Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
Alipay
PCI DSS evidence
支付宝，全球领先的独立第三方支付平台，致力于为广大用户提供安全快速的电子支付/网上支付/安全支付/手机支付体验，及转账收款/水电煤缴费/信用卡还款/AA收款等生活服务应用。
VerifiedAlipay and PCI DSS
Alipay is listed in the Visa Global Registry of Service Providers for PCI DSS (Listed on the Visa Global Registry as PCI DSS validated through 2027-07-31), dated 26 Aug 2025, assessed by BOTECH FRAUD PREVENTION & INTELLIGENCE SL.. CertReports last verified this on 2 Nov 2026 from the registry.
Evidence
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2026-11-30
as of 2 Nov 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 22 Oct 2012
- Expires or valid through
- 30 Nov 2026
- Auditor or assessor
- atsec (Beijing) Information Technology Co., Ltd
- Scope
- PAYMENT FACILITATOR
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 2 Nov 2026 | Alipay Payment Technology Co., Ltd: PCI DSS, assessor atsec (Beijing) Information Technology Co., Ltd, valid through 2026-11-30 | Live pagesha256 01f1ed4a8e |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 26 Oct 2026 | Alipay Payment Technology Co., Ltd: PCI DSS, assessor atsec (Beijing) Information Technology Co., Ltd, valid through 2026-11-30 | Live pagesha256 cbad748df9 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 19 Oct 2026 | Alipay Payment Technology Co., Ltd: PCI DSS, assessor atsec (Beijing) Information Technology Co., Ltd, valid through 2026-11-30 | Live pagesha256 39e1d13fd1 |
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-01-31
as of 2 Nov 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 17 Mar 2022
- Expires or valid through
- 31 Jan 2027
- Auditor or assessor
- Prescient Security, LLC
- Scope
- PAYMENT FACILITATOR
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 2 Nov 2026 | Payku SPA: PCI DSS, assessor Prescient Security, LLC, valid through 2027-01-31 | Live pagesha256 2fcf1004b9 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 26 Oct 2026 | Payku SPA: PCI DSS, assessor Prescient Security, LLC, valid through 2027-01-31 | Live pagesha256 aa93274d3e |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 19 Oct 2026 | Payku SPA: PCI DSS, assessor Prescient Security, LLC, valid through 2027-01-31 | Live pagesha256 9649b08185 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 12 Oct 2026 | Millennium Process Group, Inc: PCI DSS, assessor SISA, valid through 2027-09-30 | Live pagesha256 767d9dcfc0 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 5 Oct 2026 | AMX Merchant Services S. de R.L. de C.V.: PCI DSS, assessor atsec (Beijing) Information Technology Co., Ltd, valid through 2027-08-31 | Live pagesha256 c3bd7229d7 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 29 Sep 2026 | AMX Merchant Services S. de R.L. de C.V.: PCI DSS, assessor atsec (Beijing) Information Technology Co., Ltd, valid through 2027-08-31 | Live pagesha256 e7c952ca6f |
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-03-31
as of 2 Nov 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 14 Apr 2006
- Expires or valid through
- 31 Mar 2027
- Auditor or assessor
- AWA International Group, LLC
- Scope
- PAYMENT FACILITATOR, MERCHANT SERVICER - VISA
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 2 Nov 2026 | PaySpan Inc: PCI DSS, assessor AWA International Group, LLC, valid through 2027-03-31 | Live pagesha256 deecfec354 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 26 Oct 2026 | PaySpan Inc: PCI DSS, assessor AWA International Group, LLC, valid through 2027-03-31 | Live pagesha256 3ab841ab25 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 17 Sep 2026 | Alipay US, Inc.: PCI DSS, assessor atsec (Beijing) Information Technology Co., Ltd, valid through 2027-06-30 | Live pagesha256 553f9a5788 |
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-03-31
as of 2 Nov 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 12 Jan 2010
- Expires or valid through
- 31 Mar 2027
- Auditor or assessor
- A-LIGN Compliance and Security, Inc., dba A-LIGN
- Scope
- THIRD PARTY SERVICER
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 2 Nov 2026 | Kobie Marketing Inc: PCI DSS, assessor A-LIGN Compliance and Security, Inc., dba A-LIGN, valid through 2027-03-31 | Live pagesha256 e519f100f4 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 19 Oct 2026 | Kobie Marketing Inc: PCI DSS, assessor A-LIGN Compliance and Security, Inc., dba A-LIGN, valid through 2027-03-31 | Live pagesha256 5e5e904279 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 12 Oct 2026 | Payment Asia Services Limited: PCI DSS, assessor Evolution Ltd., valid through 2027-06-30 | Live pagesha256 c32ee43d67 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 5 Oct 2026 | Alipay Payment Technology Co., Ltd: PCI DSS, assessor atsec (Beijing) Information Technology Co., Ltd, valid through 2026-11-30 | Live pagesha256 839239d67d |
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-07-31
as of 2 Nov 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 26 Aug 2025
- Expires or valid through
- 31 Jul 2027
- Auditor or assessor
- BOTECH FRAUD PREVENTION & INTELLIGENCE SL.
