Skip to main content
Stripe logo

Stripe

PCI DSS evidence

Economic infrastructure for the internet.

stripe.comPaymentsLast verified 2 Nov 2026
Request the report Are you Stripe?
PCI DSS mark, CertReports state Verified as of 2 Nov 2026Verified

Stripe and PCI DSS

Stripe is listed in the Visa Global Registry of Service Providers for PCI DSS (Listed on the Visa Global Registry as PCI DSS validated through 2027-08-31), dated 7 Dec 2020, assessed by Enterprise Risk Management, Inc, (dba ERMProtect). CertReports last verified this on 2 Nov 2026 from the registry.

Evidence

VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-03-31
as of 2 Nov 2026 · confidence 100%
Kind
Attestation
Issued or listed
11 Aug 2021
Expires or valid through
31 Mar 2027
Auditor or assessor
Coalfire Systems, Inc
Scope
PAYMENT FACILITATOR
SourceCapturedQuoteLinks
Visa Global Registry of Service Providers
Official registry · HTTP 200
2 Nov 2026Stripe Payment (Thailand) Ltd.: PCI DSS, assessor Coalfire Systems, Inc, valid through 2027-03-31
Live pagesha256 c09ba59642
Visa Global Registry of Service Providers
Official registry · HTTP 200
26 Oct 2026Stripe Payment (Thailand) Ltd.: PCI DSS, assessor Coalfire Systems, Inc, valid through 2027-03-31
Live pagesha256 561dbd1f80
This is wrong
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-05-31
as of 2 Nov 2026 · confidence 100%
Kind
Attestation
Issued or listed
30 Apr 2025
Expires or valid through
31 May 2027
Auditor or assessor
Foregenix Ltd.
Scope
PAYMENT FACILITATOR
SourceCapturedQuoteLinks
Visa Global Registry of Service Providers
Official registry · HTTP 200
2 Nov 2026DLOCAL SERVICES ARG S.A.: PCI DSS, assessor Foregenix Ltd., valid through 2027-05-31
Live pagesha256 76c5f99ad0
Visa Global Registry of Service Providers
Official registry · HTTP 200
26 Oct 2026DLOCAL SERVICES ARG S.A.: PCI DSS, assessor Foregenix Ltd., valid through 2027-05-31
Live pagesha256 55d2e08a6c
Visa Global Registry of Service Providers
Official registry · HTTP 200
17 Sep 2026Stripe Japan, Inc.: PCI DSS, assessor Coalfire Systems, Inc, valid through 2027-03-31
Live pagesha256 cb75747ab8
This is wrong
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2026-12-31
as of 2 Nov 2026 · confidence 100%
Kind
Attestation
Issued or listed
2 Apr 2024
Expires or valid through
31 Dec 2026
Auditor or assessor
Accorp Savvyforge Assurance LLP
Scope
THIRD PARTY SERVICER
SourceCapturedQuoteLinks
Visa Global Registry of Service Providers
Official registry · HTTP 200
2 Nov 2026Lucky Egypt for software: PCI DSS, assessor Accorp Savvyforge Assurance LLP, valid through 2026-12-31
Live pagesha256 7db97bbd09
Visa Global Registry of Service Providers
Official registry · HTTP 200
26 Oct 2026Lucky Egypt for software: PCI DSS, assessor Accorp Savvyforge Assurance LLP, valid through 2026-12-31
Live pagesha256 6d7baf249b
Visa Global Registry of Service Providers
Official registry · HTTP 200
19 Oct 2026Stripe Japan, Inc.: PCI DSS, assessor Coalfire Systems, Inc, valid through 2027-03-31
Live pagesha256 ffcc2929a0
This is wrong
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-08-31
as of 2 Nov 2026 · confidence 100%
Kind
Attestation
Issued or listed
7 Dec 2020
Expires or valid through
31 Aug 2027
Auditor or assessor
Enterprise Risk Management, Inc, (dba ERMProtect)
Scope
PAYMENT FACILITATOR, HIGH INTEGRITY RISK PAYMENT FACILITATOR
SourceCapturedQuoteLinks
Visa Global Registry of Service Providers
Official registry · HTTP 200
2 Nov 2026Segregated Payments (Ireland) Limited: PCI DSS, assessor Enterprise Risk Management, Inc, (dba ERMProtect), valid through 2027-08-31
Live pagesha256 7834a9cb3a
Visa Global Registry of Service Providers
Official registry · HTTP 200
26 Oct 2026Segregated Payments (Ireland) Limited: PCI DSS, assessor Enterprise Risk Management, Inc, (dba ERMProtect), valid through 2027-08-31
Live pagesha256 cdc5935f1f
Visa Global Registry of Service Providers
Official registry · HTTP 200
19 Oct 2026CityBase, Inc: PCI DSS, assessor Specialized Security Services, Inc., valid through 2027-09-30
Live pagesha256 b50089af87
Visa Global Registry of Service Providers
Official registry · HTTP 200
5 Oct 2026Stripe, LLC: PCI DSS, assessor Coalfire Systems, Inc, valid through 2027-03-31
Live pagesha256 2cf822e515
This is wrong
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-09-30
