Analysis
The state of public compliance evidence in 2026: what 3,000 vendors actually publish
CertReports Research · 18 Sep 2026 · 12 min read
attestation
PCI DSS evidence across 3,215 vendors
PCI DSS evidence that a buyer can verify is a registry listing or an attestation of compliance. CertReports mirrors the Visa Global Registry of Service Providers, counting only rows validated as PCI DSS with a validation date, and records the assessor and the date the validation runs through.
- Verified rows
- 3,081
- Vendor-stated
- 134
- Expired
- 267
- Last verified
- 4 Nov 2026
billtrust
Finance and accounting
Billtrust is the only B2B Cash Generation Platform that converts earned revenue into cash you can predict, defend, and
Bluefin Payment Systems
bluefin.com
BlueSnap
Payments
BlueSnap's Global Payment Orchestration Platform offers modular tech and payments expertise to help businesses drive an ROI and impact
BOTTOMLINE TECHNOLOGIES DE
Payments
Business payments made
CDS Global
Education
CDS Global BPO service provider for membership, nonprofit, media, and education brands—uniting billing, payments, print, mail, support, and
Collinson
Travel and hospitality
We are a global, privately-owned company helping the world travel with ease and
C&R Software
Finance and accounting
C&R Software delivers solutions across the Debt Collection and Recovery lifecycle, empowering organizations to manage their end-to-end
CSG Media
Customer support
Connect, bill, and engage customers with CSG's award-winning SaaS solutions for customer experience, billing, and
DataBasics
Compliance and GRC
Gain control over time, expenses, and workflows with audit-ready software built for compliance-driven organizations that can’t afford
EE
Epoch EU
epoch.com
Evervault
Compliance and GRC
Evervault specializes in data encryption and confidential computing, helping customers address data security and compliance across various
Fleetio
Automotive and mobility
We provide the comprehensive solutions and resources needed to run, repair and optimize vehicles and assets, so fleets gain control of
Simplificare
Networking
Flywire's payment platform, global payment network and industry-specific software help organizations around the world handle complex
Form Assembly
Form builders and surveys
Collect clean, compliant data with FormAssembly's secure web
Foxy.io
E-commerce
Foxyâs hosted cart & payment page allow you to sell anything, using your existing website or
GoDaddy Payments
Payments
Standalone payment processing platform with POS solution by GoDaddy, formerly Poynt
Grafana Labs
DevOps and observability
Grafana has become the world’s most popular technology used to compose observability dashboards with everything from Prometheus & Graphite
Guidewire Software
Customer support
Elevate your P&C insurance with Guidewire's industry-leading software! Streamline workflows, enhance customer experience, and drive
HIghRadius
Finance and accounting
World's #1 Autonomous Finance Platform to lower DSO, optimize working capital, fast-track financial close and improve
Interactions
AI assistants
Interactions is now part of SoundHound AI, combining agentic AI and human-assisted understanding into a powerful conversational AI
IXOPAY
Payments
IXOPAY is a leading provider of enterprise-grade payment orchestration, providing a fully integrated platform and flexible payment
Lettuce Financial Labs
Finance and accounting
Specialized tax and accounting strategies for
Localize
Translation and localization
Localize is a cloud-based translation management system that enables companies to bring their products to multilingual international
MacStadium
Cloud and hosting
As the industry-leading Mac private cloud and software-as-a-service provider enabling macOS workloads, MacStadium has been solely focused
Registry traps
Most Visa registry rows are Third Party Agent or ISO registrations, not PCI DSS validations. Those are excluded. The Mastercard SDP compliant service provider list is the second registry-grade source.
Level 1 service providers
Registries list Level 1 service providers with a QSA-signed ROC or AOC. Smaller merchants and service providers self-assess and do not appear.
Guides on PCI DSS
All articlesAnalysis
Three quarters of the Visa registry is not a PCI DSS validation
CertReports Research · 17 Sep 2026 · 10 min read
Explainers
Where PCI DSS evidence actually lives: the Visa and Mastercard registries
CertReports Research · 3 Sep 2026 · 10 min read