Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
SP
SpotPay
PCI DSS evidence
Stablecoin Global Bank Account
VerifiedSpotPay and PCI DSS
SpotPay is listed in the Visa Global Registry of Service Providers for PCI DSS (Listed on the Visa Global Registry as PCI DSS validated through 2027-02-28), dated 25 Apr 2023, assessed by Dot.Bit d.o.o.. CertReports last verified this on 19 Oct 2026 from the registry.
Evidence
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-02-28
as of 19 Oct 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 25 Apr 2023
- Expires or valid through
- 28 Feb 2027
- Auditor or assessor
- Dot.Bit d.o.o.
- Scope
- MERCHANT SERVICER - VISA
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 19 Oct 2026 | Flatpay ApS: PCI DSS, assessor Dot.Bit d.o.o., valid through 2027-02-28 | Live pagesha256 3b6d806e4a |
What is not public
- The Visa registry lists the assessor and the date the validation runs through, not the services in scope of the attestation of compliance.
What PCI DSS means, and what it does not
Only a registry listing (Visa Global Registry, Mastercard SDP) or an AOC letter is strong evidence. In the Visa registry only rows validated as PCI DSS with a validation date count; Third Party Agent registrations are not PCI evidence.
Read the PCI DSS guide and browse all vendors with evidenceQuestions buyers ask
Is SpotPay PCI DSS compliant?
SpotPay is listed as a PCI DSS validated service provider, assessed by Dot.Bit d.o.o., valid through 28 Feb 2027, as of 19 Oct 2026.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 19 Oct 2026First indexed by CertReports1 evidence row across 1 framework entered the index.
Alternatives with PCI DSS evidence
Similar vendors (shared product tags or the Finance and accounting category) whose PCI DSS row is verified or vendor-stated, ranked by similarity.
The City Bank
Finance and accounting
City Bank Plc is a private commercial bank in Bangladesh, headquartered in
Arival Bank International
Finance and accounting
Open a secure USD or multi-currency business account online with Arival
Limited
Finance and accounting
Real local accounts in your company's name across the US, EU, UK, Mexico, Brazil and more, plus corporate cards, bill pay and instant
XTM
Finance and accounting
XTM Inc is a fintech company in the neo-banking
MS
M2P SOLUTIONS PRIVATE
Finance and accounting
Core banking, lending and payment services from the leading fintech startup in
Verestro
Finance and accounting
Empowering banks and fintechs with the Verestro Fintech-as-a-Service
Lettuce Financial Labs
Finance and accounting
Specialized tax and accounting strategies for
VersaPay
Finance and accounting
Accounts receivable should fuel
Understand PCI DSS evidence
All articlesExplainers
ISO 27001 Annex A: What Buyers Should Actually Ask For
Solomon Amos · 23 Oct 2026 · 9 min read