as of 2 Nov 2026 · confidence 100%
Kind
Attestation
Expires or valid through
30 Sep 2027
Auditor or assessor
Matrix Cyber Consulting, LLC
Scope
PAYMENT FACILITATOR
SourceCapturedQuoteLinks
Visa Global Registry of Service Providers
Official registry · HTTP 200
2 Nov 2026PAGUEVELOZ INSTITUICAO DE PAGAMENTO LTDA: PCI DSS, assessor Matrix Cyber Consulting, LLC, valid through 2027-09-30
Live pagesha256 3a7ceed04f
Visa Global Registry of Service Providers
Official registry · HTTP 200
26 Oct 2026PAGUEVELOZ INSTITUICAO DE PAGAMENTO LTDA: PCI DSS, assessor Matrix Cyber Consulting, LLC, valid through 2027-09-30
Live pagesha256 6682618bc5
Visa Global Registry of Service Providers
Official registry · HTTP 200
12 Oct 2026Stripe Japan, Inc.: PCI DSS, assessor Coalfire Systems, Inc, valid through 2027-03-31
Live pagesha256 76fb8aba4e
This is wrong
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2026-12-31
as of 19 Oct 2026 · confidence 100%
Kind
Attestation
Issued or listed
27 May 2021
Expires or valid through
31 Dec 2026
Auditor or assessor
Secure Vectors Information Technologies Inc.
Scope
PAYMENT FACILITATOR
SourceCapturedQuoteLinks
Visa Global Registry of Service Providers
Official registry · HTTP 200
19 Oct 2026Cyberbiz Corporation: PCI DSS, assessor Secure Vectors Information Technologies Inc., valid through 2026-12-31
Live pagesha256 595a147925
Visa Global Registry of Service Providers
Official registry · HTTP 200
12 Oct 2026Gravity Payments: PCI DSS, assessor Linford & Company LLP, valid through 2026-12-31
Live pagesha256 57a6213aa3
Visa Global Registry of Service Providers
Official registry · HTTP 200
17 Sep 2026Stripe Payment (Thailand) Ltd.: PCI DSS, assessor Coalfire Systems, Inc, valid through 2027-03-31
Live pagesha256 cb75747ab8
This is wrong
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-07-31
as of 19 Oct 2026 · confidence 100%
Kind
Attestation
Issued or listed
2 Dec 2022
Expires or valid through
31 Jul 2027
Auditor or assessor
1stSecureIT LLC (dba GM SECTEC)
Scope
PAYMENT FACILITATOR
SourceCapturedQuoteLinks
Visa Global Registry of Service Providers
Official registry · HTTP 200
19 Oct 2026PAYMOVIL SA: PCI DSS, assessor 1stSecureIT LLC (dba GM SECTEC), valid through 2027-07-31
Live pagesha256 81c3c7f25a
Visa Global Registry of Service Providers
Official registry · HTTP 200
17 Sep 2026Stripe, LLC: PCI DSS, assessor Coalfire Systems, Inc, valid through 2027-03-31
Live pagesha256 014f8f4683
This is wrong
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-09-30
as of 12 Oct 2026 · confidence 100%
Kind
Attestation
Issued or listed
13 Oct 2020
Expires or valid through
30 Sep 2027
Auditor or assessor
Secure Vectors Information Technologies Inc.
Scope
PAYMENT FACILITATOR
SourceCapturedQuoteLinks
Visa Global Registry of Service Providers
Official registry · HTTP 200
12 Oct 2026ICASH CORPORATION: PCI DSS, assessor Secure Vectors Information Technologies Inc., valid through 2027-09-30
Live pagesha256 8b069a6a29
Visa Global Registry of Service Providers
Official registry · HTTP 200
5 Oct 2026PAGSMILE CR SOCIEDAD ANONIMA: PCI DSS, assessor Secure Vectors Information Technologies Inc., valid through 2026-12-31
Live pagesha256 70245a860d
Visa Global Registry of Service Providers
Official registry · HTTP 200
17 Sep 2026Stripe Payments Mexico: PCI DSS, assessor Coalfire Systems, Inc, valid through 2027-03-31
Live pagesha256 014f8f4683
This is wrong
ExpiredListed on the Visa Global Registry as PCI DSS validated through 2026-10-31 (validation date passed)
as of 2 Nov 2026 · confidence 100%
Kind
Attestation
Issued or listed
28 Sep 2002
Expires or valid through
31 Oct 2026
Auditor or assessor
SC2Labs
Scope
ACCESS CONTROL SERVER, VISANET PROCESSOR
SourceCapturedQuoteLinks
Visa Global Registry of Service Providers
Official registry · HTTP 200
2 Nov 2026Erste Bank Polska S.A.: PCI DSS, assessor SC2Labs, valid through 2026-10-31
Live pagesha256 fd900f1a19
Visa Global Registry of Service Providers
Official registry · HTTP 200
19 Oct 2026Erste Bank Polska S.A.: PCI DSS, assessor SC2Labs, valid through 2026-10-31
Live pagesha256 765b44bb87
Visa Global Registry of Service Providers
Official registry · HTTP 200
12 Oct 2026Stripe Payments Mexico: PCI DSS, assessor Coalfire Systems, Inc, valid through 2027-03-31
Live pagesha256 76fb8aba4e
This is wrong

