ℹ️
Reference Content: This is a copy of content from the PCI Security Standards Council FAQ database, preserved for tracking changes over time.
View Original →
FAQ #1138 Published

Does PCI SSC provide a list of PCI DSS-compliant service providers?

No, PCI SSC does not provide a list of PCI DSS-compliant service providers, nor does PCI SSC certify service providers as PCI DSS compliant.

PCI DSS is applicable to all entities that store, process or transmit cardholder data. However, whether an entity is required to validate their compliance with PCI DSS is determined by the payment brands? compliance programs. Some of the payment brands do recognize compliance of service providers and may provide their own list of PCI DSS-compliant service providers. Please check with the payment brands to understand their compliance programs and whether they recognize compliant service providers.

Disclaimer: This FAQ has been processed for display on this website and may contain errors. Please check the original FAQ on the PCI SSC website for the authoritative version.