Analysis
The state of public compliance evidence in 2026: what 3,000 vendors actually publish
CertReports Research · 18 Sep 2026 · 12 min read
attestation
PCI DSS evidence across 3,081 vendors
PCI DSS evidence that a buyer can verify is a registry listing or an attestation of compliance. CertReports mirrors the Visa Global Registry of Service Providers, counting only rows validated as PCI DSS with a validation date, and records the assessor and the date the validation runs through.
- Verified rows
- 3,081
- Vendor-stated
- 134
- Expired
- 267
- Last verified
- 2 Nov 2026
ED
ed
ed.jp
Cloud Software
DevOps and observability
Cloud Software Group is a leading provider of enterprise infrastructure software solutions encompassing virtualization, integration, data
NE
NEO
virtuous.co.jp
Zoho
Marketing
A unique and powerful software suite trusted by millions of businesses
HiTRUST
Identity and access
HiTRUST provides EMV 3-D Secure, FIDO2/Passkey identity authentication, and AI fraud detection solutions to assist banks, payment
Nexus
nuek.com
Strike
Crypto and web3
Prediction markets have never had
y
DevOps and observability
AI agents powering financial infrastructure for merchants, banks, and
memphis
Payments
Soluciones de pago para comercios, agregadores y terminales de
BASE
E-commerce
ネットショップ作成サービス「BASE」、オンライン決済サービス「PAY.JP」、ショッピングサービス「Pay
Vortex
vortex-jp.com
株式会社VORTEXは、多彩な決済手段から最適な電子決済をご提案します。
Gusto
HR and HRIS
Provides growing businesses with everything to take care of their team
NITA
Payments
Envoyez de l'argent au Niger et dans 13 pays africains avec MyNITA : 3 000 agences, retrait en 3 minutes, frais dès 100
Fintech
Crypto and web3
Satoshi Tango es la mejor plataforma para comprar, vender e invertir en las principales criptomonedas en Argentina: Bitcoin, Ethereum
BiS
bis-inc.co.jp
テレビ番組、各種メディアを活用したPR、ブランディング事業 テレビ番組、各種メディアを活用したPR、ブランディング事業 企業や製品・サービスの魅力をテレビ番組や各種メディア、及び SNS を活用し、PR・ ブランディングを行っていきます。
DoorDash
Travel and hospitality
Restaurant delivery.
Five9
Communications and CPaaS
Five9 delivers reliable cloud contact centre and AI services that empower organisations to deliver extraordinary customer
Catalyst
hoop7.jp
HOOP7は大阪府 東大阪市・堺市にあるバスケットボールコート施設です。年中無休で深夜まで時間を気にせずコートがご利用いただけます。
Payload
Payments
Move money faster, smarter, and at any
KEV
schoolcashonline.com
Ionix
E-commerce
Acepta pagos online de forma simple y
clip
Payments
Con Clip, cobrar con tarjeta es simple, seguro y
Block
Payments
Block, Inc. is an American technology company and financial services provider for consumers and merchants
Affirm
Payments
Buy now pay later without the
Registry traps
Most Visa registry rows are Third Party Agent or ISO registrations, not PCI DSS validations. Those are excluded. The Mastercard SDP compliant service provider list is the second registry-grade source.
Level 1 service providers
Registries list Level 1 service providers with a QSA-signed ROC or AOC. Smaller merchants and service providers self-assess and do not appear.
Guides on PCI DSS
All articlesAnalysis
Three quarters of the Visa registry is not a PCI DSS validation
CertReports Research · 17 Sep 2026 · 10 min read
Explainers
Where PCI DSS evidence actually lives: the Visa and Mastercard registries
CertReports Research · 3 Sep 2026 · 10 min read