Skip to main content
Affirm logo

Affirm

PCI DSS evidence

Buy now pay later without the

affirm.comPaymentsLast verified 2 Nov 2026
Request the report Are you Affirm?
PCI DSS mark, CertReports state Verified as of 5 Oct 2026Verified

Affirm and PCI DSS

Affirm is listed in the Visa Global Registry of Service Providers for PCI DSS (Listed on the Visa Global Registry as PCI DSS validated through 2027-08-31), dated 23 Sep 2021, assessed by Payment Software Company (PSC). CertReports last verified this on 5 Oct 2026 from the registry.

Evidence

VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-08-31
as of 5 Oct 2026 · confidence 100%
Kind
Attestation
Issued or listed
23 Sep 2021
Expires or valid through
31 Aug 2027
Auditor or assessor
Payment Software Company (PSC)
Scope
THIRD PARTY SERVICER
SourceCapturedQuoteLinks
Visa Global Registry of Service Providers
Official registry · HTTP 200
5 Oct 2026Affirm, Inc.: PCI DSS, assessor Payment Software Company (PSC), valid through 2027-08-31
Live pagesha256 815479a3fb
This is wrong
Vendor-statedVendor states PCI DSS on its trust centre
as of 2 Nov 2026 · confidence 80%
SourceCapturedQuoteLinks
Affirm trust centre (Drata)
Vendor trust centre · HTTP 200
1 Nov 2026PCI DSS
Live page Snapshotsha256 1131713272
Affirm trust centre (Drata)
Vendor trust centre · HTTP 200
31 Oct 2026PCI DSS
Live page Snapshotsha256 d505f16d21
Affirm trust centre (Drata)
Vendor trust centre · HTTP 200
29 Oct 2026PCI DSS
Live page Snapshotsha256 821658c9c7
Affirm trust centre (Drata)
Vendor trust centre · HTTP 200
27 Oct 2026PCI DSS
Live page Snapshotsha256 7582a77f75
Affirm trust centre (Drata)
Vendor trust centre · HTTP 200
25 Oct 2026PCI DSS
Live page Snapshotsha256 867c37bd08
Affirm trust centre (Drata)
Vendor trust centre · HTTP 200
23 Oct 2026PCI DSS
Live page Snapshotsha256 84ef14ebd0
Affirm trust centre (Drata)
Vendor trust centre · HTTP 200
21 Oct 2026PCI DSS
Live page Snapshotsha256 7dd55aedd7
Affirm trust centre (Drata)
Vendor trust centre · HTTP 200
19 Oct 2026PCI DSS
Live page Snapshotsha256 70636de89b
Affirm trust centre (Drata)
Vendor trust centre · HTTP 200
17 Oct 2026PCI DSS
Live page Snapshotsha256 924afd463c
Affirm trust centre (Drata)
Vendor trust centre · HTTP 200
15 Oct 2026PCI DSS
Live page Snapshotsha256 5294aae77b
Affirm trust centre (Drata)
Vendor trust centre · HTTP 200
13 Oct 2026PCI DSS
Live page Snapshotsha256 de7c1c8fdd
Affirm trust centre (Drata)
Vendor trust centre · HTTP 200
11 Oct 2026PCI DSS
Live page Snapshotsha256 a6aedc032c
Affirm trust centre (Drata)
Vendor trust centre · HTTP 200
9 Oct 2026PCI DSS
Live page Snapshotsha256 c484156191
Affirm trust centre (Drata)
Vendor trust centre · HTTP 200
7 Oct 2026PCI DSS
Live page Snapshotsha256 ff32e735ee
Affirm trust centre (Drata)
Vendor trust centre · HTTP 200
5 Oct 2026PCI DSS
Live page Snapshotsha256 18843809ca
Affirm trust centre (Drata)
Vendor trust centre · HTTP 200
3 Oct 2026PCI DSS
Live page Snapshotsha256 8e18cba8a3
Affirm trust centre (Drata)
Vendor trust centre · HTTP 200
1 Oct 2026PCI DSS
Live page Snapshotsha256 d6204878fd
Affirm trust centre (Drata)
Vendor trust centre · HTTP 200
29 Sep 2026PCI DSS
Live page Snapshotsha256 01efa1ad83
Affirm trust centre (Drata)
Vendor trust centre · HTTP 200
27 Sep 2026PCI DSS
Live page Snapshotsha256 07969afe65
Affirm trust centre (Drata)
Vendor trust centre · HTTP 200
25 Sep 2026PCI DSS
Live page Snapshotsha256 25034c50b8
Affirm trust centre (Drata)
Vendor trust centre · HTTP 200
21 Sep 2026PCI DSS
Live page Snapshotsha256 af282f4c79
Affirm trust centre (Drata)
Vendor trust centre · HTTP 200
18 Sep 2026PCI DSS
Live page Snapshotsha256 dd16a1e536
This is wrong
ExpiredListed on the Visa Global Registry as PCI DSS validated through 2026-08-31 (validation date passed)
as of 17 Sep 2026 · confidence 100%
Kind
Attestation
Issued or listed
23 Sep 2021
Expires or valid through
31 Aug 2026
Auditor or assessor
Payment Software Company (PSC)
Scope
THIRD PARTY SERVICER
SourceCapturedQuoteLinks
Visa Global Registry of Service Providers
Official registry · HTTP 200
17 Sep 2026Affirm, Inc.: PCI DSS, assessor Payment Software Company (PSC), valid through 2026-08-31
Live pagesha256 5373e83aef
This is wrong

