1. Ingest
Payment-stack artifacts — API access logs, config snapshots, control-test results, change records — without taking cardholder data.
PCI DSS continuous evidence
Payment-stack artifacts, mapped to controls as pass, gap, or stale.
PayEvidence turns payment-stack artifacts into a live map of PCI DSS controls — pass, gap, or stale — and exports dated evidence packs.
- pass Fresh artifacts still cover the control.
- gap Required evidence is missing or failing.
- stale Evidence is older than the freshness window.
How a pack gets built
2. Map and score
Each artifact is mapped to a PCI DSS control and scored pass, gap, or stale from freshness rules.
3. Export
Dated evidence packs (HTML and PDF) a compliance lead can hand to an auditor, with the control map attached.
Who it’s for
Payment companies and fintechs facing PCI audits — compliance leads, PCI program owners, and CISOs who still rebuild proof in spreadsheets every cycle.
The public demo is the synthetic NordicPay tenant. It is not a QSA, and it does not store cardholder data.
Early access
Get on the list
Name, work email, and company. Role and a note are optional.