Analysis
The state of public compliance evidence in 2026: what 3,000 vendors actually publish
CertReports Research · 18 Sep 2026 · 12 min read
attestation
PCI DSS evidence across 3,215 vendors
PCI DSS evidence that a buyer can verify is a registry listing or an attestation of compliance. CertReports mirrors the Visa Global Registry of Service Providers, counting only rows validated as PCI DSS with a validation date, and records the assessor and the date the validation runs through.
- Verified rows
- 3,081
- Vendor-stated
- 134
- Expired
- 267
- Last verified
- 4 Nov 2026
Amazon Web Services
Cloud and hosting
Amazon Web Services, Inc. (AWS) is a subsidiary of Amazon that provides on-demand cloud computing platforms and APIs to individuals
Gong
Sales tools
Gong Revenue AI OS helps your entire GTM organization
Navan
Travel and hospitality
Streamline your corporate travel management and expense processes in one
Data Zoo
Identity and access
Data Zoo is a leading identity solutions provider and one of the fastest-growing tech companies in Australia (Deloitte Fast 50
FT
Fusion Telecom
Payments
Telecommunications and Payments
Zoom
Collaboration
Modernize workflows with Zoom's trusted collaboration tools: including video meetings, Zoom Chat, VoIP phone, webinars, whiteboard, contact
Vercel
Cloud and hosting
The autonomous stack for every app and
Shopify
E-commerce
Shopify Inc. is a Canadian multinational e-commerce company headquartered in Ottawa, Ontario that operates a cloud e-commerce management
Palo Alto Networks
Identity and access
Protect your organization with
y
DevOps and observability
AI agents powering financial infrastructure for merchants, banks, and
Webflow
Design tools
Professional website design and publishing platform.
Dialpad
Communications and CPaaS
The only AI-driven, cloud-native business communications
CDW
Logistics and supply chain
The information technology products, expertise and service you need to make your business successful.Fast shipping, fast answers, the
Netlify
Developer tools
Create with AI or code, deploy instantly on production
DoorDash
Travel and hospitality
Restaurant delivery.
Five9
Communications and CPaaS
Five9 delivers reliable cloud contact centre and AI services that empower organisations to deliver extraordinary customer
Apollo.io
Sales tools
Apollo is the foundation of your entire go-to-market strategy.
Affirm
Payments
Buy now pay later without the
Crossbeam
Sales tools
Crossbeam is the global standard for Ecosystem-Led
Homebase
Payroll
Build schedules, track time, run payroll and hire in one easy
AudioEye
Compliance and GRC
AudioEye, Inc. (AudioEye) is an industry-leading platform delivering website accessibility compliance at all price points to businesses of all sizes. Audi...
Courier
Developer tools
The fastest way for developers to build notifications for their app.
FastSpring
Payments
Sell globally and stay compliant with our merchant-of-record
vFairs
Video conferencing
Run registration, ticketing, mobile apps, check-in & virtual events on one
Registry traps
Most Visa registry rows are Third Party Agent or ISO registrations, not PCI DSS validations. Those are excluded. The Mastercard SDP compliant service provider list is the second registry-grade source.
Level 1 service providers
Registries list Level 1 service providers with a QSA-signed ROC or AOC. Smaller merchants and service providers self-assess and do not appear.
Guides on PCI DSS
All articlesAnalysis
Three quarters of the Visa registry is not a PCI DSS validation
CertReports Research · 17 Sep 2026 · 10 min read
Explainers
Where PCI DSS evidence actually lives: the Visa and Mastercard registries
CertReports Research · 3 Sep 2026 · 10 min read