Authoritative PCI DSS compliance data for journalists, analysts, and researchers. Citation-ready statistics, weekly risk intelligence, and research reports.
Quote-ready statistics, weekly risk index, and industry rankings for journalists.
Request a custom data briefing from the GRCTrack intelligence team.
Downloadable benchmark reports, trend analyses, and industry intelligence.
Brand assets, citation templates, embed instructions, and press contact.
GRCTrack PCI Compliance Intelligence, 2026. N=4,721 compliance programmes across 7 industries and 22 countries. Methodology: voluntary benchmark submissions, k-anonymity (k≥5).
Use the following citation format: "GRCTrack PCI Compliance Intelligence, 2026. N=4,721 compliance programmes across 7 industries and 22 countries. Methodology: voluntary benchmark submissions, k-anonymity (k≥5)." Full citation templates are available on the Media Kit page.
Yes. Submit a briefing request via the Analyst Briefings page. The GRCTrack intelligence team can provide custom industry or geography cuts, trend time-series, and embargoed preview data for qualifying media and analyst organisations.
The core benchmark dataset is updated weekly. The composite PCI Risk Index is recomputed every 7 days incorporating new voluntary submissions. Historical data goes back to 2020 for automation adoption and remediation metrics.