Analysis
The state of public compliance evidence in 2026: what 3,000 vendors actually publish
CertReports Research · 18 Sep 2026 · 12 min read
attestation
PCI DSS evidence across 3,081 vendors
PCI DSS evidence that a buyer can verify is a registry listing or an attestation of compliance. CertReports mirrors the Visa Global Registry of Service Providers, counting only rows validated as PCI DSS with a validation date, and records the assessor and the date the validation runs through.
- Verified rows
- 3,081
- Vendor-stated
- 134
- Expired
- 267
- Last verified
- 2 Nov 2026
AVANGATE
2checkout.com
3dcart
E-commerce
Learn how to find the best eCommerce
MOBILE MONEY
acshiningstars.com
Advanced Financial
Finance and accounting
Advanced Financial Company delivers compliant loan servicing, billing, and collections for lenders, credit unions, and investors
Alliance Network
alliancenetworkglobal.com
Alorica
No-code and automation
Great CX & BPO uses tech, analytics, AI, automation & process optimization to meet your
AppFolio
Real estate and property
Ditch yesterday’s property management
Athenahealth
Healthcare
Athenahealth, Inc. is a privately held American company that provides cloud-based SaaS healthcare technology and network-enabled services
Beewise
Payments
Low-cost card machines, POS tills and merchant services for UK
CA Technologies
DevOps and observability
Broadcom delivers semiconductors and infrastructure software for global enterprises’ most complex, mission-critical
CCBill
Payments
Trusted for over 20 years, CCBill securely handles your transactions from any location in the
Cerner
EHR and practice management
Oracle Health, formerly known as Cerner Corporation before it was acquired by Oracle, is an American multinational provider of health
Certain
Research and data providers
Turn every attendee interaction into a high-fidelity sales
Chargify
Finance and accounting
Chargify, the leader in billing and subscription management for B2B SaaS, is now
Churchill Square
churchillsquare.com
Churchill Square is a shopping centre in the centre of Brighton and Hove, a city on the south coast of England
Clearent
Payments
We’re not just another processor - we’re an embedded payments partner that helps vertical SaaS platforms scale
Cleverbridge
Compliance and GRC
Manage payments, subscriptions, tax, and compliance through a single Merchant of Record (MoR)
Cliq
Payments
Technology and solutions that help businesses transact with their customers quickly, seamlessly, and in new
ControlScan
Security
Leading in cybersecurity, VikingCloud provides informed, predictive solutions for effective risk mitigation and
Wonderware
Government and public sector
CORE modernizes government payments with unified processing across all
Custodia
custodia.ai
DF
Digital Financial
digitalfg.com
PE
PEG
dpeg.io
EN
E-net
Banking and lending
Japanese company undertaking ATM operations
Registry traps
Most Visa registry rows are Third Party Agent or ISO registrations, not PCI DSS validations. Those are excluded. The Mastercard SDP compliant service provider list is the second registry-grade source.
Level 1 service providers
Registries list Level 1 service providers with a QSA-signed ROC or AOC. Smaller merchants and service providers self-assess and do not appear.
Guides on PCI DSS
All articlesAnalysis
Three quarters of the Visa registry is not a PCI DSS validation
CertReports Research · 17 Sep 2026 · 10 min read
Explainers
Where PCI DSS evidence actually lives: the Visa and Mastercard registries
CertReports Research · 3 Sep 2026 · 10 min read