Skip to main content
DocuSign logo

DocuSign

PCI DSS evidence

Docusign brings agreements to

docusign.comE-signatureLast verified 2 Nov 2026
Request the report Are you DocuSign?
PCI DSS mark, CertReports state Verified as of 19 Oct 2026Verified

DocuSign and PCI DSS

DocuSign is listed in the Visa Global Registry of Service Providers for PCI DSS (Listed on the Visa Global Registry as PCI DSS validated through 2026-10-31), dated 4 Jul 2017, assessed by A-LIGN Compliance and Security, Inc., dba A-LIGN. CertReports last verified this on 19 Oct 2026 from the registry.

Evidence

VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-03-31
as of 19 Oct 2026 · confidence 100%
Kind
Attestation
Issued or listed
25 Mar 2019
Expires or valid through
31 Mar 2027
Auditor or assessor
SC2Labs
Scope
DYNAMIC CURRENCY CONVERSION, PAYMENT FACILITATOR
SourceCapturedQuoteLinks
Visa Global Registry of Service Providers
Official registry · HTTP 200
19 Oct 2026Autopay S.A.: PCI DSS, assessor SC2Labs, valid through 2027-03-31
Live pagesha256 c86d117913
Visa Global Registry of Service Providers
Official registry · HTTP 200
12 Oct 2026DocuSign, Inc: PCI DSS, assessor A-LIGN Compliance and Security, Inc., dba A-LIGN, valid through 2026-10-31
Live pagesha256 5d93469248
This is wrong
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2026-10-31
as of 19 Oct 2026 · confidence 100%
Kind
Attestation
Issued or listed
4 Jul 2017
Expires or valid through
31 Oct 2026
Auditor or assessor
A-LIGN Compliance and Security, Inc., dba A-LIGN
Scope
MERCHANT SERVICER - VISA
SourceCapturedQuoteLinks
Visa Global Registry of Service Providers
Official registry · HTTP 200
19 Oct 2026DocuSign, Inc: PCI DSS, assessor A-LIGN Compliance and Security, Inc., dba A-LIGN, valid through 2026-10-31
Live pagesha256 0350128468
This is wrong
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-05-31
as of 12 Oct 2026 · confidence 100%
Kind
Attestation
Issued or listed
8 Mar 2008
Expires or valid through
31 May 2027
Auditor or assessor
Enterprise Risk Management, Inc, (dba ERMProtect)
Scope
THIRD PARTY SERVICER, VISANET PROCESSOR
SourceCapturedQuoteLinks
Visa Global Registry of Service Providers
Official registry · HTTP 200
12 Oct 2026TecniData, Inc.: PCI DSS, assessor Enterprise Risk Management, Inc, (dba ERMProtect), valid through 2027-05-31
Live pagesha256 98c728c101
Visa Global Registry of Service Providers
Official registry · HTTP 200
5 Oct 2026DocuSign, Inc: PCI DSS, assessor A-LIGN Compliance and Security, Inc., dba A-LIGN, valid through 2026-10-31
Live pagesha256 d78efd2d87
This is wrong
Vendor-statedVendor states PCI DSS on its trust centre
as of 2 Nov 2026 · confidence 80%
SourceCapturedQuoteLinks
DocuSign trust centre (Custom)
Vendor trust centre · HTTP 200
1 Nov 2026PCI DSS
Live page Snapshotsha256 361ef36e3c
DocuSign trust centre (Custom)
Vendor trust centre · HTTP 200
31 Oct 2026PCI DSS
Live page Snapshotsha256 5e1805c5a7
DocuSign trust centre (Custom)
Vendor trust centre · HTTP 200
29 Oct 2026PCI DSS
Live page Snapshotsha256 55d50870fd
DocuSign trust centre (Custom)
Vendor trust centre · HTTP 200
27 Oct 2026PCI DSS
Live page Snapshotsha256 77b561a144
DocuSign trust centre (Custom)
Vendor trust centre · HTTP 200
25 Oct 2026PCI DSS
Live page Snapshotsha256 20508f845a
DocuSign trust centre (Custom)
Vendor trust centre · HTTP 200
23 Oct 2026PCI DSS
Live page Snapshotsha256 549363d93e
DocuSign trust centre (Custom)
Vendor trust centre · HTTP 200
21 Oct 2026PCI DSS
Live page Snapshotsha256 e2d5d65856
DocuSign trust centre (Custom)
Vendor trust centre · HTTP 200