- Scope
- VISANET PROCESSOR
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 2 Nov 2026 | Volcan Processing Panama S.A.: PCI DSS, assessor BOTECH FRAUD PREVENTION & INTELLIGENCE SL., valid through 2027-07-31 | Live pagesha256 59a34244b8 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 26 Oct 2026 | Volcan Processing Panama S.A.: PCI DSS, assessor BOTECH FRAUD PREVENTION & INTELLIGENCE SL., valid through 2027-07-31 | Live pagesha256 b8976ad3f3 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 19 Oct 2026 | Volcan Processing Panama S.A.: PCI DSS, assessor BOTECH FRAUD PREVENTION & INTELLIGENCE SL., valid through 2027-07-31 | Live pagesha256 3c545657bb |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 12 Oct 2026 | Modern Campus Inc.: PCI DSS, assessor Datassurant, valid through 2027-09-30 | Live pagesha256 3bed894437 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 17 Sep 2026 | AUS Merchant Services, Inc.: PCI DSS, assessor atsec (Beijing) Information Technology Co., Ltd, valid through 2027-06-30 | Live pagesha256 ff8a6ee8e9 |
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-03-31
as of 2 Nov 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 28 Sep 2002
- Expires or valid through
- 31 Mar 2027
- Auditor or assessor
- CompliancePoint, Inc.
- Scope
- ISO - HIGH INTEGRITY RISK, HIGH INTEGRITY RISK PAYMENT FACILITATOR, MERCHANT SERVICER - VISA, THIRD PARTY SERVICER, PAYMENT FACILITATOR
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 2 Nov 2026 | Point and Pay: PCI DSS, assessor CompliancePoint, Inc., valid through 2027-03-31 | Live pagesha256 368df11d62 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 26 Oct 2026 | Point and Pay: PCI DSS, assessor CompliancePoint, Inc., valid through 2027-03-31 | Live pagesha256 6e3ced6b79 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 19 Oct 2026 | Alipay Financial Services (HK) Limited: PCI DSS, assessor atsec (Beijing) Information Technology Co., Ltd, valid through 2027-08-31 | Live pagesha256 39e1d13fd1 |
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-03-31
as of 19 Oct 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 6 Dec 2023
- Expires or valid through
- 31 Mar 2027
- Auditor or assessor
- ValueMentor InfoSec Private Limited
- Scope
- THIRD PARTY SERVICER
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 19 Oct 2026 | MoneyHash, Inc.: PCI DSS, assessor ValueMentor InfoSec Private Limited, valid through 2027-03-31 | Live pagesha256 008db5e719 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 12 Oct 2026 | Alipay US, Inc.: PCI DSS, assessor atsec (Beijing) Information Technology Co., Ltd, valid through 2027-06-30 | Live pagesha256 d9be4fe32f |
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2026-12-31
as of 12 Oct 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 26 Nov 2025
- Expires or valid through
- 31 Dec 2026
- Auditor or assessor
- IT Specialist LLC
- Scope
- THIRD PARTY SERVICER, PAYMENT FACILITATOR
