listing or an attestation of compliance. CertReports mirrors the Visa Global Registry of Service Providers, counting only rows validated as PCI DSS with a validation date, and records the assessor and the date the validation runs through.
- Verified rows
- 3,081
- Vendor-stated
- 134
- Expired
- 267
- Last verified
- 4 Nov 2026
Illumio
Security
Explore Illumio, the world's first breach containment
BigCommerce
E-commerce
BigCommerce, founded in 2009, is a leading open software-as-a-service (SaaS) ecommerce platform that empowers merchants of all sizes to
Infoblox
Networking
Infoblox's mission is to dramatically simplify complex distributed networking and security by delivering modern, cloud-first networking and
Sigma Computing
Analytics
Sigma is the next-generation of analytics for cloud data warehouses with a familiar spreadsheet-like interface that gives business experts
Bonterra
Nonprofit and fundraising
Social good software for nonprofits, corporations, public agencies, and
Marqeta
Finance and accounting
Transform your business with Marqeta's modern card issuing
VTEX
E-commerce
Modernize your stack and drive operational results with an AI-Native unified commerce
Accesso
Developer tools
accesso provides revenue-driving virtual queuing technology and innovative point-of-sale and ticketing software to top attractions around
Basis Theory
Payments
More than a token vaultâBasis Theory routes, tokenizes, and optimizes your payments to drive conversion, resilience, and
CircleCo
Collaboration
Build a home for your community, events, and courses — all under your own
Gigs
HR and HRIS
The OS for Embedded Telecom
ElevenLabs
AI tools
ElevenLabs Inc. is a software company that specializes in developing natural-sounding speech synthesis software using deep learning
Nuance
Productivity
Transform workflows, boost productivity, and drive results more effectively than ever, thanks to industry-leading AI, security, and
Docebo
Education
Docebo’s AI-powered LMS helps world-class organizations train employees, partners, and customers on a unified
Swervepay
Finance and accounting
Smarter Tech for Smarter Collections Amplify what works, automate what doesn’t, and accelerate results from day one Speak To Specialist In
LexisNexis Risk Solutions
lexisnexis.com
NCR Government
E-commerce
NCR Voyix is the platform-powered leader in unified commerce for retail and
Rackspace
Benefits and insurance
As a cloud computing services pioneer, we deliver proven multicloud solutions across your apps, data, and
Tyler Federal
Government and public sector
Tyler offers public sector software solutions designed specifically for the unique needs of state, local, and federal government
Stripe
Payments
Economic infrastructure for the internet.
Verint
Customer support
Close the AI outcomes gap with the Verint Open
X
Media and content
From breaking news and entertainment to sports and politics, get the full story with all the live
Equifax
equifax.es
Transformamos datos en
8x8
Communications and CPaaS
8x8 business VoIP helps you serve your customers better with mobile, flexible solutions that help you do business anywhere
Registry traps
Most Visa registry rows are Third Party Agent or ISO registrations, not PCI DSS validations. Those are excluded. The Mastercard SDP compliant service provider list is the second registry-grade source.
Level 1 service providers
Registries list Level 1 service providers with a QSA-signed ROC or AOC. Smaller merchants and service providers self-assess and do not appear.
Guides on PCI DSS
All articlesAnalysis
Three quarters of the Visa registry is not a PCI DSS validation
CertReports Research · 17 Sep 2026 · 10 min read
Explainers
Where PCI DSS evidence actually lives: the Visa and Mastercard registries
CertReports Research · 3 Sep 2026 · 10 min read