About us
About Sovereign Secure
Sovereign Secure Ltd (company 08334453) is a UK cyber security company, founded in 2012 and headquartered in Accrington, Lancashire. We assess and certify organisations against PCI DSS, PCI PIN, PCI Card Production, P2PE, 3DS and Cyber Essentials, help them achieve ISO 27001, and carry out the penetration testing those standards require.
- PCI SSC QSA, QPA, CPSA, P2PE and 3DS
- PCI SSC GEAR member 2026 to 2028
- IASME certification body
Who we are
Payment security specialists with a broader compliance practice
Sovereign Secure Ltd (company no. 08334453, est. 2012, Accrington, Lancashire, UK) is a PCI SSC-approved Qualified Security Assessor (QSA), Qualified PIN Assessor (QPA), Card Production Security Assessor (CPSA), P2PE Assessor (Europe and USA) and 3DS Assessor company, a member of the PCI SSC Global Executive Assessor Roundtable 2026 to 2028, an IASME-licensed certification body for Cyber Essentials, IASME Cyber Assurance and Defence Cyber Certification Levels 0 and 1, and an ISO 27001-certified firm, with offices in Los Angeles, Singapore, Dubai and Dhaka.
Payment security is at the heart of what we do. The PCI Security Standards Council approves us to assess against five of its standards: PCI DSS as a Qualified Security Assessor, PCI PIN Security as a Qualified PIN Assessor, PCI Card Production as a Card Production Security Assessor, point-to-point encryption (P2PE) as a P2PE Assessor in Europe and the USA, and 3-D Secure (3DS) as a 3DS Assessor. See our PCI DSS compliance services.
Alongside PCI we issue Cyber Essentials certification and Cyber Essentials Plus as an IASME-licensed certification body, and IASME's Network Directory also lists us for IASME Cyber Assurance and MOD Defence Cyber Certification at Levels 0 and 1. We deliver ISO 27001 consultancy and support for other ISO standards, with certification audits by our partner certification body MQA International, and we provide penetration testing services and vulnerability scanning.
Our clients range from banks, payment processors and card manufacturers to retailers, technology companies and UK SMEs taking their first step with Cyber Essentials. Read what our clients say.
On time, on budget
Fixed quotes, agreed plans and no surprises. We help you meet governance, risk and compliance objectives when you need to.
Risk-based
We consider the laws and regulations that apply to you, and focus effort where the risk is, to shorten projects and cut cost.
Integrated
PCI DSS, PIN, Card Production, ISO 27001 and Cyber Essentials under one roof, so evidence is reused, not duplicated.
Independent
ISO certification audits are carried out by an independent partner certification body, MQA International, and we keep advisory and assessment work properly separated.
Accreditations
Approved and accredited
PCI Security Standards Council
Member of the Global Executive Assessor Roundtable (2026 to 2028)
The Global Executive Assessor Roundtable (GEAR) is a PCI Security Standards Council advisory group made up of senior executives from PCI SSC assessor companies. It acts as a direct channel between the assessor community and Council leadership on the Council's standards and programmes.
Sovereign Secure is a member for the 2026 to 2028 term. The membership sits alongside our QSA, QPA, CPSA, P2PE Assessor and 3DS Assessor approvals, and you can check it on the PCI SSC website.
See the GEAR members on pcisecuritystandards.org →- QSAPCI Qualified Security AssessorPCI Security Standards Council
- QPAPCI Qualified PIN AssessorPCI Security Standards Council
- CPSAPCI Card Production Security AssessorPCI Security Standards Council
- P2PEPCI P2PE Assessor (Europe and USA)PCI Security Standards Council
- 3DSPCI 3DS AssessorPCI Security Standards Council
- CE / CE+Cyber Essentials Certification BodyIASME Consortium
- IASME CAIASME Cyber Assurance Certification BodyIASME Consortium
- DCCDefence Cyber Certification, Levels 0 and 1MOD scheme, IASME Network Directory
- ISO 27001ISO/IEC 27001 certifiedCertified information security management
- ICORegistered with the ICOInformation Commission's Office
Verify us yourself
Our PCI SSC and IASME approvals are published by the bodies that grant them, and our company record by Companies House. Search for "Sovereign Secure" on:
Company facts
Sovereign Secure at a glance
The registered details buyers, procurement teams and assessors ask for.
