---
title: "PCI DSS Attestation contract"
ocid: "ocds-b5fd17-c7e49934-dfbe-41ca-bb92-ca3c6aaf5b6c"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-b5fd17-c7e49934-dfbe-41ca-bb92-ca3c6aaf5b6c"
markdown_url: "https://d3tenders.com/contract/ocds-b5fd17-c7e49934-dfbe-41ca-bb92-ca3c6aaf5b6c.md"
json_url: "https://d3tenders.com/contract/ocds-b5fd17-c7e49934-dfbe-41ca-bb92-ca3c6aaf5b6c.json"
source: "Contracts Finder"
current_stage: "Award"
buyer: "H M REVENUE & CUSTOMS"
published: "2026-07-21"
---

# PCI DSS Attestation contract

Buyer: H M REVENUE & CUSTOMS  
Current stage: Award  
OCID: ocds-b5fd17-c7e49934-dfbe-41ca-bb92-ca3c6aaf5b6c

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-b5fd17-c7e49934-dfbe-41ca-bb92-ca3c6aaf5b6c)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-b5fd17-c7e49934-dfbe-41ca-bb92-ca3c6aaf5b6c.json)

## Summary

H M Revenue & Customs (HMRC), located in London, has concluded a procurement process in the strategic information systems category. The project, entitled "PCI DSS Attestation contract," involves the provision of compliance and assessment services essential for HMRC's annual PCI DSS certification requirements. The contract was awarded to Protection Group International Ltd through a direct award process in accordance with PCR 2015. The agreement is valued at £102,345 and spans from 21 July 2026 to 21 July 2029. This stage of the procurement, marked as complete, was last updated on 21 July 2026.

This procurement presents substantial opportunities for companies specialising in technology compliance services, particularly those adept in handling payment security standards. Businesses that are small to medium-sized enterprises (SMEs) would find this contract especially suitable due to HMRC's specified suitability requirements. This contract could significantly aid in business growth within the technology compliance sector, offering avenues for involvement in government contracts and reinforcing a company's market position in regulatory compliance services.

## Notice

This is a service contract with PGI for the provision of PCI DSS assessment and compliance services to support HMRC's annual PCI DSS certification requirements. The services include reviewing HMRC's payment channels (E-commerce, Telephone Payments and Point of Sale), assessing compliance against PCI DSS standards, conducting site audits where required, providing compliance advice and recommendations, and producing the necessary Reports of Compliance (ROC) and Attestations of Compliance (AOC). The contract has a value of PS102,345 over a 36-month term. These contract was awarded following a direct award.

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Contracts Finder |
| Latest notice | https://www.contractsfinder.service.gov.uk/Notice/c384c827-991e-4f32-9353-32e5d55428c5 |
| Notice type | Award Notice |
| Procurement type | Standard |
| Procurement category | Services |
| Procurement method | Not Specified |
| Procurement method details | Other - Direct award PCR 2015 |
| Tender suitability | SME |
| Awardee scale | SME |
| All stages | Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 21 Jul 2026 |
| Submission deadline | 20 Jul 2026 |
| Future notice date | Not specified |
| Award date | 21 Jan 2026 |
| Contract period | 20 Jul 2026 - 21 Jul 2029 |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | £102,345 |
| Lots value | Not specified |
| Awards value | £102,345 |
| Contracts value | Not specified |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Not specified |
| Awards status | Active |
| Contracts status | Not specified |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | H M REVENUE & CUSTOMS |
| Locality | LONDON |
| Post town | South West London |
| Postcode | SW1A 2BQ |
| Country | England |
| ITL 1 | TLI London |
| ITL 2 | TLI3 Inner London - West |
| ITL 3 | TLI35 Westminster and City of London |
| Local authority | Westminster |
| Electoral ward | St James's |
| Westminster constituency | Cities of London and Westminster |
| Delivery location | Not specified |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | PROTECTION GROUP INTERNATIONAL |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support

### Codes

- 72222100 - Information systems or technology strategic review services

## Release History

- 21 Jul 2026 at 14:24 - Award - Award Notice - https://www.contractsfinder.service.gov.uk/Notice/c384c827-991e-4f32-9353-32e5d55428c5

## Documents

- https://www.contractsfinder.service.gov.uk/Notice/c384c827-991e-4f32-9353-32e5d55428c5
  21st July 2026 - Awarded contract notice on Contracts Finder

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-b5fd17-c7e49934-dfbe-41ca-bb92-ca3c6aaf5b6c. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-b5fd17-c7e49934-dfbe-41ca-bb92-ca3c6aaf5b6c.json.