PayPal
PCI DSS evidence
From paying friends to saving money or getting rewards when you shop, explore what the new PayPal app has to
VerifiedPayPal and PCI DSS
PayPal is listed in the Visa Global Registry of Service Providers for PCI DSS (Listed on the Visa Global Registry as PCI DSS validated through 2027-03-31), dated 1 May 2007, assessed by IQ Information Quality. CertReports last verified this on 26 Oct 2026 from the registry.
Evidence
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-06-30
as of 26 Oct 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 31 Jul 2015
- Expires or valid through
- 30 Jun 2027
- Auditor or assessor
- Information Exchange Inc.
- Scope
- MERCHANT SERVICER - VISA
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 26 Oct 2026 | Tekcard, Inc: PCI DSS, assessor Information Exchange Inc., valid through 2027-06-30 | Live pagesha256 5c30649c4c |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 12 Oct 2026 | Cellulant Cote D'Ivoire: PCI DSS, assessor SISA, valid through 2026-12-31 | Live pagesha256 d2679ff5de |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 17 Sep 2026 | PayPal Pte.Ltd Tokyo Branch: PCI DSS, assessor K3DES, LLC, valid through 2026-10-31 | Live pagesha256 8a626d012c |
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2026-10-31
as of 26 Oct 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 15 Oct 2015
- Expires or valid through
- 31 Oct 2026
- Auditor or assessor
- K3DES, LLC
- Scope
- DYNAMIC CURRENCY CONVERSION, HIGH INTEGRITY RISK PAYMENT FACILITATOR, ISO - HIGH INTEGRITY RISK, MERCHANT SERVICER - VISA, PAYMENT FACILITATOR
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 26 Oct 2026 | PayPal Inc: PCI DSS, assessor K3DES, LLC, valid through 2026-10-31 | Live pagesha256 0c5f2c8124 |
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-03-31
as of 26 Oct 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 24 Oct 2017
- Expires or valid through
- 31 Mar 2027
- Auditor or assessor
- ControlCase, LLC
- Scope
- MERCHANT SERVICER - VISA, ISO - HIGH INTEGRITY RISK, PAYMENT FACILITATOR, THIRD PARTY SERVICER
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 26 Oct 2026 | PayArc LLC: PCI DSS, assessor ControlCase, LLC, valid through 2027-03-31 | Live pagesha256 58ef8522a2 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 19 Oct 2026 | Fareharbor B.V. C/O Fareharbor Holdings LLC: PCI DSS, assessor VOC Consultancy, valid through 2026-09-30 | Live pagesha256 732d2f896e |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 12 Oct 2026 | TouchNet Information Systems, Inc.: PCI DSS, assessor Payment Software Company (PSC), valid through 2027-03-31 | Live pagesha256 5fd2ef6024 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 5 Oct 2026 | U.S. Payments: PCI DSS, assessor Sikich LLP, valid through 2026-12-31 | Live pagesha256 0d033465f5 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 29 Sep 2026 | U.S. Payments: PCI DSS, assessor Sikich LLP, valid through 2026-12-31 | Live pagesha256 14d7d03aec |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 17 Sep 2026 | Paypal Australia Pty Ltd: PCI DSS, assessor K3DES, LLC, valid through 2026-10-31 | Live pagesha256 8a626d012c |
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2026-12-31
as of 26 Oct 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 25 Sep 2017
- Expires or valid through
- 31 Dec 2026
- Auditor or assessor
- Securisea, Inc.
- Scope
- MERCHANT SERVICER - VISA, THIRD PARTY SERVICER
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 26 Oct 2026 | Basys Processing, Inc: PCI DSS, assessor Securisea, Inc., valid through 2026-12-31 | Live pagesha256 ece75caf2b |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 19 Oct 2026 | BLU INSTITUICAO DE PAGAMENTO LTDA.: PCI DSS, assessor Auditsafe Auditoria e Consultoria em Riscos Corporativos Ltda, valid through 2026-10-31 | Live pagesha256 234deb93c0 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 12 Oct 2026 | Paypal Australia Pty Ltd: PCI DSS, assessor K3DES, LLC, valid through 2026-10-31 | Live pagesha256 27b76ef86b |
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-06-30
as of 26 Oct 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 2 Feb 2010
- Expires or valid through
- 30 Jun 2027
- Auditor or assessor
- K3DES, LLC
- Scope
- THIRD PARTY SERVICER, PAYMENT FACILITATOR, MERCHANT SERVICER - VISA, HIGH INTEGRITY RISK PAYMENT FACILITATOR
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 26 Oct 2026 | PAYPAL (EUROPE) S.A.R.L. & CIE, S.C.A.: PCI DSS, assessor K3DES, LLC, valid through 2027-06-30 | Live pagesha256 0c5f2c8124 |
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-03-31
as of 26 Oct 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 1 May 2007
- Expires or valid through
- 31 Mar 2027
- Auditor or assessor
- IQ Information Quality
- Scope
- VISANET PROCESSOR
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 26 Oct 2026 | Versatile Technology Inc.: PCI DSS, assessor IQ Information Quality, valid through 2027-03-31 | Live pagesha256 e7cb3ab236 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 12 Oct 2026 | Element Payments, Inc.: PCI DSS, assessor AWA International Group, LLC, valid through 2027-07-31 | Live pagesha256 4e68b46a55 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 17 Sep 2026 | PayPal: PCI DSS, assessor K3DES, LLC, valid through 2026-10-31 | Live pagesha256 8a626d012c |
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-03-31
as of 26 Oct 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 23 Feb 2013
- Expires or valid through
- 31 Mar 2027
- Auditor or assessor
- Tevora Business Solutions, Inc.