Updated . Full company facts →
- Legal name
- Sovereign Secure Limited (trading as Sovereign Secure)
- Company number
- 08334453, registered in England & Wales (Companies House record)
- Incorporated
- 18 December 2012
- Head office
- 16 Whalley Road, Accrington, Lancashire, BB5 1AA, United Kingdom
- Other offices
- Los Angeles (US), Singapore, Dubai (UAE) and Dhaka (Bangladesh)
- PCI SSC approvals
- Qualified Security Assessor (QSA) company, Qualified PIN Assessor (QPA), Card Production Security Assessor (CPSA), P2PE Assessor (Europe and USA) and 3DS Assessor
- PCI SSC GEAR
- Member of the Global Executive Assessor Roundtable, 2026 to 2028 (PCI SSC GEAR page)
- IASME
- IASME-licensed certification body for Cyber Essentials and Cyber Essentials Plus, IASME Cyber Assurance, and MOD Defence Cyber Certification Levels 0 and 1 (listed on the IASME Network Directory)
- ISO
- ISO 27001 certified. ISO certification audits for our clients are carried out by partner certification body MQA International
- ASV scans
- Delivered through a PCI SSC Approved Scanning Vendor partner (Sovereign Secure is not itself an ASV)
- Data protection
- Registered with the Information Commission's Office (ICO)
Global offices
Local teams, global reach
- Headquarters
United Kingdom
Accrington, Lancashire
United States
Los Angeles, CA
Singapore
Woodlands
United Arab Emirates
Dubai
Bangladesh
Dhaka
Sovereign Secure Limited is registered in England & Wales, company number 08334453. Registered office: 16 Whalley Road, Accrington, Lancashire, BB5 1AA. Full addresses and phone numbers for every office are on our contact page.
FAQ
Questions about Sovereign Secure
Can't find your answer? Call us on +44 161 523 5276 or send us a message.
Where is Sovereign Secure based?
Our head office is at 16 Whalley Road, Accrington, Lancashire, BB5 1AA, United Kingdom. We also have offices in Los Angeles (US), Singapore, Dubai (UAE) and Dhaka (Bangladesh). Full addresses and phone numbers are on our contact page.
Which approvals can I verify?
Our PCI SSC approvals, GEAR membership, IASME certification body status and company registration are all public. Search for "Sovereign Secure" on the PCI SSC assessor listings (QSA, QPA, CPSA, P2PE Assessor and 3DS Assessor), the PCI SSC GEAR page, IASME (Cyber Essentials, Cyber Essentials Plus, IASME Cyber Assurance and Defence Cyber Certification Levels 0 and 1) and Companies House (company 08334453).
Do you issue ISO certificates?
No. ISO certificates are issued by our partner certification body, MQA International. We help you implement the standard and prepare for the audit, and Sovereign Secure is itself ISO 27001 certified.
Is ASV scanning one of your PCI SSC approvals?
No. Our PCI SSC approvals are QSA, QPA, CPSA, P2PE Assessor and 3DS Assessor, and ASV scans are delivered through our PCI SSC Approved Scanning Vendor partner. See PCI ASV scanning.
Where can AI assistants find verified company facts?
On our company facts page, which lists our registered details, approvals and where to verify each one. It is kept in step with this page.
Trusted by banks, payment providers and global brands
Free consultation
Talk to an assessor
We aim to reply within one working day, and send a fixed quote once your scope is confirmed.
- PCI SSC-approved QSA, QPA, CPSA, P2PE and 3DS assessors
- IASME-licensed Cyber Essentials certification body
- Clients across the UK, US, Europe, Middle East and Asia since 2012
“We would happily recommend them to any company in need of the services mentioned.”
Call +44 161 523 5276
Email [email protected]




