How often is the listing renewed?
Every year. A provider stays on the Visa Global Registry only with a new independent validation by a Qualified Security Assessor each year. NORBr first appeared on the registry in July 2025, and its current Attestation of Compliance runs from June 2026 to June 2027, with the entry valid through June 30, 2027.
In detail
Every year. A provider stays on the Visa Global Registry only with a new independent validation by a Qualified Security Assessor each year. NORBr first appeared on the registry in July 2025, and its current Attestation of Compliance runs from June 2026 to June 2027, with the entry valid through June 30, 2027.
Annual validation
A service provider stays on the Visa Global Registry only with a new independent validation every year. A Qualified Security Assessor reviews the environment, produces a Report on Compliance and signs an Attestation of Compliance, which Visa records with its validity dates. An entry that is not renewed is removed from the registry.
NORBr's dates
- First listed in July 2025.
- Current Attestation of Compliance valid from June 2026 to June 2027.
- Registry entry valid through June 30, 2027.
What operators should do with it
Keep a copy of the current attestation on file, note its expiry, and ask for the renewed one each year. Acquirers and auditors will ask for it when reviewing the operator's own compliance, and an expired attestation from a provider is a finding. The responsibility matrix should be reviewed at the same time, since scope and features change between assessments. Operators can check the registry entry directly on Visa's site, which is the independent confirmation that the validation is current.