Analysis
The state of public compliance evidence in 2026: what 3,000 vendors actually publish
CertReports Research · 18 Sep 2026 · 12 min read
attestation
PCI DSS evidence across 3,081 vendors
PCI DSS evidence that a buyer can verify is a registry listing or an attestation of compliance. CertReports mirrors the Visa Global Registry of Service Providers, counting only rows validated as PCI DSS with a validation date, and records the assessor and the date the validation runs through.
- Verified rows
- 3,081
- Vendor-stated
- 134
- Expired
- 267
- Last verified
- 3 Nov 2026
Redstone Payment Solutions
redstonepayments.com
US
Unibanca S.A. Miraflores
redunicard.pe
RE
Refinr
refinr.com.au
RE
Rehive
rehive.com
RI
REITECH.inc
reitechjp.com
M A Ventures
repay.com
RK
Resona Kessai Service
resona-ks.co.jp
Admoji
CRM
Replace your agency, CRM, and Shopify
TR
The Results Companies
resultstel.com
Retail in Motion
Travel and hospitality
Onboard Retail Tech Specialists Retail InMotion partners with some of the world’s largest airlines to power onboard retail programmes with
CO
ConsumerPay
retrievernpc.com
Revel Systems
E-commerce
Revel Systems is an iPad-based point of sale system co-founded by Lisa Falzone and Christopher Ciabarra
RM
REVENUE MONSTER SDN BHD
Payments
Experience fast, secure, and reliable transactions with Revenue Monster, the leading payment gateway service provider in Malaysia for
RP
Revolution Payment Systems
revolution-payments.com
Revolv3
AI tools
Revolv3 uses artificial intelligence to optimize our payment processing
RevSpring
Healthcare
RevSpring connects access, engagement, and payments to reduce friction and modernize the healthcare experience for providers and
Avon Data Systems
Travel and hospitality
Rezcontrol offers cutting edge hotel management software which puts hoteliers in
RP
Riverside Payments
riversidepayments.com
RI
RIYUTEKU
riyuya.net
FinServices
robokassa.kz
NR
NGO Rocinantes
rocinantes.org
RI
Rokutel international
rokutel.com
RF
Rolla Finance
rolla.xyz
Rootline
DevOps and observability
Your financial infrastructure wasn't built for your
Registry traps
Most Visa registry rows are Third Party Agent or ISO registrations, not PCI DSS validations. Those are excluded. The Mastercard SDP compliant service provider list is the second registry-grade source.
Level 1 service providers
Registries list Level 1 service providers with a QSA-signed ROC or AOC. Smaller merchants and service providers self-assess and do not appear.
Guides on PCI DSS
All articlesAnalysis
Three quarters of the Visa registry is not a PCI DSS validation
CertReports Research · 17 Sep 2026 · 10 min read
Explainers
Where PCI DSS evidence actually lives: the Visa and Mastercard registries
CertReports Research · 3 Sep 2026 · 10 min read