19 Oct 2026PCI DSS
Live page Snapshotsha256 898ccb34ef
DocuSign trust centre (Custom)
Vendor trust centre · HTTP 200
17 Oct 2026PCI DSS
Live page Snapshotsha256 75517302e0
DocuSign trust centre (Custom)
Vendor trust centre · HTTP 200
15 Oct 2026PCI DSS
Live page Snapshotsha256 607fd9fd44
DocuSign trust centre (Custom)
Vendor trust centre · HTTP 200
13 Oct 2026PCI DSS
Live page Snapshotsha256 0ab8106334
DocuSign trust centre (Custom)
Vendor trust centre · HTTP 200
11 Oct 2026PCI DSS
Live page Snapshotsha256 7c94a3ceb6
DocuSign trust centre (Custom)
Vendor trust centre · HTTP 200
9 Oct 2026PCI DSS
Live page Snapshotsha256 032c217fd5
DocuSign trust centre (Custom)
Vendor trust centre · HTTP 200
7 Oct 2026PCI DSS
Live page Snapshotsha256 9dc381b746
DocuSign trust centre (Custom)
Vendor trust centre · HTTP 200
5 Oct 2026PCI DSS
Live page Snapshotsha256 351606e649
DocuSign trust centre (Custom)
Vendor trust centre · HTTP 200
3 Oct 2026PCI DSS
Live page Snapshotsha256 37d8cdb547
DocuSign trust centre (Custom)
Vendor trust centre · HTTP 200
1 Oct 2026PCI DSS
Live page Snapshotsha256 f5d286642c
DocuSign trust centre (Custom)
Vendor trust centre · HTTP 200
29 Sep 2026PCI DSS
Live page Snapshotsha256 30ea41bdab
DocuSign trust centre (Custom)
Vendor trust centre · HTTP 200
27 Sep 2026PCI DSS
Live page Snapshotsha256 f94871fc6c
DocuSign trust centre (Custom)
Vendor trust centre · HTTP 200
25 Sep 2026PCI DSS
Live page Snapshotsha256 a3d2873fe4
DocuSign trust centre (Custom)
Vendor trust centre · HTTP 200
21 Sep 2026PCI DSS
Live page Snapshotsha256 dd8b41a31a
This is wrong
ExpiredListed on the Visa Global Registry as PCI DSS validated through 2026-10-31 (validation date passed)
as of 2 Nov 2026 · confidence 100%
Kind
Attestation
Issued or listed
4 Jul 2022
Expires or valid through
31 Oct 2026
Auditor or assessor
BOTECH FRAUD PREVENTION & INTELLIGENCE SL.
Scope
PAYMENT FACILITATOR
SourceCapturedQuoteLinks
Visa Global Registry of Service Providers
Official registry · HTTP 200
2 Nov 2026PAYMOVIL SAS: PCI DSS, assessor BOTECH FRAUD PREVENTION & INTELLIGENCE SL., valid through 2026-10-31
Live pagesha256 2f3683b55a
Visa Global Registry of Service Providers
Official registry · HTTP 200
26 Oct 2026PAYMOVIL SAS: PCI DSS, assessor BOTECH FRAUD PREVENTION & INTELLIGENCE SL., valid through 2026-10-31
Live pagesha256 4ebad1f388
Visa Global Registry of Service Providers
Official registry · HTTP 200
5 Oct 2026Fullsteam Operations LLC: PCI DSS, assessor LBMC, PC, valid through 2027-06-30
Live pagesha256 3dad72a59f
Visa Global Registry of Service Providers
Official registry · HTTP 200
17 Sep 2026DocuSign, Inc: PCI DSS, assessor A-LIGN Compliance and Security, Inc., dba A-LIGN, valid through 2026-10-31
Live pagesha256 984b1f0d9f
This is wrong
ExpiredListed on the Visa Global Registry as PCI DSS validated through 2026-10-31 (validation date passed)
as of 2 Nov 2026 · confidence 100%
Kind
Attestation
Issued or listed
4 Jul 2017
Expires or valid through
31 Oct 2026
Auditor or assessor
A-LIGN Compliance and Security, Inc., dba A-LIGN
Scope
MERCHANT SERVICER - VISA
SourceCapturedQuoteLinks
Visa Global Registry of Service Providers
Official registry · HTTP 200
2 Nov 2026DocuSign, Inc: PCI DSS, assessor A-LIGN Compliance and Security, Inc., dba A-LIGN, valid through 2026-10-31
Live pagesha256 76c5f99ad0
Visa Global Registry of Service Providers
Official registry · HTTP 200
26 Oct 2026DocuSign, Inc: PCI DSS, assessor A-LIGN Compliance and Security, Inc., dba A-LIGN, valid through 2026-10-31
Live pagesha256 55d2e08a6c
This is wrong

