Southeast Asia
Registry of Service Providers (VRSP) (for Agents)
Who Can Register
Any company that provides payment related services to Visa clients, merchants or other service providers can register with Visa.
Why register with Visa?
Marketing opportunity
The Registry provides service providers with access to a new communication channel to promote their payment card related services to potential clients worldwide.
Competitive edge
The Registry serves as a platform where service providers can broadcast their PCI DSS compliance status and differentiate themselves from other service providers.
Simplified reporting
Under the Visa Account Information Security (AIS) program, all Visa clients are required to submit the annual PCI DSS attestation to Visa for each of the service providers that they have engaged.
Service providers in turn are required to submit their compliance reports to every acquirer or issuer that they provide services to.
Under the Registry of Service Providers program, service providers have the opportunity to report their annual PCI DSS compliance status to Visa directly.
Implications for Visa Client Banks
Visa issuers and acquirers remain responsible to perform due diligence prior to engaging any service provider and execute a written contract with each service provider that they work with.
If the service provider is contracted by the acquirers' merchant, the acquirer remains responsible to conduct the appropriate due diligence and ensure that the merchant and their agents comply with the relevant Visa and industry requirements.
Visa clients must ensure that their service providers that handle cardholder data are PCI DSS compliant and adhere to all Visa operating rules.
If their service providers have directly registered with Visa under this program, Visa will collect the annual PCI DSS attestations directly from the service providers.
For service providers that have not registered directly with Visa, Visa clients will have to submit to Visa the required attestation documents on their behalf.