- Scope
- THIRD PARTY SERVICER
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 26 Oct 2026 | Alegeus Technologies: PCI DSS, assessor Tevora Business Solutions, Inc., valid through 2027-03-31 | Live pagesha256 404467fd6d |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 19 Oct 2026 | Getz Group Pte Ltd: PCI DSS, assessor AGES Systems Gelderfarenit PTE LTD, valid through 2027-07-31 | Live pagesha256 7550252890 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 5 Oct 2026 | PayPal: PCI DSS, assessor K3DES, LLC, valid through 2026-10-31 | Live pagesha256 5d3ef79497 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 29 Sep 2026 | PayPal: PCI DSS, assessor K3DES, LLC, valid through 2026-10-31 | Live pagesha256 b7d411e7d9 |
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2026-10-31
as of 26 Oct 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 14 Apr 2005
- Expires or valid through
- 31 Oct 2026
- Auditor or assessor
- K3DES, LLC
- Scope
- VISANET PROCESSOR, HIGH INTEGRITY RISK PAYMENT FACILITATOR, DYNAMIC CURRENCY CONVERSION, THIRD PARTY SERVICER, ISO - HIGH INTEGRITY RISK, MERCHANT SERVICER - VISA, PAYMENT FACILITATOR
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 26 Oct 2026 | PayPal: PCI DSS, assessor K3DES, LLC, valid through 2026-10-31 | Live pagesha256 0c5f2c8124 |
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2026-10-31
as of 19 Oct 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 15 Oct 2015
- Expires or valid through
- 31 Oct 2026
- Auditor or assessor
- K3DES, LLC
- Scope
- HIGH INTEGRITY RISK PAYMENT FACILITATOR, PAYMENT FACILITATOR, MERCHANT SERVICER - VISA, DYNAMIC CURRENCY CONVERSION, ISO - HIGH INTEGRITY RISK
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 19 Oct 2026 | PayPal Inc: PCI DSS, assessor K3DES, LLC, valid through 2026-10-31 | Live pagesha256 abc2f7265f |
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2026-10-31
as of 19 Oct 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 21 Nov 2012
- Expires or valid through
- 31 Oct 2026
- Auditor or assessor
- K3DES, LLC
- Scope
- HIGH INTEGRITY RISK PAYMENT FACILITATOR, PAYMENT FACILITATOR, THIRD PARTY SERVICER
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 19 Oct 2026 | PayPal Pte.Ltd Tokyo Branch: PCI DSS, assessor K3DES, LLC, valid through 2026-10-31 | Live pagesha256 abc2f7265f |
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-06-30
as of 19 Oct 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 16 Sep 2020
- Expires or valid through
- 30 Jun 2027
- Auditor or assessor
- RSI Systems Inc.
- Scope
- THIRD PARTY SERVICER
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 19 Oct 2026 | Keyno: PCI DSS, assessor RSI Systems Inc., valid through 2027-06-30 | Live pagesha256 5b42aa3686 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 17 Sep 2026 | PayPal Inc: PCI DSS, assessor K3DES, LLC, valid through 2026-10-31 | Live pagesha256 8a626d012c |
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-02-28
as of 19 Oct 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 12 Apr 2024
- Expires or valid through
- 28 Feb 2027
- Auditor or assessor
- Deiteriy Company Ltd.
- Scope
- PAYMENT FACILITATOR, HIGH INTEGRITY RISK PAYMENT FACILITATOR
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 19 Oct 2026 | FREEDOM PAY LLP: PCI DSS, assessor Deiteriy Company Ltd., valid through 2027-02-28 | Live pagesha256 d9960296df |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 12 Oct 2026 | Freepay Aps: PCI DSS, assessor Pros on Point, UAB, valid through 2027-03-31 | Live pagesha256 47c60b7e64 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 5 Oct 2026 | PAYPAL (EUROPE) S.A.R.L. & CIE, S.C.A.: PCI DSS, assessor K3DES, LLC, valid through 2027-06-30 | Live pagesha256 5d3ef79497 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 29 Sep 2026 | PAYPAL (EUROPE) S.A.R.L. & CIE, S.C.A.: PCI DSS, assessor K3DES, LLC, valid through 2027-06-30 | Live pagesha256 b7d411e7d9 |
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2026-11-30
as of 19 Oct 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 26 Apr 2012
- Expires or valid through
- 30 Nov 2026
- Auditor or assessor
- Schellman Compliance, LLC.
