Analysis
The state of public compliance evidence in 2026: what 3,000 vendors actually publish
CertReports Research · 18 Sep 2026 · 12 min read
attestation
PCI DSS evidence across 3,215 vendors
PCI DSS evidence that a buyer can verify is a registry listing or an attestation of compliance. CertReports mirrors the Visa Global Registry of Service Providers, counting only rows validated as PCI DSS with a validation date, and records the assessor and the date the validation runs through.
- Verified rows
- 3,081
- Vendor-stated
- 134
- Expired
- 267
- Last verified
- 4 Nov 2026
TO
Takayuki Ohira
wixsite.com
WP
Worldwide Payment Services
worldwidepay.net
WG
WUSU GABON
wusupay.io
PA
Plug and Pay Technology
www,plugnpay.com
SM
Sunstone Merchant Services
www,sitelink.com
LP
LUKE Projects
x.gd
XP
X2 Payment Systems
x2ps.com
Xformative Payment Systems
Payments
Xformative transforms complexity into simplicity with flexible integrations of card processing, ledger services and payment
NH
NEXUTECH HOLDING
xgateglobal.com
XGD Europe
xgd.com
深圳市新国股份有限公司（股票代码：300130）创立于2001年7月，一直专注于电子支付技术领域的研发和创新，是国家高新技术企业。2011年登陆深圳证券交易所创业板，是国内电子支付行业少数拥有资本市场支持的公司之一
XiFin
No-code and automation
XiFin is the leading provider of SaaS-based healthcare revenue cycle management (RCM) and workflow automation
XP
XLN Pay
xln.co.uk
Nreach Online Services Private
xoxoday.com
The AI-first platform for rewards, incentives, loyalty, and
XS
Xpress Solutions
xpressbillpay.com
Xsolla
xsolla.com
Find out how you can launch, monetize and scale your video games worldwide, with no upfront costs, using Xsolla's comprehensive suite of
AM
AOL Membership Services
yahoinc.com
YEAHPAY SINGAPORE
yeahpay.net
YF
Yeeld Financial Services
yeeld.com
YM
YZY Money
yeezy.com
yellowpepper
yellowpepper.com
YE
Yepzy
yepzy.com
YE
Yerba
yerba.global
YO
YouPay
youpay.co
YourMembership.com
Nonprofit and fundraising
Member Management Software to improve member retention and grow
Registry traps
Most Visa registry rows are Third Party Agent or ISO registrations, not PCI DSS validations. Those are excluded. The Mastercard SDP compliant service provider list is the second registry-grade source.
Level 1 service providers
Registries list Level 1 service providers with a QSA-signed ROC or AOC. Smaller merchants and service providers self-assess and do not appear.
Guides on PCI DSS
All articlesAnalysis
Three quarters of the Visa registry is not a PCI DSS validation
CertReports Research · 17 Sep 2026 · 10 min read
Explainers
Where PCI DSS evidence actually lives: the Visa and Mastercard registries
CertReports Research · 3 Sep 2026 · 10 min read