PCI DSS compliant cloud providers
21 of the 112 cloud providers we track say they hold a PCI DSS attestation.
Providers
PCI DSS is the payment card industry's standard for handling card data. Level 1 is the strictest tier, audited on site every year.
| Provider | Level | Source | Checked |
|---|---|---|---|
Akamai Cloud
|
trust.akamai.com | ||
Alibaba Cloud
|
Level 1 | alibabacloud.com | |
Amazon Web Services
|
Level 1 | aws.amazon.com | |
Cloudflare
|
Level 1, some products | cloudflare.com | |
DigitalOcean
|
SAQ-A | digitalocean.com | |
Firebase
|
Some Firebase services only | cloud.google.com | |
Gcore
|
trustcentre.gcore.com | ||
Google Cloud
|
cloud.google.com | ||
Heroku
|
Level 1, Heroku Shield only | devcenter.heroku.com | |
Hetzner
|
Card payments only | docs.hetzner.com | |
Hostinger
|
SAQ-A | trust.hostinger.com | |
Impossible Cloud
|
Data centers only | impossiblecloud.com | |
Leaseweb
|
Physical security only | kb.leaseweb.com | |
Microsoft Azure
|
Level 1 | learn.microsoft.com | |
Netlify
|
SAQ-A | netlify.com | |
Oracle Cloud
|
oracle.com | ||
OVHcloud
|
Level 1, Hosted Private Cloud only | ovhcloud.com | |
Paperspace
|
Level 1, data centers only | paperspace.com | |
Vercel
|
vercel.com | ||
Vultr
|
Merchant | vultr.com | |
Wasabi
|
Data centers only | docs.wasabi.com |
No providers matching your filters.
Showing 21 of 21 providers
Heads up: Each row links to the provider's own statement, checked on the date shown. An attestation can cover one tier, one region or the platform alone rather than every service. Verify the scope before you rely on it.