Skip to main content
Amazon logo

Amazon

PCI DSS evidence

Amazon Web Services provides a highly reliable, scalable, low-cost infrastructure platform in the cloud that powers hundreds of thousands

amazon.comDevOps and observabilityLast verified 2 Nov 2026
Vendor website Are you Amazon?
PCI DSS mark, CertReports state Verified as of 2 Nov 2026Verified

Amazon and PCI DSS

Amazon is listed in the Visa Global Registry of Service Providers for PCI DSS (Listed on the Visa Global Registry as PCI DSS validated through 2027-07-31), dated 16 Feb 2011, assessed by Coalfire Systems, Inc. CertReports last verified this on 2 Nov 2026 from the registry.

Evidence

VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-07-31
as of 2 Nov 2026 · confidence 100%
Kind
Attestation
Issued or listed
16 Feb 2011
Expires or valid through
31 Jul 2027
Auditor or assessor
Coalfire Systems, Inc
Scope
VISANET PROCESSOR, THIRD PARTY SERVICER, DYNAMIC CURRENCY CONVERSION
SourceCapturedQuoteLinks
Visa Global Registry of Service Providers
Official registry · HTTP 200
2 Nov 2026WorldPay (UK) Limited: PCI DSS, assessor Coalfire Systems, Inc, valid through 2027-07-31
Live pagesha256 7bdac8cb98
Visa Global Registry of Service Providers
Official registry · HTTP 200
17 Sep 2026Amazon One: PCI DSS, assessor Coalfire Systems, Inc, valid through 2026-06-30
Live pagesha256 cd8b9af3c1
This is wrong
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-02-28
as of 2 Nov 2026 · confidence 100%
Kind
Attestation
Issued or listed
28 Sep 2002
Expires or valid through
28 Feb 2027
Auditor or assessor
VikingCloud, Inc.
Scope
THIRD PARTY SERVICER, MERCHANT SERVICER - VISA
SourceCapturedQuoteLinks
Visa Global Registry of Service Providers
Official registry · HTTP 200
2 Nov 2026CardWorks Servicing, LLC: PCI DSS, assessor VikingCloud, Inc., valid through 2027-02-28
Live pagesha256 5bb7198171
Visa Global Registry of Service Providers
Official registry · HTTP 200
26 Oct 2026CardWorks Servicing, LLC: PCI DSS, assessor VikingCloud, Inc., valid through 2027-02-28
Live pagesha256 d066e597cd
Visa Global Registry of Service Providers
Official registry · HTTP 200
12 Oct 2026Amazon One: PCI DSS, assessor Coalfire Systems, Inc, valid through 2027-06-30
Live pagesha256 fa2e661a91
This is wrong
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-06-30
as of 2 Nov 2026 · confidence 100%
Kind
Attestation
Issued or listed
25 Jun 2014
Expires or valid through
30 Jun 2027
Auditor or assessor
Coalfire Systems, Inc
Scope
ESO, THIRD PARTY SERVICER, MERCHANT SERVICER - VISA
SourceCapturedQuoteLinks
Visa Global Registry of Service Providers
Official registry · HTTP 200
2 Nov 2026Amazon One: PCI DSS, assessor Coalfire Systems, Inc, valid through 2027-06-30
Live pagesha256 09d0038ac1
Visa Global Registry of Service Providers
Official registry · HTTP 200
26 Oct 2026Amazon One: PCI DSS, assessor Coalfire Systems, Inc, valid through 2027-06-30
Live pagesha256 b289b0ca2f
This is wrong
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-01-31
as of 19 Oct 2026 · confidence 100%
Kind
Attestation
Issued or listed
26 Jun 2023
Expires or valid through
31 Jan 2027
Auditor or assessor
Insside Information Inteligente SRL
Scope
MERCHANT SERVICER - VISA
SourceCapturedQuoteLinks
Visa Global Registry of Service Providers
Official registry · HTTP 200
19 Oct 2026Go Commerce S.A (Geopagos): PCI DSS, assessor Insside Information Inteligente SRL, valid through 2027-01-31
Live pagesha256 e9063cf97c
Visa Global Registry of Service Providers
Official registry · HTTP 200
12 Oct 20261000 deme Hizmetleri ve Elektronik Para A.S.: PCI DSS, assessor 366 Security and Compliance SRL, valid through 2026-11-30
Live pagesha256 a66fda34c2
Visa Global Registry of Service Providers
Official registry · HTTP 200
17 Sep 2026Amazon Just Walk Out: PCI DSS, assessor Coalfire Systems, Inc, valid through 2027-06-30
Live pagesha256 cd8b9af3c1
This is wrong
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-06-30
as of 12 Oct 2026 · confidence 100%
Kind
Attestation
Issued or listed
25 Jun 2014
Expires or valid through
30 Jun 2027
Auditor or assessor
Coalfire Systems, Inc
Scope
ESO, MERCHANT SERVICER - VISA, THIRD PARTY SERVICER
SourceCapturedQuoteLinks
Visa Global Registry of Service Providers
Official registry · HTTP 200
12 Oct 2026Amazon Just Walk Out: PCI DSS, assessor Coalfire Systems, Inc, valid through 2027-06-30
Live pagesha256 fa2e661a91
This is wrong
ExpiredListed on the Visa Global Registry as PCI DSS validated through 2026-07-31 (validation date passed)
as of 19 Oct 2026 · confidence 100%
Kind
Attestation
Issued or listed
4 Dec 2013
Expires or valid through
31 Jul 2026
Auditor or assessor
Plante & Moran, PLLC
Scope
THIRD PARTY SERVICER
SourceCapturedQuoteLinks
Visa Global Registry of Service Providers
Official registry · HTTP 200
19 Oct 2026Otava, LLC: PCI DSS, assessor Plante & Moran, PLLC, valid through 2026-07-31
Live pagesha256 8cfb74f9d7
Visa Global Registry of Service Providers
Official registry · HTTP 200
5 Oct 2026Amazon Just Walk Out: PCI DSS, assessor Coalfire Systems, Inc, valid through 2027-06-30
Live pagesha256 1a6531e406
This is wrong

