Please find below the list of Service Providers that have been reported to MasterCard by Qualified Security Assessors (QSAs) as compliant with the PCI Standard as of the date indicated. To be reported by a QSA as PCI compliant, the Service Provider must have both:

• successfully completed a PCI onsite review conducted by a QSA; and
• successfully conducted network scans in compliance with the MasterCard Site Data Protection program.

A Service Provider reported to MasterCard to be compliant with the PCI Standard should have been provided a Certificate of Validation (COV) by a QSA. If you are considering using a Service Provider, MasterCard recommends that you ask to see and inspect the Certificate of Validation. Questions about compliance with the PCI Standard should be directed to the QSA.

To access a list of Qualified Security Assessors, please click on the following link:
www.pcisecuritystandards.org/resources/qualified_security_assessors.htm

Please note that MasterCard does not endorse or make any representation of any kind as to the nature or quality of service or other performance of any QSA, or Service Provider. MasterCard disclaims any liability of any kind directly or indirectly resulting from the use of or reliance on information appearing or not appearing herein and makes no representation as to the accuracy of any such information.

Compliant Service Provider List

As of January 1, 2009, MasterCard will no longer list those Service Providers who have only submitted an SAQ. The posting will contain only those entities who have successfully completed an annual onsite review.