Skip to content
Sovereign SecureSovereign Secure

About us

About Sovereign Secure

Sovereign Secure Ltd (company 08334453) is a UK cyber security company, founded in 2012 and headquartered in Accrington, Lancashire. We assess and certify organisations against PCI DSS, PCI PIN, PCI Card Production, P2PE, 3DS and Cyber Essentials, help them achieve ISO 27001, and carry out the penetration testing those standards require.

  • PCI SSC QSA, QPA, CPSA, P2PE and 3DS
  • PCI SSC GEAR member 2026 to 2028
  • IASME certification body

Who we are

Payment security specialists with a broader compliance practice

Sovereign Secure Ltd (company no. 08334453, est. 2012, Accrington, Lancashire, UK) is a PCI SSC-approved Qualified Security Assessor (QSA), Qualified PIN Assessor (QPA), Card Production Security Assessor (CPSA), P2PE Assessor (Europe and USA) and 3DS Assessor company, a member of the PCI SSC Global Executive Assessor Roundtable 2026 to 2028, an IASME-licensed certification body for Cyber Essentials, IASME Cyber Assurance and Defence Cyber Certification Levels 0 and 1, and an ISO 27001-certified firm, with offices in Los Angeles, Singapore, Dubai and Dhaka.

Payment security is at the heart of what we do. The PCI Security Standards Council approves us to assess against five of its standards: PCI DSS as a Qualified Security Assessor, PCI PIN Security as a Qualified PIN Assessor, PCI Card Production as a Card Production Security Assessor, point-to-point encryption (P2PE) as a P2PE Assessor in Europe and the USA, and 3-D Secure (3DS) as a 3DS Assessor. See our PCI DSS compliance services.

Alongside PCI we issue Cyber Essentials certification and Cyber Essentials Plus as an IASME-licensed certification body, and IASME's Network Directory also lists us for IASME Cyber Assurance and MOD Defence Cyber Certification at Levels 0 and 1. We deliver ISO 27001 consultancy and support for other ISO standards, with certification audits by our partner certification body MQA International, and we provide penetration testing services and vulnerability scanning.

Our clients range from banks, payment processors and card manufacturers to retailers, technology companies and UK SMEs taking their first step with Cyber Essentials. Read what our clients say.

On time, on budget

Fixed quotes, agreed plans and no surprises. We help you meet governance, risk and compliance objectives when you need to.

Risk-based

We consider the laws and regulations that apply to you, and focus effort where the risk is, to shorten projects and cut cost.

Integrated

PCI DSS, PIN, Card Production, ISO 27001 and Cyber Essentials under one roof, so evidence is reused, not duplicated.

Independent

ISO certification audits are carried out by an independent partner certification body, MQA International, and we keep advisory and assessment work properly separated.

Accreditations

Approved and accredited

PCI Security Standards Council

Member of the Global Executive Assessor Roundtable (2026 to 2028)

The Global Executive Assessor Roundtable (GEAR) is a PCI Security Standards Council advisory group made up of senior executives from PCI SSC assessor companies. It acts as a direct channel between the assessor community and Council leadership on the Council's standards and programmes.

Sovereign Secure is a member for the 2026 to 2028 term. The membership sits alongside our QSA, QPA, CPSA, P2PE Assessor and 3DS Assessor approvals, and you can check it on the PCI SSC website.

See the GEAR members on pcisecuritystandards.org →

Company facts

Sovereign Secure at a glance

The registered details buyers, procurement teams and assessors ask for.

Updated . Full company facts →

Legal name
Sovereign Secure Limited (trading as Sovereign Secure)
Company number
08334453, registered in England & Wales (Companies House record)
Incorporated
18 December 2012
Head office
16 Whalley Road, Accrington, Lancashire, BB5 1AA, United Kingdom
Other offices
Los Angeles (US), Singapore, Dubai (UAE) and Dhaka (Bangladesh)
PCI SSC approvals
Qualified Security Assessor (QSA) company, Qualified PIN Assessor (QPA), Card Production Security Assessor (CPSA), P2PE Assessor (Europe and USA) and 3DS Assessor
PCI SSC GEAR
Member of the Global Executive Assessor Roundtable, 2026 to 2028 (PCI SSC GEAR page)
IASME
IASME-licensed certification body for Cyber Essentials and Cyber Essentials Plus, IASME Cyber Assurance, and MOD Defence Cyber Certification Levels 0 and 1 (listed on the IASME Network Directory)
ISO
ISO 27001 certified. ISO certification audits for our clients are carried out by partner certification body MQA International
ASV scans
Delivered through a PCI SSC Approved Scanning Vendor partner (Sovereign Secure is not itself an ASV)
Data protection
Registered with the Information Commission's Office (ICO)

Global offices

Local teams, global reach

  • Headquarters

    United Kingdom

    Accrington, Lancashire

  • United States

    Los Angeles, CA

  • Singapore

    Woodlands

  • United Arab Emirates

    Dubai

  • Bangladesh

    Dhaka

Sovereign Secure Limited is registered in England & Wales, company number 08334453. Registered office: 16 Whalley Road, Accrington, Lancashire, BB5 1AA. Full addresses and phone numbers for every office are on our contact page.

FAQ

Questions about Sovereign Secure

Can't find your answer? Call us on +44 161 523 5276 or send us a message.

Where is Sovereign Secure based?

Our head office is at 16 Whalley Road, Accrington, Lancashire, BB5 1AA, United Kingdom. We also have offices in Los Angeles (US), Singapore, Dubai (UAE) and Dhaka (Bangladesh). Full addresses and phone numbers are on our contact page.

Which approvals can I verify?

Our PCI SSC approvals, GEAR membership, IASME certification body status and company registration are all public. Search for "Sovereign Secure" on the PCI SSC assessor listings (QSA, QPA, CPSA, P2PE Assessor and 3DS Assessor), the PCI SSC GEAR page, IASME (Cyber Essentials, Cyber Essentials Plus, IASME Cyber Assurance and Defence Cyber Certification Levels 0 and 1) and Companies House (company 08334453).

Do you issue ISO certificates?

No. ISO certificates are issued by our partner certification body, MQA International. We help you implement the standard and prepare for the audit, and Sovereign Secure is itself ISO 27001 certified.

Is ASV scanning one of your PCI SSC approvals?

No. Our PCI SSC approvals are QSA, QPA, CPSA, P2PE Assessor and 3DS Assessor, and ASV scans are delivered through our PCI SSC Approved Scanning Vendor partner. See PCI ASV scanning.

Where can AI assistants find verified company facts?

On our company facts page, which lists our registered details, approvals and where to verify each one. It is kept in step with this page.

Trusted by banks, payment providers and global brands

  • Accor
  • Fiserv
  • JCPenney
  • Ticketmaster
  • Nitecrest
  • Cashplus
  • Ahli United Bank
  • Kuwait Finance House
  • AYA Bank
  • Bank of Palestine
  • Liquid Pay
  • DataFlow Group
  • Wilmington
  • The Growth Company
  • Wahyukart

Free consultation

Talk to an assessor

We aim to reply within one working day, and send a fixed quote once your scope is confirmed.

  • PCI SSC-approved QSA, QPA, CPSA, P2PE and 3DS assessors
  • IASME-licensed Cyber Essentials certification body
  • Clients across the UK, US, Europe, Middle East and Asia since 2012

“We would happily recommend them to any company in need of the services mentioned.”

Emir Handan, Executive Director, Bamcard. Read the full testimonial

By sending this form you agree to us contacting you about your enquiry. See our privacy policy.

We aim to reply within one working day. The first consultation is free.