Analysis
The state of public compliance evidence in 2026: what 3,000 vendors actually publish
CertReports Research · 18 Sep 2026 · 12 min read
attestation
PCI DSS evidence across 134 vendors
PCI DSS evidence that a buyer can verify is a registry listing or an attestation of compliance. CertReports mirrors the Visa Global Registry of Service Providers, counting only rows validated as PCI DSS with a validation date, and records the assessor and the date the validation runs through.
- Verified rows
- 3,081
- Vendor-stated
- 134
- Expired
- 267
- Last verified
- 2 Nov 2026
WeTransfer
Cloud storage
The simple, quick and secure way to send your files around the world without an
Anaconda
Analytics
Anaconda is the trusted foundation for AI-native
Notion
Collaboration
Build Custom Agents, search across all your apps, and automate
GBG
Identity and access
We offer a range of solutions that help organisations quickly validate and verify the identity and location of their
jwplayer
DevOps and observability
JWX helps streamers, publishers, and advertisers create, deliver, and monetize video with one intelligent workflow - built for speed
Rocket Lawyer
Productivity
Rocket Lawyer makes the law affordable and
99minutos
Procurement
The fastest shipping for online shopping
Docufree
Cloud storage
Docufree is an intelligent document processing solution designed to capture, manage, and automate information for highly-regulated
FareHarbor
Scheduling
FareHarbor is the best online booking software for your
Gladly
E-commerce
Gladly brings agentic commerce to your site for premium ecommerce
HONEYBOOK
CRM
HoneyBook is an American software as a service (SaaS) company that provides business management tools for freelancers, independent
NetScout Systems
DevOps and observability
Drive observability, cybersecurity, DDoS protection, and AIOps initiatives with NETSCOUT's AI-ready data
Priority Dispatch
Government and public sector
Learn how Priority Dispatch Corporation's Priority Dispatch System makes Emergency Dispatch safer, more efficient, and more
RainFocus
rainfocus.com
Discover RainFocus, the premier event management software designed to accelerate growth and
SEON Technologies
Security
SEON's fraud prevention platform unifies real-time detection and AML in one
Gemshelf
shelf.io
Eliminate bad data before it becomes the wrong
SmartComms
smartcommunications.com
Teleport
Security
The Infrastructure Identity Company
Lively
Benefits and insurance
Modern employee benefits & health savings account (HSA) provider
Giga
AI tools
AI Support Agent for Enterprises.
Belvo
Finance and accounting
Open Finance API platform for Latam.
SU
Supabase
Developer tools
Build in a weekend. Scale to millions.
Antrepriz Solutions Pvt
Finance and accounting
Manage all your corporate spending with dice and make daily business operations fast and
Duffel
Logistics and supply chain
The complete toolkit to sell travel.
Registry traps
Most Visa registry rows are Third Party Agent or ISO registrations, not PCI DSS validations. Those are excluded. The Mastercard SDP compliant service provider list is the second registry-grade source.
Level 1 service providers
Registries list Level 1 service providers with a QSA-signed ROC or AOC. Smaller merchants and service providers self-assess and do not appear.
Guides on PCI DSS
All articlesAnalysis
Three quarters of the Visa registry is not a PCI DSS validation
CertReports Research · 17 Sep 2026 · 10 min read
Explainers
Where PCI DSS evidence actually lives: the Visa and Mastercard registries
CertReports Research · 3 Sep 2026 · 10 min read