PCI DSS-Compliant Marketing Vendors
Marketing vendors are evaluated against PCI DSS when they handle the workflows this framework governs. Currently, 6 vendors in our Marketing category hold PCI DSS certification. Each listing below links to the vendor's full compliance profile.
Marketing vendors that hold PCI DSS certification
Marketo
8/32Marketing automation platform, now Adobe Marketo Engage within Adobe Experience Cloud.
Optimizely
7/32Digital experience and experimentation (A/B testing) platform.
Klaviyo
6/32Email and SMS marketing automation platform built for e-commerce.
Mailchimp
2/32Email marketing and marketing automation platform, owned by Intuit.
Via Intuit corporate PCI DSS program for payment features
Semrush
2/32SEO, content marketing, and competitive-intelligence platform.
PCI DSS Level 1
Constant Contact
1/32Email marketing and small-business marketing platform.
For payment processing features
These marketing vendors do not currently hold PCI DSS certification:
- ActiveCampaign (not documented)
- Braze (not documented)
- Iterable (not documented)
- Brevo (not documented)
- Campaign Monitor (not documented)
- SharpSpring (not documented)
- Salesforce Pardot (not documented)
- Oracle Eloqua (not documented)
- Ahrefs (not documented)
- Moz (not documented)
- Hootsuite (not documented)
- Buffer (not documented)
- Sprout Social (not documented)
- Later (not documented)
- Instapage (not documented)
- VWO (not documented)
- MailerLite (not documented)
- Omnisend (not documented)
- Unbounce (not documented)
Know a vendor we're missing?