Analysis
The state of public compliance evidence in 2026: what 3,000 vendors actually publish
CertReports Research · 18 Sep 2026 · 12 min read
attestation
PCI DSS evidence across 3,081 vendors
PCI DSS evidence that a buyer can verify is a registry listing or an attestation of compliance. CertReports mirrors the Visa Global Registry of Service Providers, counting only rows validated as PCI DSS with a validation date, and records the assessor and the date the validation runs through.
- Verified rows
- 3,081
- Vendor-stated
- 134
- Expired
- 267
- Last verified
- 2 Nov 2026
First Mortgage
Banking and lending
Firstmac Limited is 100% Australian owned with over 40 years of experience in home and investment loans which makes us a great alternative
global blue
global-blue.com
Cayan
globalpaymentsintegrated.com
GL
GLORY
glory.co.jp
HELCIM
Payments
Helcim is the easy and affordable solution for small and medium businesses accepting payments in-person or
IPAY
hipay.com
HRS
hrs.com
HungerRush
hungerrush.com
Kibo
E-commerce
Discover KIBO’s unified, headless commerce and order management platform with modular capabilities, AI-driven search, real-time inventory
Kount
Identity and access
With identity and fraud services from Equifax, lenders can detect and prevent fraud, verify identities, and safeguard revenue with advanced
ITX
kzitx.com
M1 Finance
Banking and lending
Earn 3.35% APY with high-yield cash
Mad Mobile
E-commerce
Power your business with AI-driven commerce
MOCA
Real estate and property
THG
Payments
At Palmetto Payment Solutions - We offer an unparalleled set of solutions and services that enable our merchants to optimize
PayTrace
Payments
We're the B2B payment experts, helping merchants build better, more reliable payment solutions that lower the cost of accepting credit
SVM
plugpay.net
Plug: seis productos, una sola
pvs
Payments
PVS continues growing in LATAM, allowing VISA, MASTERCARD, AMEX, PIX and many more issuers to have more payments, adding thousands of small
Ribbon
Analytics
Ribbon global offer a digital financial services super-app with a debit card, personalised financial management tools, analytics and
CKC
signaturecard.com
TFY
Crypto and web3
Get your personal crypto exchange with decentralized wallets, crypto-friendly bank account, and
valid
Banking and lending
A Valid promove a identificação segura de pessoas, jornadas e
WEX
E-commerce
WEX is the global commerce platform for fuel and fleet, employee benefits, and business
MAER SOFT
1-click.kz
Registry traps
Most Visa registry rows are Third Party Agent or ISO registrations, not PCI DSS validations. Those are excluded. The Mastercard SDP compliant service provider list is the second registry-grade source.
Level 1 service providers
Registries list Level 1 service providers with a QSA-signed ROC or AOC. Smaller merchants and service providers self-assess and do not appear.
Guides on PCI DSS
All articlesAnalysis
Three quarters of the Visa registry is not a PCI DSS validation
CertReports Research · 17 Sep 2026 · 10 min read
Explainers
Where PCI DSS evidence actually lives: the Visa and Mastercard registries
CertReports Research · 3 Sep 2026 · 10 min read