Can I host PCI evidence here?
Yes — typically the AOC, ROC summary and SAQ. Mark them NDA-required so they only release after a signed NDA.
We use cookies and similar technologies to improve your experience and analyse usage. By continuing you agree to our Privacy Policy.
Who's asking
Acquirers, schemes, sponsor banks, large merchants and partner PSPs running risk reviews.
Documents typically shared in Payments
PCI DSS AOC + ROC summary
SOC 2 Type 2 report
AML / KYC policy
Sanctions screening summary
Pen test report
Cyber insurance certificate
Business continuity plan
Vendor management policy
What slows down deals today
Acquirer onboarding asks for everything
A self-serve trust portal moves most of the document collection out of email and into a controlled flow.
Annual scheme reviews repeat
Visa, Mastercard and sponsor banks run annual reviews. Same docs, different cover letter.
PCI evidence is highly sensitive
AOC and ROC content needs NDA, watermark and time-limited access — not email.
Frequently asked
Does VendorLens support multi-entity payments groups?
On the Business plan you can run separate trust pages per legal entity or brand on different domains.
Related pages
Continue exploring related solutions, industries and comparisons.