What is not public

  • The Visa registry lists the assessor and the date the validation runs through, not the services in scope of the attestation of compliance.
What PCI DSS means, and what it does not

Only a registry listing (Visa Global Registry, Mastercard SDP) or an AOC letter is strong evidence. In the Visa registry only rows validated as PCI DSS with a validation date count; Third Party Agent registrations are not PCI evidence.

Read the PCI DSS guide and browse all vendors with evidence

Questions buyers ask

Is Stripe PCI DSS compliant?

Stripe is listed as a PCI DSS validated service provider, assessed by Enterprise Risk Management, Inc, (dba ERMProtect), valid through 31 Aug 2027, as of 2 Nov 2026.

How does CertReports verify this?

Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.

Change history

  1. 26 Oct 2026PCI DSS renewedExpiry moved from 2027-03-31 to 2027-08-31.
  2. 26 Oct 2026PCI DSS auditor changedAuditor changed from Coalfire Systems, Inc to Enterprise Risk Management, Inc, (dba ERMProtect).
  3. 19 Sep 2026Trust centre movedTrust centre URL is now https://docs.stripe.com/security.

Alternatives with PCI DSS evidence

Similar vendors (shared product tags or the Payments category) whose PCI DSS row is verified or vendor-stated, ranked by similarity.

Kashier Payment Solutions logo

Kashier Payment Solutions

Payments

Scale faster by growing your business with Kashier payment acceptance and processing

PCI DSS mark, CertReports state Verified
1 verified2 Nov 2026
Element Payment Solutions logo

Element Payment Solutions

Payments

Element Payment Solutions delivers secure, fast, and flexible payment gateway solutions, empowering businesses of all sizes to grow with

PCI DSS mark, CertReports state Verified
1 verified2 Nov 2026
Finix Payments logo

Finix Payments

Payments

Finix is a payments technology provider enabling businesses to accept and send payments online or in

PCI DSS mark, CertReports state Verified
1 verified2 Nov 2026
2C2P logo

2C2P

Payments

2C2P is a payment service provider that helps companies in emerging markets accept and make payments

SOC 2 mark, CertReports state ReportedPCI DSS mark, CertReports state VerifiedCSA STAR mark, CertReports state Verified
2 verified2 Nov 2026
Cybersource logo

Cybersource

Payments

Cybersource is an American payment gateway founded in 1994

PCI DSS mark, CertReports state Verified
1 verified2 Nov 2026
Beam Data logo

Beam Data

Payments

Accept all payment methods with low

PCI DSS mark, CertReports state Verified
1 verified2 Nov 2026
Bill2Pay logo

Bill2Pay

Payments

Catalis streamlines payment processing by combining existing infrastructure with innovative new payment

PCI DSS mark, CertReports state Verified
1 verified2 Nov 2026
Card Access Services logo

Card Access Services

Payments

Australia’s most experienced Payment Gateway Helping merchants accept payments since

PCI DSS mark, CertReports state Verified
1 verified2 Nov 2026

Understand PCI DSS evidence

All articles