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 12 Oct 2026 | COMPANY LIMITED LIABILITY FINANCIAL COMPANY GERC: PCI DSS, assessor IT Specialist LLC, valid through 2026-12-31 | Live pagesha256 e17ce14ded |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 5 Oct 2026 | Alchemy GPS Europe UAB: PCI DSS, assessor Beijing Gofun Technology Co., Ltd., valid through 2026-10-31 | Live pagesha256 7988a0aac2 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 29 Sep 2026 | Alchemy GPS Europe UAB: PCI DSS, assessor Beijing Gofun Technology Co., Ltd., valid through 2026-10-31 | Live pagesha256 e5d60f59a6 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 17 Sep 2026 | AMX Merchant Services S. de R.L. de C.V.: PCI DSS, assessor atsec (Beijing) Information Technology Co., Ltd, valid through 2026-06-30 | Live pagesha256 299f886085 |
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2026-11-30
as of 12 Oct 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 22 Oct 2012
- Expires or valid through
- 30 Nov 2026
- Auditor or assessor
- atsec (Beijing) Information Technology Co., Ltd
- Scope
- PAYMENT FACILITATOR
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 12 Oct 2026 | Alipay Payment Technology Co., Ltd: PCI DSS, assessor atsec (Beijing) Information Technology Co., Ltd, valid through 2026-11-30 | Live pagesha256 d9be4fe32f |
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-06-30
as of 12 Oct 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 7 Feb 2025
- Expires or valid through
- 30 Jun 2027
- Auditor or assessor
- atsec (Beijing) Information Technology Co., Ltd
- Scope
- THIRD PARTY SERVICER, PAYMENT FACILITATOR
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 12 Oct 2026 | AUS Merchant Services, Inc.: PCI DSS, assessor atsec (Beijing) Information Technology Co., Ltd, valid through 2027-06-30 | Live pagesha256 c42ef066cd |
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-09-30
as of 12 Oct 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 29 Mar 2024
- Expires or valid through
- 30 Sep 2027
- Auditor or assessor
- MCI Communications, Inc. dba Verizon Business Services
- Scope
- PAYMENT FACILITATOR
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 12 Oct 2026 | LINE Pay (Thailand) Co., Ltd.: PCI DSS, assessor MCI Communications, Inc. dba Verizon Business Services, valid through 2027-09-30 | Live pagesha256 d1369d1c8b |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 5 Oct 2026 | Easy Payment Gateway Limited: PCI DSS, assessor Payment Software Company (PSC), valid through 2027-07-31 | Live pagesha256 2e915a0ce0 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 17 Sep 2026 | Alipay US, Inc: PCI DSS, assessor atsec (Beijing) Information Technology Co., Ltd, valid through 2027-06-30 | Live pagesha256 c4e6d35362 |
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-03-31
as of 12 Oct 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 6 Dec 2023
- Expires or valid through
- 31 Mar 2027
- Auditor or assessor
- ValueMentor InfoSec Private Limited
- Scope
- THIRD PARTY SERVICER
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 12 Oct 2026 | MoneyHash, Inc.: PCI DSS, assessor ValueMentor InfoSec Private Limited, valid through 2027-03-31 | Live pagesha256 9c829413fb |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 5 Oct 2026 | Alipay US, Inc.: PCI DSS, assessor atsec (Beijing) Information Technology Co., Ltd, valid through 2027-06-30 | Live pagesha256 839239d67d |
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-06-30
as of 5 Oct 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 4 Jan 2010
- Expires or valid through
- 30 Jun 2027
- Auditor or assessor
- Compliance Control Ltd.