What is not public

  • The Visa registry lists the assessor and the date the validation runs through, not the services in scope of the attestation of compliance.
What PCI DSS means, and what it does not

Only a registry listing (Visa Global Registry, Mastercard SDP) or an AOC letter is strong evidence. In the Visa registry only rows validated as PCI DSS with a validation date count; Third Party Agent registrations are not PCI evidence.

Read the PCI DSS guide and browse all vendors with evidence

Questions buyers ask

Is Affirm PCI DSS compliant?

Affirm is listed as a PCI DSS validated service provider, assessed by Payment Software Company (PSC), valid through 31 Aug 2027, as of 5 Oct 2026.

How does CertReports verify this?

Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.

Change history

  1. 29 Sep 2026PCI DSS state changedState moved from Vendor-stated to Verified.
  2. 29 Sep 2026PCI DSS auditor changedAuditor changed from unknown to Payment Software Company (PSC).
  3. 18 Sep 2026PCI DSS evidence no longer foundThe row was not present in the latest ingest.
  4. 18 Sep 2026PCI DSS evidence addedA PCI DSS row entered the index with state Vendor-stated.

Alternatives with PCI DSS evidence

Similar vendors (shared product tags or the Payments category) whose PCI DSS row is verified or vendor-stated, ranked by similarity.

Sezzle logo

Sezzle

Payments

Sezzle allows you to buy now and pay later! Shop now, get what you need, and pay later in 4 interest-free installment payments over six

PCI DSS mark, CertReports state Verified
1 verified2 Nov 2026
Afterpay NZ logo

Afterpay NZ

Payments

Clearpay credit subject to

PCI DSS mark, CertReports state Verified
1 verified2 Nov 2026
APAYLATER SDN BHD logo

APAYLATER SDN BHD

Payments

Apl Atome Malaysia Beli Sekarang Bayar Kemudian menawarkan pembayaran beli-belah

PCI DSS mark, CertReports state Verified
1 verified2 Nov 2026
Tabby FZ-LLC logo

Tabby FZ-LLC

Payments

Tabby is the money app that lets you buy now and pay later, send and receive money, earn cashback and

PCI DSS mark, CertReports state Verified
1 verified2 Nov 2026
Beam Data logo

Beam Data

Payments

Accept all payment methods with low

PCI DSS mark, CertReports state Verified
1 verified2 Nov 2026
Cashfree Payments India Private logo

Cashfree Payments India Private

Payments

Next-gen digital payments provider for India.

PCI DSS mark, CertReports state Verified
1 verified2 Nov 2026
Novalnet logo

Novalnet

Payments

Novalnet is a European payment service provider that provides e-commerce businesses with electronic and point-of-sale payment processing

PCI DSS mark, CertReports state Verified
1 verified19 Oct 2026
PAYMENTUS logo

PAYMENTUS

Payments

Paymentus delivers secure, smart billing and payment solutions that boost engagement and on-time payments for businesses, governments

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedPCI DSS mark, CertReports state VerifiedSOC 1 mark, CertReports state Vendor-stated
1 verified · 3 stated21 Sep 2026

Understand PCI DSS evidence

All articles