Cantaloupe

PCI DSS evidence

Cantaloupe powers self-service commerce around the world with innovative technology and software solutions for businesses of all

cantaloupe.com E-commerceLast verified 2 Nov 2026

Vendor website Are you Cantaloupe?

Verified

Cantaloupe and PCI DSS

Cantaloupe is listed in the Visa Global Registry of Service Providers for PCI DSS (Listed on the Visa Global Registry as PCI DSS validated through 2026-12-31), dated 5 Feb 2009, assessed by Truvantis, Inc.. CertReports last verified this on 2 Nov 2026 from the registry.

Evidence

VerifiedListed on the Visa Global Registry as PCI DSS validated through 2026-12-31

as of 2 Nov 2026 · confidence 100%

Kind: Attestation
Issued or listed: 5 Feb 2009
Expires or valid through: 31 Dec 2026
Auditor or assessor: Truvantis, Inc.
Scope: MERCHANT SERVICER - VISA, PAYMENT FACILITATOR

Source	Captured	Quote	Links
Visa Global Registry of Service Providers Official registry · HTTP 200	2 Nov 2026	Cantaloupe, Inc.: PCI DSS, assessor Truvantis, Inc., valid through 2026-12-31	Live pagesha256 1ac7f8ad23
Visa Global Registry of Service Providers Official registry · HTTP 200	19 Oct 2026	Cantaloupe, Inc.: PCI DSS, assessor Truvantis, Inc., valid through 2026-12-31	Live pagesha256 2b4ce89f54

This is wrong

VerifiedListed on the Visa Global Registry as PCI DSS validated through 2026-12-31

as of 12 Oct 2026 · confidence 100%

Kind: Attestation
Issued or listed: 5 Feb 2009
Expires or valid through: 31 Dec 2026
Auditor or assessor: Truvantis, Inc.
Scope: MERCHANT SERVICER - VISA, PAYMENT FACILITATOR

Source	Captured	Quote	Links
Visa Global Registry of Service Providers Official registry · HTTP 200	12 Oct 2026	Cantaloupe, Inc.: PCI DSS, assessor Truvantis, Inc., valid through 2026-12-31	Live pagesha256 4bd8be0644

This is wrong

VerifiedListed on the Visa Global Registry as PCI DSS validated through 2026-12-31

as of 5 Oct 2026 · confidence 100%

Kind: Attestation
Issued or listed: 5 Feb 2009
Expires or valid through: 31 Dec 2026
Auditor or assessor: Truvantis, Inc.
Scope: MERCHANT SERVICER - VISA, PAYMENT FACILITATOR

Source	Captured	Quote	Links
Visa Global Registry of Service Providers Official registry · HTTP 200	5 Oct 2026	Cantaloupe, Inc.: PCI DSS, assessor Truvantis, Inc., valid through 2026-12-31	Live pagesha256 8c3dca6663
Visa Global Registry of Service Providers Official registry · HTTP 200	29 Sep 2026	Cantaloupe, Inc.: PCI DSS, assessor Truvantis, Inc., valid through 2026-12-31	Live pagesha256 d66f1c1aa3

This is wrong

ExpiredListed on the Visa Global Registry as PCI DSS validated through 2026-09-30 (validation date passed)

as of 12 Oct 2026 · confidence 100%

Kind: Attestation
Issued or listed: 15 Jan 2026
Expires or valid through: 30 Sep 2026
Auditor or assessor: Coalfire Systems, Inc
Scope: MERCHANT SERVICER - VISA

Source	Captured	Quote	Links
Visa Global Registry of Service Providers Official registry · HTTP 200	12 Oct 2026	FS Operations Canada Ltd.: PCI DSS, assessor Coalfire Systems, Inc, valid through 2026-09-30	Live pagesha256 47c60b7e64
Visa Global Registry of Service Providers Official registry · HTTP 200	17 Sep 2026	Cantaloupe, Inc.: PCI DSS, assessor Truvantis, Inc., valid through 2026-12-31	Live pagesha256 7377bc9aba

This is wrong

What is not public

The Visa registry lists the assessor and the date the validation runs through, not the services in scope of the attestation of compliance.

What PCI DSS means, and what it does not

Only a registry listing (Visa Global Registry, Mastercard SDP) or an AOC letter is strong evidence. In the Visa registry only rows validated as PCI DSS with a validation date count; Third Party Agent registrations are not PCI evidence.

Read the PCI DSS guide and browse all vendors with evidence

Questions buyers ask

Is Cantaloupe PCI DSS compliant?

Cantaloupe is listed as a PCI DSS validated service provider, assessed by Truvantis, Inc., valid through 31 Dec 2026, as of 2 Nov 2026.

How does CertReports verify this?

Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.

Change history

18 Sep 2026First indexed by CertReports1 evidence row across 1 framework entered the index.

Alternatives with PCI DSS evidence

Similar vendors (shared product tags or the E-commerce category) whose PCI DSS row is verified or vendor-stated, ranked by similarity.

Enactor

E-commerce

Discover how Enactor helps retailers deliver on their omnichannel journeys through its next-generation unified commerce

1 verified2 Nov 2026

Gladly

E-commerce

Gladly brings agentic commerce to your site for premium ecommerce

4 stated2 Nov 2026

Unified Payment Services

E-commerce

Payment innovation for Africaâs future Powering Africa with simplified payment innovation for businesses and individuals; our payment

1 verified2 Nov 2026

Lightspeed POS

E-commerce

Lightspeed Commerce is a point-of-sale and e-commerce software provider based in Montreal, Quebec, Canada

3 verified · 1 stated2 Nov 2026

BigCommerce

E-commerce

BigCommerce, founded in 2009, is a leading open software-as-a-service (SaaS) ecommerce platform that empowers merchants of all sizes to

2 verified · 12 stated2 Nov 2026

SHARE COMMERCE SDN BHD

E-commerce

Elevate your business with our secure payment platform in

1 verified2 Nov 2026

Switch Commerce

E-commerce

Switch Commerce offers premier ATM processing solutions, emphasizing fast settlements and robust data security to boost client

1 verified2 Nov 2026

VTEX

E-commerce

Modernize your stack and drive operational results with an AI-Native unified commerce

2 verified · 7 stated2 Nov 2026

All articles

Explainers

Cantaloupe

Cantaloupe and PCI DSS

Evidence

What is not public

Questions buyers ask

Change history