PCI DSS-Compliant Finance & Payments Vendors
Finance & Payments vendors that hold PCI DSS certification
Ramp
7/32Corporate cards, spend management, and bill pay platform.
QuickBooks Online
7/32Cloud accounting and bookkeeping software for small and mid-sized businesses, from Intuit.
Assessed annually; listed on Visa Registry of Global Service Providers
Zuora
7/32Subscription management, billing, and revenue platform for recurring-revenue businesses.
Level 1
Sage Intacct
6/32Cloud financial management and accounting platform for mid-sized businesses.
Airwallex
6/32Global business finance and payments platform (cross-border payments, cards, treasury).
Level 1, plus PCI-3DS
Stripe
5/32Online payment processing and financial infrastructure platform for internet businesses.
PCI Service Provider Level 1
PayPal
5/32Online payments platform enabling money transfers and merchant payment processing.
PCI DSS Attestation of Compliance published
Marqeta
5/32Card issuing and payment processing platform.
Brex
4/32Corporate cards, spend management, and banking for startups.
Expensify
4/32Expense management and corporate card platform for businesses.
Chargebee
4/32Subscription management and recurring billing platform.
Level 1
Melio
4/32B2B accounts payable and bill payment platform for small businesses.
Works with Level 1 PCI-compliant third-party processors
Recharge
4/32Subscription management and recurring billing platform for e-commerce.
Xero
3/32Cloud-based accounting software for small businesses and their advisors.
Level 2 merchant; outsources card processing to Level 1 providers
Adyen
3/32Global payments platform and processor.
Bill.com
2/32Accounts payable and accounts receivable payments platform.
Card processing handled by a PCI Level 1 certified partner. BILL itself is not PCI certified
Divvy
2/32Spend management and corporate card platform, acquired by Bill.com in 2021 (now BILL Spend & Expense).
Partners with a PCI-certified vendor for card payments
Bench Accounting
2/32Online bookkeeping service for small businesses.
Relies on PCI-compliant processors such as Stripe
Klarna
2/32Buy-now-pay-later and payments platform.
Afterpay
2/32Buy-now-pay-later payments platform, owned by Block, Inc.
Square
1/32Point-of-sale, payments, and commerce tools for small and medium businesses, from Block Inc.
PCI DSS Level 1; Square acts as merchant of record for sellers
FreshBooks
1/32Cloud accounting and invoicing software for small businesses and freelancers.
Level 1
Recurly
1/32Subscription management and recurring billing platform.
Level 1; on Visa Global Registry of Service Providers
Affirm
1/32Buy-now-pay-later and installment payments platform.
LawPay
1/32Online payment processing platform for law firms, part of AffiniPay (8am).
Braintree
1/32Payment processing platform, part of PayPal.
Checkout.com
1/32Global payment processing platform.
Wave Accounting
0/32Free accounting and invoicing software for small businesses, owned by H&R Block.
Payment processing via Wave Payments; PCI compliance likely inherited from processor
Revolut Business
0/32Business banking and multi-currency payments platform.
PCI DSS compliance expected as a card-issuing regulated fintech; no public first-party AOC located
GoCardless
0/32Bank payment (direct debit and open banking) processing platform.
PCI DSS compliance expected as a regulated payments provider; no public first-party AOC located
These finance & payments vendors do not currently hold PCI DSS certification:
Know a vendor we're missing?