Subsplash

PCI DSS evidence

The Subsplash Platform equips churches with the best mobile apps, church management software, websites, online giving, and more to engage

subsplash.com Nonprofit and fundraisingLast verified 26 Oct 2026

Request the report Are you Subsplash?

Verified

Subsplash and PCI DSS

Subsplash is listed in the Visa Global Registry of Service Providers for PCI DSS (Listed on the Visa Global Registry as PCI DSS validated through 2027-05-31), dated 5 Apr 2022, assessed by MegaplanIT Holdings LLC. CertReports last verified this on 26 Oct 2026 from the registry.

Evidence

VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-05-31

as of 26 Oct 2026 · confidence 100%

Kind: Attestation
Issued or listed: 5 Apr 2022
Expires or valid through: 31 May 2027
Auditor or assessor: MegaplanIT Holdings LLC
Scope: THIRD PARTY SERVICER, MERCHANT SERVICER - VISA, ISO - HIGH INTEGRITY RISK

Source	Captured	Quote	Links
Visa Global Registry of Service Providers Official registry · HTTP 200	26 Oct 2026	MENTOM PAYMENTS, LLC: PCI DSS, assessor MegaplanIT Holdings LLC, valid through 2027-05-31	Live pagesha256 05e216f92b
Visa Global Registry of Service Providers Official registry · HTTP 200	12 Oct 2026	Subsplash Wallet, Inc.: PCI DSS, assessor A-LIGN Compliance and Security, Inc., dba A-LIGN, valid through 2027-10-31	Live pagesha256 76fb8aba4e

This is wrong

VerifiedListed on the Visa Global Registry as PCI DSS validated through 2026-10-31

as of 17 Sep 2026 · confidence 100%

Kind: Attestation
Issued or listed: 24 Oct 2017
Expires or valid through: 31 Oct 2026
Auditor or assessor: A-LIGN Compliance and Security, Inc., dba A-LIGN
Scope: MERCHANT SERVICER - VISA

Source	Captured	Quote	Links
Visa Global Registry of Service Providers Official registry · HTTP 200	17 Sep 2026	Subsplash Wallet, Inc.: PCI DSS, assessor A-LIGN Compliance and Security, Inc., dba A-LIGN, valid through 2026-10-31	Live pagesha256 014f8f4683

This is wrong

Vendor-statedVendor states PCI-DSS 4.0 on its trust centre

as of 30 Sep 2026 · confidence 90%

Source	Captured	Quote	Links
Subsplash trust centre (Vanta) Vendor trust centre · HTTP 200	29 Sep 2026	PCI-DSS 4.0	Live page Snapshotsha256 115cae123f
Subsplash trust centre (Vanta) Vendor trust centre · HTTP 200	18 Sep 2026	PCI-DSS 4.0	Live page Snapshotsha256 3ac1e70204

This is wrong

What is not public

The Visa registry lists the assessor and the date the validation runs through, not the services in scope of the attestation of compliance.

What PCI DSS means, and what it does not

Only a registry listing (Visa Global Registry, Mastercard SDP) or an AOC letter is strong evidence. In the Visa registry only rows validated as PCI DSS with a validation date count; Third Party Agent registrations are not PCI evidence.

Read the PCI DSS guide and browse all vendors with evidence

Questions buyers ask

Is Subsplash PCI DSS compliant?

Subsplash is listed as a PCI DSS validated service provider, assessed by MegaplanIT Holdings LLC, valid through 31 May 2027, as of 26 Oct 2026.

How does CertReports verify this?

Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.

Change history

26 Oct 2026PCI DSS auditor changedAuditor changed from A-LIGN Compliance and Security, Inc., dba A-LIGN to MegaplanIT Holdings LLC.
12 Oct 2026PCI DSS renewedExpiry moved from 2026-10-31 to 2027-10-31.
18 Sep 2026Subprocessor added: Amazon Web ServicesAmazon Web Services appeared on the subprocessor list.
18 Sep 2026Subprocessor added: HubspotHubspot appeared on the subprocessor list.
18 Sep 2026Subprocessor added: IntercomIntercom appeared on the subprocessor list.
18 Sep 2026Subprocessor added: LoomLoom appeared on the subprocessor list.
18 Sep 2026Subprocessor added: MongoDBMongoDB appeared on the subprocessor list.
18 Sep 2026Subprocessor added: OutreachOutreach appeared on the subprocessor list.
18 Sep 2026Subprocessor added: SalesforceSalesforce appeared on the subprocessor list.

Alternatives with PCI DSS evidence

Similar vendors (shared product tags or the Nonprofit and fundraising category) whose PCI DSS row is verified or vendor-stated, ranked by similarity.

Church Community Builder

Analytics

See why 14,000+ churches run on Pushpay - the church engagement platform for giving, custom apps, analytics, and live

1 verified26 Oct 2026

Givelify

Nonprofit and fundraising

Givelify is the leader in mobile and online giving for churches and

1 verified12 Oct 2026

Anedot

Nonprofit and fundraising

Trusted by more than 30,000 organizations, Anedot saves you time and money with powerful online giving, fundraising, and event management

1 verified · 2 stated1 Nov 2026

DonorDrive

Nonprofit and fundraising

Crush your supporter acquisition goals, boost stewardship and engagement, and level up your mission impact with the DonorDrive enterprise

1 verified26 Oct 2026

Blackbaud

Nonprofit and fundraising

Blackbaud is the world’s leading cloud software company powering social

3 verified26 Oct 2026

Bonterra

Nonprofit and fundraising

Social good software for nonprofits, corporations, public agencies, and

2 verified · 6 stated1 Nov 2026

Frontstream

Nonprofit and fundraising

Nonprofit fundraising software for simpler charity auctions, galas, peer-to-peer events, online campaigns, donor management, and

1 verified5 Oct 2026

Generosity

Nonprofit and fundraising

Best online donation software for your church or

1 verified12 Oct 2026

All articles

How-to

Subsplash

Subsplash and PCI DSS

Evidence

What is not public

Questions buyers ask

Change history