What is not public

  • The Visa registry lists the assessor and the date the validation runs through, not the services in scope of the attestation of compliance.
What PCI DSS means, and what it does not

Only a registry listing (Visa Global Registry, Mastercard SDP) or an AOC letter is strong evidence. In the Visa registry only rows validated as PCI DSS with a validation date count; Third Party Agent registrations are not PCI evidence.

Read the PCI DSS guide and browse all vendors with evidence

Questions buyers ask

Is Amazon PCI DSS compliant?

Amazon is listed as a PCI DSS validated service provider, assessed by Coalfire Systems, Inc, valid through 31 Jul 2027, as of 2 Nov 2026.

How does CertReports verify this?

Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.

Change history

  1. 26 Oct 2026PCI DSS renewedExpiry moved from 2027-01-31 to 2027-07-31.
  2. 26 Oct 2026PCI DSS auditor changedAuditor changed from Insside Information Inteligente SRL to Coalfire Systems, Inc.
  3. 19 Oct 2026PCI DSS renewedExpiry moved from 2026-11-30 to 2027-01-31.
  4. 19 Oct 2026PCI DSS auditor changedAuditor changed from 366 Security and Compliance SRL to Insside Information Inteligente SRL.
  5. 14 Oct 2026PCI DSS auditor changedAuditor changed from Coalfire Systems, Inc to 366 Security and Compliance SRL.
  6. 18 Sep 2026First indexed by CertReports8 evidence rows across 5 frameworks entered the index.

Alternatives with PCI DSS evidence

Similar vendors (shared product tags or the DevOps and observability category) whose PCI DSS row is verified or vendor-stated, ranked by similarity.

Amazon Web Services logo

Amazon Web Services

Cloud and hosting

Amazon Web Services, Inc. (AWS) is a subsidiary of Amazon that provides on-demand cloud computing platforms and APIs to individuals

PCI DSS mark, CertReports state VerifiedCCPA mark, CertReports state Vendor-statedDORA CTPP mark, CertReports state Verified
2 verified · 1 stated2 Nov 2026
Expedient logo

Expedient

DevOps and observability

Expedient combines data centers, network access and managed services to deliver information technology infrastructure as a service (IaaS)

SOC 2 mark, CertReports state Vendor-statedPCI DSS mark, CertReports state VerifiedCSA STAR mark, CertReports state VerifiedSOC 1 mark, CertReports state Vendor-statedSOC 3 mark, CertReports state Vendor-statedHITRUST mark, CertReports state Vendor-stated
3 verified · 4 stated2 Nov 2026
DataBank logo

DataBank

Cloud and hosting

DataBank’s Managed Cloud transforms our Standard Cloud (IaaS) service into a comprehensively managed Platform-as-a-Service (PaaS)

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedFedRAMP mark, CertReports state VerifiedPCI DSS mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-stated
3 verified · 8 stated2 Nov 2026
A360 DOO BEOGRAD logo

A360 DOO BEOGRAD

DevOps and observability

A360 delivers secure, scalable payment infrastructure for banks, processors, national payment operators and fintech

PCI DSS mark, CertReports state Verified
1 verified2 Nov 2026
Paycorp International logo

Paycorp International

DevOps and observability

Sovereign Financial Infrastructure for Global

PCI DSS mark, CertReports state Verified
1 verified2 Nov 2026
Cadana Pay logo

Cadana Pay

DevOps and observability

Purpose-built for talent marketplaces, staffing platforms international HR providers, Cadana's white-label infrastructure enables you to

PCI DSS mark, CertReports state Verified
1 verified2 Nov 2026
Constellation Payment Processing logo

Constellation Payment Processing

DevOps and observability

Enterprise-grade payment infrastructure for SaaS

PCI DSS mark, CertReports state Verified
1 verified2 Nov 2026
Pagatech logo

Pagatech

DevOps and observability

Paga is the premier financial services infrastructure for

PCI DSS mark, CertReports state Verified
1 verified2 Nov 2026

Understand PCI DSS evidence

All articles