Can I verify NORBr’s PCI DSS status independently?

Short answer

Yes. Search for “NORBr B.V.” on the Visa Global Registry of Service Providers. The entry lists the validation type, the assessor and the validity date.

In detail

Yes. Search for "NORBr B.V." on the Visa Global Registry of Service Providers. The entry lists the validation type, the assessor and the validity date.

Why independent verification matters

Compliance claims are only as good as the evidence behind them. The Visa registry is maintained by Visa, not by NORBr, so it gives you and your auditors a source you do not have to take on trust. NORBr B.V. (Netherlands) is listed there as a Merchant Servicer.

How it fits with the Trust Center

The Trust Center holds the documents themselves: the PCI DSS Attestation of Compliance issued by a Qualified Security Assessor, ASV scan reports and security documents. The registry confirms the status independently. Together, they let you check that the attestation you download matches what Visa lists.

Every claim is designed to be verifiable: the assessor is named, the validity dates are public, and the registry is one search away.

Using it in your own compliance work

PCI DSS asks you to monitor the compliance status of your third-party service providers at least annually. A registry check, combined with the current Attestation of Compliance from the Trust Center, gives your compliance team a simple, repeatable way to document that review, and gives your own assessor the same evidence.

Still have a question?

Our team walks you through the platform with your use case on the table.

Book a demo