What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
VerifiedEVERTEC PLACE TO PAY is listed in the Visa Global Registry of Service Providers for PCI DSS (Listed on the Visa Global Registry as PCI DSS validated through 2027-03-31), dated 1 Sep 2022, assessed by 1stSecureIT LLC (dba GM SECTEC). CertReports last verified this on 2 Nov 2026 from the registry.
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 2 Nov 2026 | PASE: PCI DSS, assessor 1stSecureIT LLC (dba GM SECTEC), valid through 2027-03-31 | Live pagesha256 ce55a186e1 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 26 Oct 2026 | PASE: PCI DSS, assessor 1stSecureIT LLC (dba GM SECTEC), valid through 2027-03-31 | Live pagesha256 d6bccb961a |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 19 Oct 2026 | PASE: PCI DSS, assessor 1stSecureIT LLC (dba GM SECTEC), valid through 2027-03-31 | Live pagesha256 c7010681cc |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 12 Oct 2026 | EVERTEC PLACE TO PAY: PCI DSS, assessor ControlCase, LLC, valid through 2027-01-31 | Live pagesha256 327186ec10 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 5 Oct 2026 | EVERTEC PLACE TO PAY: PCI DSS, assessor ControlCase, LLC, valid through 2027-01-31 | Live pagesha256 2d77084c4b |
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 17 Sep 2026 | EVERTEC PLACE TO PAY: PCI DSS, assessor ControlCase, LLC, valid through 2027-01-31 | Live pagesha256 bb824e7ff3 |
Only a registry listing (Visa Global Registry, Mastercard SDP) or an AOC letter is strong evidence. In the Visa registry only rows validated as PCI DSS with a validation date count; Third Party Agent registrations are not PCI evidence.
Read the PCI DSS guide and browse all vendors with evidenceEVERTEC PLACE TO PAY is listed as a PCI DSS validated service provider, assessed by 1stSecureIT LLC (dba GM SECTEC), valid through 31 Mar 2027, as of 2 Nov 2026.
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Similar vendors (shared product tags) whose PCI DSS row is verified or vendor-stated, ranked by similarity.
No same-category vendor has PCI DSS evidence in the index yet.
Solomon Amos · 2 Nov 2026 · 10 min read
Solomon Amos · 23 Oct 2026 · 9 min read