Skip to main content
Basis Theory logo

Basis Theory

PCI DSS evidence

More than a token vault—Basis Theory routes, tokenizes, and optimizes your payments to drive conversion, resilience, and

basistheory.comPaymentsLast verified 2 Nov 2026
PCI DSS mark, CertReports state Verified as of 2 Nov 2026Verified

Basis Theory and PCI DSS

Basis Theory is listed in the Visa Global Registry of Service Providers for PCI DSS (Listed on the Visa Global Registry as PCI DSS validated through 2027-06-30), dated 8 Jul 2020, assessed by CYBERCUBE SERVICES PVT. LTD.. CertReports last verified this on 2 Nov 2026 from the registry.

Evidence

VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-06-30
as of 2 Nov 2026 · confidence 100%
Kind
Attestation
Issued or listed
8 Jul 2020
Expires or valid through
30 Jun 2027
Auditor or assessor
CYBERCUBE SERVICES PVT. LTD.
Scope
VISANET PROCESSOR, THIRD PARTY SERVICER
SourceCapturedQuoteLinks
Visa Global Registry of Service Providers
Official registry · HTTP 200
2 Nov 2026SYCA SAS: PCI DSS, assessor CYBERCUBE SERVICES PVT. LTD., valid through 2027-06-30
Live pagesha256 94c1ae8a8f
Visa Global Registry of Service Providers
Official registry · HTTP 200
19 Oct 2026ITFOR Inc.: PCI DSS, assessor International Certificate Authority of Management System, valid through 2026-12-31
Live pagesha256 549d54e19e
Visa Global Registry of Service Providers
Official registry · HTTP 200
5 Oct 2026eNETS Pte. Ltd.: PCI DSS, assessor Ensign InfoSecurity (Asia Pacific) Pte. Ltd., valid through 2026-06-30
Live pagesha256 c5f4a80c24
Visa Global Registry of Service Providers
Official registry · HTTP 200
29 Sep 2026eNETS Pte. Ltd.: PCI DSS, assessor Ensign InfoSecurity (Asia Pacific) Pte. Ltd., valid through 2026-06-30
Live pagesha256 8938fed71c
Visa Global Registry of Service Providers
Official registry · HTTP 200
17 Sep 2026Basis Theory, Inc.: PCI DSS, assessor Baker Tilly Advisory Group, LP, valid through 2027-08-31
Live pagesha256 6f1c6ca8f5
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-09-30
as of 2 Nov 2026 · confidence 100%
Kind
Attestation
Issued or listed
25 Mar 2017
Expires or valid through
30 Sep 2027
Auditor or assessor
BSI Group Japan K.K.
Scope
MERCHANT SERVICER - VISA, PAYMENT FACILITATOR
SourceCapturedQuoteLinks
Visa Global Registry of Service Providers
Official registry · HTTP 200
2 Nov 2026F-REGI Co., Ltd.: PCI DSS, assessor BSI Group Japan K.K., valid through 2027-09-30
Live pagesha256 a6d9814b08
Visa Global Registry of Service Providers
Official registry · HTTP 200
26 Oct 2026F-REGI Co., Ltd.: PCI DSS, assessor BSI Group Japan K.K., valid through 2027-09-30
Live pagesha256 d54891d961
Visa Global Registry of Service Providers
Official registry · HTTP 200
5 Oct 2026Basis Theory, Inc.: PCI DSS, assessor Baker Tilly Advisory Group, LP, valid through 2027-08-31
Live pagesha256 748a6ac293
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-08-31
as of 2 Nov 2026 · confidence 100%
Kind
Attestation
Issued or listed
13 May 2024
Expires or valid through
31 Aug 2027
Scope
MERCHANT SERVICER - VISA
SourceCapturedQuoteLinks
Visa Global Registry of Service Providers
Official registry · HTTP 200
2 Nov 2026Basis Theory, Inc.: PCI DSS, assessor Baker Tilly Advisory Group, LP, valid through 2027-08-31
Live pagesha256 ece75caf2b
Vendor-statedVendor states PCI DSS on its trust centre
as of 2 Nov 2026 · confidence 80%
SourceCapturedQuoteLinks
Basis Theory trust centre (Drata)
Vendor trust centre · HTTP 200
2 Nov 2026PCI DSS
Live page Snapshotsha256 dfd5044937
Basis Theory trust centre (Drata)
Vendor trust centre · HTTP 200
31 Oct 2026PCI DSS
Live page Snapshotsha256 9f21689f04
Basis Theory trust centre (Drata)
Vendor trust centre · HTTP 200
29 Oct 2026PCI DSS
Live page Snapshotsha256 29e76477ff
Basis Theory trust centre (Drata)
Vendor trust centre · HTTP 200
27 Oct 2026PCI DSS
Live page Snapshotsha256 604ec48019
Basis Theory trust centre (Drata)
Vendor trust centre · HTTP 200
25 Oct 2026PCI DSS
Live page Snapshotsha256 e1a3ad94a4
Basis Theory trust centre (Drata)
Vendor trust centre · HTTP 200
23 Oct 2026PCI DSS
Live page Snapshotsha256 715b471989
Basis Theory trust centre (Drata)
Vendor trust centre · HTTP 200
21 Oct 2026PCI DSS
Live page Snapshotsha256 630782181f
Basis Theory trust centre (Drata)
Vendor trust centre · HTTP 200
19 Oct 2026PCI DSS
Live page Snapshotsha256 c01dfd5970
Basis Theory trust centre (Drata)
Vendor trust centre · HTTP 200
17 Oct 2026PCI DSS
Live page Snapshotsha256 b997d9d2ac
Basis Theory trust centre (Drata)
Vendor trust centre · HTTP 200
15 Oct 2026PCI DSS
Live page Snapshotsha256 4dc33e7aaf
Basis Theory trust centre (Drata)
Vendor trust centre · HTTP 200
13 Oct 2026PCI DSS
Live page Snapshotsha256 e6e50416ab
Basis Theory trust centre (Drata)
Vendor trust centre · HTTP 200
11 Oct 2026PCI DSS
Live page Snapshotsha256 8e0d4b1808
Basis Theory trust centre (Drata)
Vendor trust centre · HTTP 200
9 Oct 2026PCI DSS
Live page Snapshotsha256 e2ad3faddf
Basis Theory trust centre (Drata)
Vendor trust centre · HTTP 200
7 Oct 2026PCI DSS
Live page Snapshotsha256 587a5c10ba
Basis Theory trust centre (Drata)
Vendor trust centre · HTTP 200
5 Oct 2026PCI DSS
Live page Snapshotsha256 64e92273d8
Basis Theory trust centre (Drata)
Vendor trust centre · HTTP 200
3 Oct 2026PCI DSS
Live page Snapshotsha256 8eb2e0119e
Basis Theory trust centre (Drata)
Vendor trust centre · HTTP 200
1 Oct 2026PCI DSS
Live page Snapshotsha256 8b3ea7b153
Basis Theory trust centre (Drata)
Vendor trust centre · HTTP 200
29 Sep 2026PCI DSS
Live page Snapshotsha256 1ac3589bff
Basis Theory trust centre (Drata)
Vendor trust centre · HTTP 200
27 Sep 2026PCI DSS
Live page Snapshotsha256 ed59f95f3b
Basis Theory trust centre (Drata)
Vendor trust centre · HTTP 200
25 Sep 2026PCI DSS
Live page Snapshotsha256 b3f7ebc632
Basis Theory trust centre (Drata)
Vendor trust centre · HTTP 200
21 Sep 2026PCI DSS
Live page Snapshotsha256 f8caa1f32a
Basis Theory trust centre (Drata)
Vendor trust centre · HTTP 200
18 Sep 2026PCI DSS
Live page Snapshotsha256 1a75b54dcc

