PCI DSS-Compliant Infrastructure & Cloud Vendors

Infrastructure & Cloud vendors are evaluated against PCI DSS when they handle the workflows this framework governs. Currently, 14 vendors in our Infrastructure & Cloud category hold PCI DSS certification and 4 hold it partially or conditionally. Each listing below links to the vendor's full compliance profile.

Infrastructure & Cloud vendors that hold PCI DSS certification

Google Cloud Platform logo

Google Cloud Platform

23/32

Google's suite of cloud computing services running on the same infrastructure Google uses for its products.

Microsoft Azure logo

Microsoft Azure

23/32

Microsoft's cloud computing platform for building, deploying, and managing applications and services.

Amazon Web Services logo

Amazon Web Services

21/32

On-demand cloud computing platforms (IaaS/PaaS) offering compute, storage, and managed services.

Cloudflare logo

Cloudflare

20/32

Global CDN, DDoS mitigation, DNS, Zero Trust, and edge computing services delivered over Cloudflare's network.

Vultr logo

Vultr

12/32

Cloud infrastructure provider (VPS, bare metal, GPU compute) for developers.

Merchant

Redis Cloud logo

Redis Cloud

12/32

Fully managed in-memory database and caching service.

Vercel logo

Vercel

10/32

Frontend cloud platform for deploying and scaling web applications, built on AWS infrastructure.

DigitalOcean logo

DigitalOcean

10/32

Cloud infrastructure provider offering compute, storage, and networking services for developers and startups.

Netlify logo

Netlify

9/32

Web development platform for building, deploying, and scaling modern websites and applications.

Elasticsearch logo

Elasticsearch

8/32

Search and analytics engine, offered as Elastic Cloud.

Druva logo

Druva

8/32

SaaS-based data resiliency and backup platform.

Heroku logo

Heroku

7/32

Cloud platform-as-a-service (PaaS) for deploying and running applications, owned by Salesforce.

Acronis logo

Acronis

6/32

Cyber protection platform combining backup, disaster recovery, and security.

Wasabi logo

Wasabi

6/32

Cloud object storage service.

Certified via underlying data center providers

Fastly logo

Fastly

5/32

Edge cloud platform for CDN, security, and edge compute.

Level 1 service provider

Backblaze logo

Backblaze

5/32

Cloud storage and backup service (B2 Cloud Storage, Computer Backup).

Maintained via Stripe for payment processing, not a Backblaze platform-wide certification

PlanetScale logo

PlanetScale

4/32

Managed MySQL-compatible serverless database platform.

PCI DSS 4.0 Level 1 available only via PlanetScale Managed

Akamai logo

Akamai

1/32

Content delivery network (CDN), edge security, and cloud computing platform.

Referenced via Akamai's cybersecurity compliance solutions page

These infrastructure & cloud vendors do not currently hold PCI DSS certification:

Know a vendor we're missing?

Data sourced from public trust centers. Not legal or compliance advice.

Logos and trademarks are property of their respective owners. Use does not imply endorsement, affiliation, or sponsorship.

© Compliance Posture 2026