Analysis
The state of public compliance evidence in 2026: what 3,000 vendors actually publish
CertReports Research · 18 Sep 2026 · 12 min read
attestation
PCI DSS evidence across 3,215 vendors
PCI DSS evidence that a buyer can verify is a registry listing or an attestation of compliance. CertReports mirrors the Visa Global Registry of Service Providers, counting only rows validated as PCI DSS with a validation date, and records the assessor and the date the validation runs through.
- Verified rows
- 3,081
- Vendor-stated
- 134
- Expired
- 267
- Last verified
- 4 Nov 2026
SA
satim
satim.dz
SI
SAVANA ISLAMIC FINANCE
savanafinance.com
SF
SaveEz Financial Services Pvt
saveez.in
SU
Savills UK
savills.co.uk
SL
Savor Live 2.0
savorlive.com
9Q
94998390 Quebec
savpay.ca
Scheidt Bachmann
scheidt-bachmann.de
SC
schoolcms
schoolcms.net
LNW Gaming
scientificgames.com
SS
Scotch Software Pty
scotchsoftware.com
SEACHANGE FINANCIAL SERVICES
DevOps and observability
Seachange builds global financial infrastructure to power merchant payments, multi-currency accounts, FX and
SearchStax
searchstax.com
SearchStax is a cloud-based SaaS solution that helps organizations improve website search
SC
Seassist Co.Ltd
seassist.co.jp
Secta9ine
secta9ine.com
SB
Secure Bancard
securebancard.com
Automated Giving Solutions
Nonprofit and fundraising
Effortless giving. Powerful insights. The complete Donation Management System built for the Church.
Seerbit Technology
Payments
SeerBit provides payment solutions to power online and offline payments for businesses across Africa via a secure payment
Segpay Gateway
segpay.com
SM
Select Merchant Service
selectmerchantservice.com
Sembly AI
Business services
Sembly â agentic AI platform for professional
SE
Sengoku
sengokugaming.com
SF
SENORAV FINANCIAL S. A
senorav.ca
ST
Seshaasai Technologies
seshaasai.com
SE
SetldPay
setldpay.com
Registry traps
Most Visa registry rows are Third Party Agent or ISO registrations, not PCI DSS validations. Those are excluded. The Mastercard SDP compliant service provider list is the second registry-grade source.
Level 1 service providers
Registries list Level 1 service providers with a QSA-signed ROC or AOC. Smaller merchants and service providers self-assess and do not appear.
Guides on PCI DSS
All articlesAnalysis
Three quarters of the Visa registry is not a PCI DSS validation
CertReports Research · 17 Sep 2026 · 10 min read
Explainers
Where PCI DSS evidence actually lives: the Visa and Mastercard registries
CertReports Research · 3 Sep 2026 · 10 min read