Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
LITTLEPAY
PCI DSS evidence
Payments infrastructure for transit and
VerifiedLITTLEPAY and PCI DSS
LITTLEPAY is listed in the Visa Global Registry of Service Providers for PCI DSS (Listed on the Visa Global Registry as PCI DSS validated through 2027-04-30), dated 5 Jun 2017, assessed by PCI Consulting Australia PTY, LTD. CertReports last verified this on 2 Nov 2026 from the registry.
Evidence
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-04-30
as of 2 Nov 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 5 Jun 2017
- Expires or valid through
- 30 Apr 2027
- Auditor or assessor
- PCI Consulting Australia PTY, LTD
- Scope
- THIRD PARTY SERVICER, MERCHANT SERVICER - VISA
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 2 Nov 2026 | Littlepay Pty Ltd: PCI DSS, assessor PCI Consulting Australia PTY, LTD, valid through 2027-04-30 | Live pagesha256 b162252092 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 26 Oct 2026 | Littlepay Pty Ltd: PCI DSS, assessor PCI Consulting Australia PTY, LTD, valid through 2027-04-30 | Live pagesha256 e8e645593a |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 19 Oct 2026 | Littlepay Pty Ltd: PCI DSS, assessor PCI Consulting Australia PTY, LTD, valid through 2027-04-30 | Live pagesha256 02c864ef15 |
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-04-30
as of 19 Oct 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 12 May 2025
- Expires or valid through
- 30 Apr 2027
- Auditor or assessor
- PCI Consulting Australia PTY, LTD
- Scope
- MERCHANT SERVICER - VISA
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 19 Oct 2026 | LITTLEPAY, INC.: PCI DSS, assessor PCI Consulting Australia PTY, LTD, valid through 2027-04-30 | Live pagesha256 02c864ef15 |
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2026-10-31
as of 12 Oct 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 25 Mar 2025
- Expires or valid through
- 31 Oct 2026
- Auditor or assessor
- VikingCloud, Inc.
- Scope
- PAYMENT FACILITATOR
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 12 Oct 2026 | SPEEDPAY PROCESSAMENTO DE PAGAMENTOS LTDA: PCI DSS, assessor VikingCloud, Inc., valid through 2026-10-31 | Live pagesha256 65973aebf2 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 17 Sep 2026 | Littlepay Pty Ltd: PCI DSS, assessor PCI Consulting Australia PTY, LTD, valid through 2027-04-30 | Live pagesha256 8224fd0eb0 |
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-04-30
as of 12 Oct 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 12 May 2025
- Expires or valid through
- 30 Apr 2027
- Auditor or assessor
- PCI Consulting Australia PTY, LTD
- Scope
- MERCHANT SERVICER - VISA
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 12 Oct 2026 | LITTLEPAY, INC.: PCI DSS, assessor PCI Consulting Australia PTY, LTD, valid through 2027-04-30 | Live pagesha256 e2799c90d8 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 5 Oct 2026 | LITTLEPAY, INC.: PCI DSS, assessor PCI Consulting Australia PTY, LTD, valid through 2027-04-30 | Live pagesha256 9de8b80d51 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 29 Sep 2026 | LITTLEPAY, INC.: PCI DSS, assessor PCI Consulting Australia PTY, LTD, valid through 2027-04-30 | Live pagesha256 50e99880db |
Vendor-statedVendor states PCI DSS 4.0.1 on its trust centre
as of 21 Sep 2026 · confidence 90%ExpiredListed on the Visa Global Registry as PCI DSS validated through 2026-08-31 (validation date passed)
as of 12 Oct 2026 · confidence 100%- Kind
- Attestation
- Expires or valid through
- 31 Aug 2026
- Auditor or assessor
- CIPHER
- Scope
- PAYMENT FACILITATOR
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 12 Oct 2026 | EDANPAY S.A.: PCI DSS, assessor CIPHER, valid through 2026-08-31 | Live pagesha256 0d6fd18bc8 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 5 Oct 2026 | EDANPAY S.A.: PCI DSS, assessor CIPHER, valid through 2026-08-31 | Live pagesha256 2a77ea2a10 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 17 Sep 2026 | LITTLEPAY, INC.: PCI DSS, assessor PCI Consulting Australia PTY, LTD, valid through 2027-04-30 | Live pagesha256 8224fd0eb0 |
What is not public
- The Visa registry lists the assessor and the date the validation runs through, not the services in scope of the attestation of compliance.
What PCI DSS means, and what it does not
Only a registry listing (Visa Global Registry, Mastercard SDP) or an AOC letter is strong evidence. In the Visa registry only rows validated as PCI DSS with a validation date count; Third Party Agent registrations are not PCI evidence.
Read the PCI DSS guide and browse all vendors with evidenceQuestions buyers ask
Is LITTLEPAY PCI DSS compliant?
LITTLEPAY is listed as a PCI DSS validated service provider, assessed by PCI Consulting Australia PTY, LTD, valid through 30 Apr 2027, as of 2 Nov 2026.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 19 Oct 2026PCI DSS renewedExpiry moved from 2026-10-31 to 2027-04-30.
- 19 Oct 2026PCI DSS auditor changedAuditor changed from VikingCloud, Inc. to PCI Consulting Australia PTY, LTD.
- 12 Oct 2026PCI DSS auditor changedAuditor changed from PCI Consulting Australia PTY, LTD to VikingCloud, Inc..
- 18 Sep 2026Subprocessor added: CrowdStrike FalconCrowdStrike Falcon appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: HoneycombHoneycomb appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: OktaOkta appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: ZendeskZendesk appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: Littlepay Pty LtdLittlepay Pty Ltd appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: Amazon Web ServicesAmazon Web Services appeared on the subprocessor list.
Alternatives with PCI DSS evidence
Similar vendors (shared product tags or the DevOps and observability category) whose PCI DSS row is verified or vendor-stated, ranked by similarity.
SPX Genfare Genfare
Payments
Genfare is a leader in solution-based fare
Apptech Payments
DevOps and observability
AppTech Payments Corp provides multi-bank payment infrastructure designed for compliance, scale, and operational
A360 DOO BEOGRAD
DevOps and observability
A360 delivers secure, scalable payment infrastructure for banks, processors, national payment operators and fintech
Alacriti Payments
DevOps and observability
Modernize your payments infrastructure with Alacriti's unified money movement
Billerix
DevOps and observability
We are a payment infrastructure provider delivering a modern, flexible gateway solution designed to simplify and secure card payments for
Constellation Payment Processing
DevOps and observability
Enterprise-grade payment infrastructure for SaaS
Lipaware Africa
DevOps and observability
Launch branded payments, lending and wallet products on certified infrastructure built for banks, payment providers and mobile operators in
Payrix
DevOps and observability
Seamlessly monetize payments with our next generation payment infrastructure to fuel the growth and transformation of your SaaS
Understand PCI DSS evidence
All articlesExplainers
ISO 27001 Annex A: What Buyers Should Actually Ask For
Solomon Amos · 23 Oct 2026 · 9 min read