The state of public compliance evidence in 2026: what 3,000 vendors actually publish
CertReports Research · 18 Sep 2026 · 12 min read
attestation
PCI DSS evidence that a buyer can verify is a registry listing or an attestation of compliance. CertReports mirrors the Visa Global Registry of Service Providers, counting only rows validated as PCI DSS with a validation date, and records the assessor and the date the validation runs through.
mondopayments.com
monedaro.com
Payments
FCA-authorised UK payment gateway for small
monetiquetunisie.com
Benefits and insurance
The digital world is
moneybox.com
moneynetwork.com
moni.africa
monkiorders.com
monneo.com
Payments
Cobra en línea y realiza pagos masivos de manera sencilla, rápida y
DevOps and observability
Embedded finance infrastructure for LatAm enterprises.
mooncard.com
Crypto and web3
Crypto asset service provider in EU
moov-africa.bf
moov-africa.bj
Payments
Moov is the payments platform powering
Manufacturing and industrial
Payment, software and hardware solutions for retail anywhere
moqpay.com
morethanpayroll.com
mortgagehouse.com.au
motoverse.pro
motshelo-mobile.com
mottopay.com
Most Visa registry rows are Third Party Agent or ISO registrations, not PCI DSS validations. Those are excluded. The Mastercard SDP compliant service provider list is the second registry-grade source.
Registries list Level 1 service providers with a QSA-signed ROC or AOC. Smaller merchants and service providers self-assess and do not appear.
CertReports Research · 18 Sep 2026 · 12 min read
CertReports Research · 17 Sep 2026 · 10 min read
CertReports Research · 3 Sep 2026 · 10 min read