Analysis
The state of public compliance evidence in 2026: what 3,000 vendors actually publish
CertReports Research · 18 Sep 2026 · 12 min read
attestation
PCI DSS evidence across 3,215 vendors
PCI DSS evidence that a buyer can verify is a registry listing or an attestation of compliance. CertReports mirrors the Visa Global Registry of Service Providers, counting only rows validated as PCI DSS with a validation date, and records the assessor and the date the validation runs through.
- Verified rows
- 3,081
- Vendor-stated
- 134
- Expired
- 267
- Last verified
- 4 Nov 2026
SU
SOCIETE UGAR ACTIVA
Insurance
Créé en 1998, le Groupe ACTIVA est un leader de l'assurance en Afrique
GF
Grovebay Financial
grovebay.com
gsurfnet
gsurfnet.com
GTI SWITCH LDA
gtiswitch.com
Guama
Banking and lending
No necesitas historial crediticio para
Han Pass
Payments
Registered international money transfer app for 200+
HashPort
Crypto and web3
HashPortã¯ããã¾ã è¦ã¬ä¾¡å¤ãæ®ããã®ä¸ã¸ããããã·ã§ã³ã«ãããã¯ãã§ã¼ã³é
MK
Mar-KPT
hercules-kingdom.com
GE
GMAX Express
heritagepaymentsolutions.com
HK
Hong Kong Telecommunications HKT
hktmerchantservices.com
Ho Bros Information Technology
ho-brostech.com
Unlock the worldWith reliable and secure identification documents, you hold the key to unlock every corner of the
Horipro
Media and content
Horipro is a Japanese talent agency that manages actors, entertainers and musicians, as well as commercial and television productions
L3
Level 3 Payments
hostmechantservices.com
Hurupay
Crypto and web3
Receive USD, EUR and
HY
Hypermode
hypermodes.com
TD
Technovation Data
ibankatm.com
Oxygen Global
Payments
iChoose is the leading provider of prepaid gift cards, reloadable gift cards and digital gift cards across Australia and New
iFAST Financial
ifastcorp.com
Group Company for Fundsupermart.com and iFAST Platform Services across selected countries in
TWELVE45
Payments
At TWELVE45, we blend years of industry experience with innovative strategies to guide our clients to financial
Ingenico Terminals
Payments
From smart terminals to a cloud-based payments platform and end-to-end terminal management, our innovations are designed to help you
Inkript Cards sal
inkript.com
Miu Oue
instagram.com
Create an account or log in to Instagram - Share what you're into with the people who get
IP
International Payments Processing
internationalpaymentsprocessing.com
IN
INTERSWITCH
interswitchng.com
Registry traps
Most Visa registry rows are Third Party Agent or ISO registrations, not PCI DSS validations. Those are excluded. The Mastercard SDP compliant service provider list is the second registry-grade source.
Level 1 service providers
Registries list Level 1 service providers with a QSA-signed ROC or AOC. Smaller merchants and service providers self-assess and do not appear.
Guides on PCI DSS
All articlesAnalysis
Three quarters of the Visa registry is not a PCI DSS validation
CertReports Research · 17 Sep 2026 · 10 min read
Explainers
Where PCI DSS evidence actually lives: the Visa and Mastercard registries
CertReports Research · 3 Sep 2026 · 10 min read