What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
VerifiedSpenda is listed in the Visa Global Registry of Service Providers for PCI DSS (Listed on the Visa Global Registry as PCI DSS validated through 2026-11-30), dated 3 May 2011, assessed by Foregenix Ltd.. CertReports last verified this on 2 Nov 2026 from the registry.
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 2 Nov 2026 | Banco del Pacifico, S.A.: PCI DSS, assessor 1stSecureIT LLC (dba GM SECTEC), valid through 2027-02-28 | Live pagesha256 5792e85285 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 26 Oct 2026 | Banco del Pacifico, S.A.: PCI DSS, assessor 1stSecureIT LLC (dba GM SECTEC), valid through 2027-02-28 | Live pagesha256 af247d1d93 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 19 Oct 2026 | International Smart Card Company: PCI DSS, assessor AL EJABI AUDITING, REVIEWING & TESTING CYBER RISKS CO., valid through 2027-10-31 | Live pagesha256 fece02edef |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 5 Oct 2026 | Spenda Business Services Pty Ltd: PCI DSS, assessor CLOUDTRACE PTY LTD, valid through 2027-05-31 | Live pagesha256 643c2e52df |
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 2 Nov 2026 | Verifone Finland Oy: PCI DSS, assessor Foregenix Ltd., valid through 2026-11-30 | Live pagesha256 2a09938d73 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 19 Oct 2026 | Spenda Business Services Pty Ltd: PCI DSS, assessor CLOUDTRACE PTY LTD, valid through 2027-05-31 | Live pagesha256 47d94488e5 |
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 2 Nov 2026 | Spenda Business Services Pty Ltd: PCI DSS, assessor CLOUDTRACE PTY LTD, valid through 2027-05-31 | Live pagesha256 fdb7eafb35 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 26 Oct 2026 | Spenda Business Services Pty Ltd: PCI DSS, assessor CLOUDTRACE PTY LTD, valid through 2027-05-31 | Live pagesha256 2bcaf4b96a |
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 19 Oct 2026 | Paymentwall Ltd: PCI DSS, assessor INTEGRITY360 EUROPE LIMITED, valid through 2027-07-31 | Live pagesha256 81c3c7f25a |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 5 Oct 2026 | GCB BANK PLC: PCI DSS, assessor Dataprotect, valid through 2027-02-28 | Live pagesha256 5653a69c1b |
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 19 Oct 2026 | FS Payments Canada, Ltd: PCI DSS, assessor LBMC, PC, valid through 2027-06-30 | Live pagesha256 c5df1b31e0 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 12 Oct 2026 | Easy Pay Limited: PCI DSS, assessor Nexusguard Consulting Limited, valid through 2026-11-30 | Live pagesha256 58de98a810 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 5 Oct 2026 | Fibonatix (Israel) Limited: PCI DSS, assessor INTEGRITY360 EUROPE LIMITED, valid through 2027-03-31 | Live pagesha256 f8b030b70d |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 29 Sep 2026 | Fibonatix (Israel) Limited: PCI DSS, assessor INTEGRITY360 EUROPE LIMITED, valid through 2027-03-31 | Live pagesha256 a0eccd42a3 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 17 Sep 2026 | Spenda Business Services Pty Ltd: PCI DSS, assessor CLOUDTRACE PTY LTD, valid through 2027-05-31 | Live pagesha256 b7d7f21a90 |
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 12 Oct 2026 | Spenda Business Services Pty Ltd: PCI DSS, assessor CLOUDTRACE PTY LTD, valid through 2027-05-31 | Live pagesha256 65973aebf2 |
Only a registry listing (Visa Global Registry, Mastercard SDP) or an AOC letter is strong evidence. In the Visa registry only rows validated as PCI DSS with a validation date count; Third Party Agent registrations are not PCI evidence.
Read the PCI DSS guide and browse all vendors with evidenceSpenda is listed as a PCI DSS validated service provider, assessed by Foregenix Ltd., valid through 30 Nov 2026, as of 2 Nov 2026.
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Similar vendors (shared product tags) whose PCI DSS row is verified or vendor-stated, ranked by similarity.
No same-category vendor has PCI DSS evidence in the index yet.
Solomon Amos · 2 Nov 2026 · 10 min read
Solomon Amos · 23 Oct 2026 · 9 min read