What is not public

  • The Visa registry lists the assessor and the date the validation runs through, not the services in scope of the attestation of compliance.
What PCI DSS means, and what it does not

Only a registry listing (Visa Global Registry, Mastercard SDP) or an AOC letter is strong evidence. In the Visa registry only rows validated as PCI DSS with a validation date count; Third Party Agent registrations are not PCI evidence.

Read the PCI DSS guide and browse all vendors with evidence

Questions buyers ask

Is Basis Theory PCI DSS compliant?

Basis Theory is listed as a PCI DSS validated service provider, assessed by CYBERCUBE SERVICES PVT. LTD., valid through 30 Jun 2027, as of 2 Nov 2026.

How does CertReports verify this?

Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.

Change history

  1. 26 Oct 2026PCI DSS auditor changedAuditor changed from International Certificate Authority of Management System to CYBERCUBE SERVICES PVT. LTD..
  2. 26 Oct 2026PCI DSS renewedExpiry moved from 2026-12-31 to 2027-06-30.
  3. 19 Oct 2026PCI DSS auditor changedAuditor changed from Baker Tilly Advisory Group, LP to International Certificate Authority of Management System.

Alternatives with PCI DSS evidence

Similar vendors (shared product tags or the Payments category) whose PCI DSS row is verified or vendor-stated, ranked by similarity.

All articles