- Scope
- MERCHANT SERVICER - VISA
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 19 Oct 2026 | Cloud Software Group, Inc: PCI DSS, assessor Schellman Compliance, LLC., valid through 2026-11-30 | Live pagesha256 339555bf55 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 12 Oct 2026 | Royal Bank of Canada-Moneris Shared Cash Dispensing and Payment Systems Infrastructure: PCI DSS, assessor Control Gap, valid through 2027-03-31 | Live pagesha256 0aef8aca81 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 17 Sep 2026 | PAYPAL (EUROPE) S.A.R.L. & CIE, S.C.A.: PCI DSS, assessor K3DES, LLC, valid through 2027-06-30 | Live pagesha256 8a626d012c |
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2026-10-31
as of 12 Oct 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 14 Apr 2005
- Expires or valid through
- 31 Oct 2026
- Auditor or assessor
- K3DES, LLC
- Scope
- DYNAMIC CURRENCY CONVERSION, HIGH INTEGRITY RISK PAYMENT FACILITATOR, ISO - HIGH INTEGRITY RISK, PAYMENT FACILITATOR, THIRD PARTY SERVICER, VISANET PROCESSOR, MERCHANT SERVICER - VISA
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 12 Oct 2026 | PayPal: PCI DSS, assessor K3DES, LLC, valid through 2026-10-31 | Live pagesha256 27b76ef86b |
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2026-10-31
as of 5 Oct 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 21 Nov 2012
- Expires or valid through
- 31 Oct 2026
- Auditor or assessor
- K3DES, LLC
- Scope
- THIRD PARTY SERVICER, PAYMENT FACILITATOR, HIGH INTEGRITY RISK PAYMENT FACILITATOR
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 5 Oct 2026 | PayPal Pte.Ltd Tokyo Branch: PCI DSS, assessor K3DES, LLC, valid through 2026-10-31 | Live pagesha256 5d3ef79497 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 29 Sep 2026 | PayPal Pte.Ltd Tokyo Branch: PCI DSS, assessor K3DES, LLC, valid through 2026-10-31 | Live pagesha256 b7d411e7d9 |
What is not public
- The Visa registry lists the assessor and the date the validation runs through, not the services in scope of the attestation of compliance.
What PCI DSS means, and what it does not
Only a registry listing (Visa Global Registry, Mastercard SDP) or an AOC letter is strong evidence. In the Visa registry only rows validated as PCI DSS with a validation date count; Third Party Agent registrations are not PCI evidence.
Read the PCI DSS guide and browse all vendors with evidenceQuestions buyers ask
Is PayPal PCI DSS compliant?
PayPal is listed as a PCI DSS validated service provider, assessed by IQ Information Quality, valid through 31 Mar 2027, as of 26 Oct 2026.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 26 Oct 2026PCI DSS auditor changedAuditor changed from K3DES, LLC to IQ Information Quality.
- 26 Oct 2026PCI DSS renewedExpiry moved from 2026-10-31 to 2027-03-31.
- 19 Oct 2026PCI DSS auditor changedAuditor changed from Payment Software Company (PSC) to K3DES, LLC.
- 12 Oct 2026PCI DSS auditor changedAuditor changed from Sikich LLP to Payment Software Company (PSC).
- 12 Oct 2026PCI DSS renewedExpiry moved from 2026-12-31 to 2027-03-31.
- 29 Sep 2026PCI DSS auditor changedAuditor changed from K3DES, LLC to Sikich LLP.
- 29 Sep 2026PCI DSS renewedExpiry moved from 2026-10-31 to 2026-12-31.
- 18 Sep 2026First indexed by CertReports5 evidence rows across 1 framework entered the index.
Alternatives with PCI DSS evidence
Similar vendors (shared product tags or the Payments category) whose PCI DSS row is verified or vendor-stated, ranked by similarity.
PayPal
Payments
From paying friends to saving money or getting rewards when you shop, explore what the new PayPal app has to
Tabby FZ-LLC
Payments
Tabby is the money app that lets you buy now and pay later, send and receive money, earn cashback and
Fluz Fluz
Payments
With Fluz, spending is
Circle Wallet
Payments
The all-in-one financial app built for
Skrill
Payments
Whether you're placing a bet, gaming online, or sending money internationally, Skrill's digital wallet makes every payment quick and
ASTROPAY GLOBAL IOM
Payments
Pay, send, and receive money worldwide with
birlesikodeme
Payments
Fintek ödeme hizmetlerinden dijital cüzdan, kart çözümleri, yurtiçi/yurtdışı para transferi, online/offline tahsilat ve kiosk/akıllı kasa
Cashfree Payments India Private
Payments
Next-gen digital payments provider for India.
Understand PCI DSS evidence
All articlesExplainers
ISO 27001 Annex A: What Buyers Should Actually Ask For
Solomon Amos · 23 Oct 2026 · 9 min read
Explainers
TISAX Explained: What the AL1 to AL3 Levels Actually Mean
Solomon Amos · 16 Oct 2026 · 9 min read