Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
Thought Machine
PCI DSS evidence
From tier 1 global institutions to hyper-growth fintechs, the Vault platform provides the clean, cloud-native core banking and integrated
VerifiedThought Machine and PCI DSS
Thought Machine is listed in the Visa Global Registry of Service Providers for PCI DSS (Listed on the Visa Global Registry as PCI DSS validated through 2027-05-31), dated 20 Jan 2011, assessed by MegaplanIT Holdings LLC. CertReports last verified this on 2 Nov 2026 from the registry.
Evidence
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-05-31
as of 2 Nov 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 20 Jan 2011
- Expires or valid through
- 31 May 2027
- Auditor or assessor
- MegaplanIT Holdings LLC
- Scope
- PAYMENT FACILITATOR, MERCHANT SERVICER - VISA
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 2 Nov 2026 | Yapstone, Inc.: PCI DSS, assessor MegaplanIT Holdings LLC, valid through 2027-05-31 | Live pagesha256 d8f56bf660 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 26 Oct 2026 | Yapstone, Inc.: PCI DSS, assessor MegaplanIT Holdings LLC, valid through 2027-05-31 | Live pagesha256 ee688d9516 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 19 Oct 2026 | Banco Nacional De Guinea Ecuatorial: PCI DSS, assessor Dataprotect, valid through 2026-11-30 | Live pagesha256 9f5a6a2a7e |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 12 Oct 2026 | JHA Centrally Managed Controls: PCI DSS, assessor KirkpatrickPrice, Inc. dba Raven Eye, valid through 2027-05-31 | Live pagesha256 9b55f202f8 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 17 Sep 2026 | Thought Machine: PCI DSS, assessor NCC GROUP PTY LIMITED, valid through 2027-03-31 | Live pagesha256 d91e5ea496 |
VerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-03-31
as of 12 Oct 2026 · confidence 100%- Kind
- Attestation
- Issued or listed
- 22 Apr 2025
- Expires or valid through
- 31 Mar 2027
- Auditor or assessor
- NCC GROUP PTY LIMITED
- Scope
- INSTANT CARD PERSONALIZATION ISSUANCE AGENT
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 12 Oct 2026 | Thought Machine: PCI DSS, assessor NCC GROUP PTY LIMITED, valid through 2027-03-31 | Live pagesha256 772ce55cc8 |
What is not public
- The Visa registry lists the assessor and the date the validation runs through, not the services in scope of the attestation of compliance.
What PCI DSS means, and what it does not
Only a registry listing (Visa Global Registry, Mastercard SDP) or an AOC letter is strong evidence. In the Visa registry only rows validated as PCI DSS with a validation date count; Third Party Agent registrations are not PCI evidence.
Read the PCI DSS guide and browse all vendors with evidenceQuestions buyers ask
Is Thought Machine PCI DSS compliant?
Thought Machine is listed as a PCI DSS validated service provider, assessed by MegaplanIT Holdings LLC, valid through 31 May 2027, as of 2 Nov 2026.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 26 Oct 2026PCI DSS renewedExpiry moved from 2026-11-30 to 2027-05-31.
- 26 Oct 2026PCI DSS auditor changedAuditor changed from Dataprotect to MegaplanIT Holdings LLC.
- 19 Oct 2026PCI DSS auditor changedAuditor changed from NCC GROUP PTY LIMITED to Dataprotect.
- 18 Sep 2026First indexed by CertReports1 evidence row across 1 framework entered the index.
Alternatives with PCI DSS evidence
Similar vendors (shared product tags or the Banking and lending category) whose PCI DSS row is verified or vendor-stated, ranked by similarity.
Infinant
Banking and lending
Banking Technology to innovate above your core banking
Pismo Solucoes Tecnologicas Ltda
Banking and lending
Pismo offers a complete next-gen technology platform for cards and core banking, so you can create new products and respond to market
Novopayment Kft
Payments
A next-gen core solution for payments, digital banking, and card issuance, built for tomorrow’s financial
Alkami Technology
Banking and lending
One Digital Banking platform. Three powerful solutions. Endless potential to grow, engage, and lead through a connected digital banking experience.
Jack Henry Associates
Banking and lending
Jack Henry™ is a well-rounded technology provider serving community and regional financial institutions with a wide offering of
Bank of China
Banking and lending
The Bank of China is a state-owned Chinese multinational banking and financial services corporation headquartered in Beijing, China
Backbase Services
Banking and lending
One operating system where customers, employees, and AI agents work as
Lumin Digital
Banking and lending
Experience disruption-proof digital banking with Lumin Digital's cloud-native Compounding Growth Platform, offering innovative solutions
Understand PCI DSS evidence
All articlesExplainers
ISO 27001 Annex A: What Buyers Should Actually Ask For
Solomon Amos · 23 Oct 2026 · 9 min read