Analysis
The state of public compliance evidence in 2026: what 3,000 vendors actually publish
CertReports Research · 18 Sep 2026 · 12 min read
attestation
PCI DSS evidence across 134 vendors
PCI DSS evidence that a buyer can verify is a registry listing or an attestation of compliance. CertReports mirrors the Visa Global Registry of Service Providers, counting only rows validated as PCI DSS with a validation date, and records the assessor and the date the validation runs through.
- Verified rows
- 3,081
- Vendor-stated
- 134
- Expired
- 267
- Last verified
- 2 Nov 2026
Haku App
Nonprofit and fundraising
haku is the all-in-one platform for endurance events and
Invoca
Sales tools
Convert more inbound leads with AI that engages, qualifies, and routes high-intent buyers across online and offline
KLDiscovery Ontrack
Legal tech
KLDiscovery delivers AI-driven eDiscovery software and services supporting litigation, investigations, and regulatory matters for legal
PixieBrix
pixiebrix.com
For customer care operations teams: see every agent action in the browser, intervene in real time before problems become real, and enforce
Avora
Sales tools
Revenue Intelligence platform that automatically captures sales activities to help you identify and fix revenue
RR Donnelley RRD
Marketing
RRD offers the most trusted portfolio of marketing, packaging, print, and supply chain
Safe Software
Data platforms
We help organizations do more with their
SearchStax
searchstax.com
SearchStax is a cloud-based SaaS solution that helps organizations improve website search
Sembly AI
Business services
Sembly â agentic AI platform for professional
SignalWire
Communications and CPaaS
Build AI voice agents, contact centers, and unified communications on one programmable
Tempo Software
Project management
Tempo Software is a leading provider of robust project and portfolio management solutions designed to empower organizations to achieve
Theta Lake
Collaboration
Theta Lake’s multi-award-winning product suite provides patented compliance and security for modern collaboration platforms, enabling
Ticketure
Customer support
Ticketing software for museums, zoos and
Userlytics
Form builders and surveys
Remote user testing with
Veracross
Education
Eliminate data chaos with the leading student information system for private & independent K-12
Vimeo
Media and content
The video platform trusted by 287 million creatives, entrepreneurs, and
Canva
Design tools
Canva, Inc. is an Australian multinational software company launched in 2013
Sardine
Security
The top agentic risk platform used by leading banks and merchants worldwide to stop fraud in real-time, prevent AI-driven attacks, automate
Redis
Data platforms
Redis is an in-memory key–value database, used as a distributed cache and message broker, with optional durability
Typeform
Form builders and surveys
Typeform is a software as a service (SaaS) company that specializes in online form building and online surveys
ClickUp
Project management
Our mission is to make the world more
Delinea
Identity and access
Try Delinea's AI-driven identity security, authorization and PAM solutions to secure privileged access across your organization in real
Ambassador
getambassador.com
Grow, keep, and prove revenue from the customers you already
Vapi
AI tools
Voice AI for developers.
Registry traps
Most Visa registry rows are Third Party Agent or ISO registrations, not PCI DSS validations. Those are excluded. The Mastercard SDP compliant service provider list is the second registry-grade source.
Level 1 service providers
Registries list Level 1 service providers with a QSA-signed ROC or AOC. Smaller merchants and service providers self-assess and do not appear.
Guides on PCI DSS
All articlesAnalysis
Three quarters of the Visa registry is not a PCI DSS validation
CertReports Research · 17 Sep 2026 · 10 min read
Explainers
Where PCI DSS evidence actually lives: the Visa and Mastercard registries
CertReports Research · 3 Sep 2026 · 10 min read