- Scope
- THIRD PARTY SERVICER, VISANET PROCESSOR
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 5 Oct 2026 | International Card Systems Ad (Casys Ad): PCI DSS, assessor Compliance Control Ltd., valid through 2027-06-30 | Live pagesha256 999fca77e7 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 17 Sep 2026 | Alipay Financial Services (HK) Limited: PCI DSS, assessor atsec (Beijing) Information Technology Co., Ltd, valid through 2027-08-31 | Live pagesha256 c4e6d35362 |
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-06-30
as of 5 Oct 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 7 Feb 2025
- Expires or valid through
- 30 Jun 2027
- Auditor or assessor
- atsec (Beijing) Information Technology Co., Ltd
- Scope
- PAYMENT FACILITATOR, THIRD PARTY SERVICER
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 5 Oct 2026 | AUS Merchant Services, Inc.: PCI DSS, assessor atsec (Beijing) Information Technology Co., Ltd, valid through 2027-06-30 | Live pagesha256 a4875ce234 |
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2026-11-30
as of 17 Sep 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 22 Oct 2012
- Expires or valid through
- 30 Nov 2026
- Auditor or assessor
- atsec (Beijing) Information Technology Co., Ltd
- Scope
- PAYMENT FACILITATOR
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 17 Sep 2026 | Alipay Payment Technology Co., Ltd: PCI DSS, assessor atsec (Beijing) Information Technology Co., Ltd, valid through 2026-11-30 | Live pagesha256 c4e6d35362 |
What is not public
- The Visa registry lists the assessor and the date the validation runs through, not the services in scope of the attestation of compliance.
What PCI DSS means, and what it does not
Only a registry listing (Visa Global Registry, Mastercard SDP) or an AOC letter is strong evidence. In the Visa registry only rows validated as PCI DSS with a validation date count; Third Party Agent registrations are not PCI evidence.
Read the PCI DSS guide and browse all vendors with evidenceQuestions buyers ask
Is Alipay PCI DSS compliant?
Alipay is listed as a PCI DSS validated service provider, assessed by BOTECH FRAUD PREVENTION & INTELLIGENCE SL., valid through 31 Jul 2027, as of 2 Nov 2026.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 19 Oct 2026PCI DSS renewedExpiry moved from 2027-06-30 to 2027-07-31.
- 19 Oct 2026PCI DSS auditor changedAuditor changed from Evolution Ltd. to BOTECH FRAUD PREVENTION & INTELLIGENCE SL..
- 12 Oct 2026PCI DSS auditor changedAuditor changed from Compliance Control Ltd. to Evolution Ltd..
- 29 Sep 2026PCI DSS auditor changedAuditor changed from atsec (Beijing) Information Technology Co., Ltd to Compliance Control Ltd..
- 18 Sep 2026First indexed by CertReports6 evidence rows across 1 framework entered the index.
Alternatives with PCI DSS evidence
Similar vendors (shared product tags or the Payments category) whose PCI DSS row is verified or vendor-stated, ranked by similarity.
az ewallet
az-ewallet.com
PT. Cashlez Worldwide Indonesia
cashlez.com
Click
Payments
Платежная система и мобильный банкинг в Узбекистане
Paysafe
Payments
We have a payment solution for every
PT Bayarind Artha Internusa
Payments
Bayarind adalah ekosistem pembayaran digital yang menyediakan layanan aplikasi dompet digital, aplikasi kasir, dan sistem payment
birlesikodeme
Payments
Fintek ödeme hizmetlerinden dijital cüzdan, kart çözümleri, yurtiçi/yurtdışı para transferi, online/offline tahsilat ve kiosk/akıllı kasa
CI
Cathay International Shopping Center
Payments
กระเป๋าเงินของคนรุ่นใหม่ รับ-จ่าย ง่ายๆแค่ปลายนิ้ว บริษัท คาเธ่ย์เพย์ (ประเทศไทย)
fasspay
Payments
We are a mobile payment services provider with a goal to equip businesses in the region with secure and reliable card acceptance
Understand PCI DSS evidence
All articlesExplainers
ISO 27001 Annex A: What Buyers Should Actually Ask For
Solomon Amos · 23 Oct 2026 · 9 min read