What is not public

  • The Visa registry lists the assessor and the date the validation runs through, not the services in scope of the attestation of compliance.
What PCI DSS means, and what it does not

Only a registry listing (Visa Global Registry, Mastercard SDP) or an AOC letter is strong evidence. In the Visa registry only rows validated as PCI DSS with a validation date count; Third Party Agent registrations are not PCI evidence.

Read the PCI DSS guide and browse all vendors with evidence

Questions buyers ask

Is DocuSign PCI DSS compliant?

DocuSign is listed as a PCI DSS validated service provider, assessed by A-LIGN Compliance and Security, Inc., dba A-LIGN, valid through 31 Oct 2026, as of 19 Oct 2026.

How does CertReports verify this?

Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.

Change history

  1. 2 Nov 2026PCI DSS auditor changedAuditor changed from BOTECH FRAUD PREVENTION & INTELLIGENCE SL. to A-LIGN Compliance and Security, Inc., dba A-LIGN.
  2. 26 Oct 2026PCI DSS auditor changedAuditor changed from A-LIGN Compliance and Security, Inc., dba A-LIGN to BOTECH FRAUD PREVENTION & INTELLIGENCE SL..
  3. 19 Oct 2026PCI DSS auditor changedAuditor changed from Enterprise Risk Management, Inc, (dba ERMProtect) to A-LIGN Compliance and Security, Inc., dba A-LIGN.
  4. 12 Oct 2026PCI DSS auditor changedAuditor changed from LBMC, PC to Enterprise Risk Management, Inc, (dba ERMProtect).
  5. 29 Sep 2026PCI DSS auditor changedAuditor changed from A-LIGN Compliance and Security, Inc., dba A-LIGN to LBMC, PC.
  6. 29 Sep 2026PCI DSS renewedExpiry moved from 2026-10-31 to 2027-06-30.
  7. 22 Sep 2026Trust centre movedTrust centre URL is now https://www.docusign.com/.
  8. 19 Sep 2026Trust centre movedTrust centre URL is now https://www.docusign.com/trust.

Alternatives with PCI DSS evidence

Similar vendors (shared product tags or the E-signature category) whose PCI DSS row is verified or vendor-stated, ranked by similarity.

Sertifi logo

Sertifi

E-signature

Sertifi offers an Agreement Platform built for businesses who need a more efficient and secure way to manage the full contract

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedPCI DSS mark, CertReports state VerifiedCSA STAR mark, CertReports state VerifiedSOC 1 mark, CertReports state Vendor-stated
2 verified · 6 stated2 Nov 2026

Understand PCI DSS evidence

All articles