This guide covers the payments and fintech side of financial services procurement: the card networks, the processors, and the fintech platforms that sit between banks and merchants. If your targets are the banks themselves, start with our bank-by-bank roundup of which banks still buy from diverse suppliers; we verified all 10 major bank programs separately. The two buyer groups run different programs with different names, and since 2025 the names have been moving.
Payments companies are attractive buyers for a specific reason: they are technology companies with merchant-scale procurement. They buy software development, cybersecurity, data services, marketing, staffing, facilities, and consulting the way large banks do, but their vendor onboarding tends to run faster because fewer of their purchases touch regulated deposit infrastructure. The catch is consolidation. The processor market keeps merging, and every merger means one procurement organization where there used to be two.
What we verified in July 2026
We pulled the current supplier pages at the four biggest payments-side buyers on July 24, 2026. Same pattern as the banks: the buying programs survived, the diversity branding mostly did not.
Visa now runs a Supplier Inclusion Program. The current page frames its sourcing around "inclusive suppliers" and small and micro-sized businesses rather than named diverse categories, and its Second-Tier Initiative asks Visa's prime suppliers to report their spend with small and micro businesses. Visa's supplier inclusion requirements, the version written into supplier contracts, commit suppliers to commercially reasonable efforts to engage small and micro businesses in subcontract work supporting Visa agreements.
Mastercard brands its effort supplier inclusion as well. Its published materials describe opportunities for minority-, women-, veteran-owned and small businesses, and its program page points prospective suppliers to the certifying bodies it sources from, including the SBA, NMSDC, WBENC, NaVOBA, and NVBDC. Subcontracting through Mastercard's existing suppliers counts in its program, so its primes have a reason to take your call.
Fiserv, one of the largest US bank-technology and merchant processors, hosts its program on a page now titled Supplier Sourcing. The diversity substance is still explicit: the page lists seven partner organizations it sources through, including NMSDC, WBENC, NGLCC, NaVOBA, Disability:IN, MSDUK, and Minority Supplier Development China. If you hold a certification from one of those bodies, Fiserv's sourcing team can find you through the partner database.
FIS runs a supplier information portal and describes ongoing assessment of suppliers committed to inclusion and diversity. The bigger fact about FIS is structural: in January 2026 it completed its acquisition of Global Payments' Issuer Solutions business and sold its Worldpay stake, while Global Payments closed its purchase of Worldpay. The processor procurement map redrew itself in a single quarter. Consolidation means each portal registration now covers more spend, and it means a contact list from last year is stale.
The PayPal settlement, and what it signals
The sharpest 2026 data point in fintech is not a program page. On May 12, 2026, PayPal settled a Justice Department fair-lending investigation into its 2020 economic opportunity fund, a $530 million commitment directed at Black and underrepresented minority businesses and communities. PayPal admitted no wrongdoing, and the DOJ made no formal finding that it broke the law. Under the settlement it launches a Small Business Initiative that waives processing fees on roughly $1 billion in transactions, about $30 million in waived fees, for veteran-owned businesses and firms in manufacturing, technology, or farming, with annual reporting on the initiative.
Read that as a map of where corporate money is allowed to flow now: race-specific funds are being restructured into sector-based and small-business frames, while certification-driven procurement, the kind that runs on NMSDC and WBENC databases, keeps operating. For a supplier, the practical conclusion is the same one the bank data supports: the credential and the portal registration are what persist through rebrands.
Which credentials matter on the payments side
NMSDC MBE certification is the working credential across this sector; Fiserv's partner list and Mastercard's program materials both run through it. Initial NMSDC certification costs $270 to $1,700 depending on revenue tier and regional affiliate, with no revenue cap on eligibility. WBENC WBE certification carries equivalent weight, especially in marketing, HR, and professional services categories.
Federal credentials play a narrower role here than in banking. 8(a) certification matters if you sell through payments companies into government programs, and veteran certification has a specific hook: PayPal's settlement-mandated fee waiver names veteran-owned businesses as an eligible class, a reminder that veteran-owned status is one of the few diversity categories gaining rather than losing corporate program coverage.
One designation is unique to this industry. If you operate a lending fintech, community-focused bank, or credit union serving low-income markets, CDFI certification from the Treasury Department's CDFI Fund is a regulatory designation that opens access to the Fund's award programs and to bank partners seeking Community Reinvestment Act credit. It is not a supplier diversity certificate, but for minority-owned financial firms it pairs well with one: MBE status gets you into a corporate pipeline, CDFI status changes what banks can count when they work with you.
Vendor risk is the real gate
Every buyer above will put you through security and compliance review before a contract starts, and this filters out more small firms than competition does. Expect a SOC 2 Type II audit requirement for anything touching cardholder or customer data, plus cybersecurity questionnaires, proof of cyber liability insurance, and business continuity documentation. PCI DSS scope applies the moment you handle card data. A SOC 2 Type II is a five-figure, multi-month project; start it before your first serious procurement conversation, because firms that show up without it in progress get filtered before evaluation begins.
Payment terms are the other cash consideration. Large processors and networks commonly pay on Net 60 or longer, so a firm staffing up for a new contract needs working capital in place before the first invoice clears. Our diversity lending directory tracks lenders with financing programs built for certified diverse businesses.
First steps for a certified firm targeting payments
- Get the certification moving first. NMSDC or WBENC, matched to your ownership. Both feed the databases that Visa, Mastercard, and Fiserv source from, and the process takes months, so it starts before your pipeline does.
- Register in each buyer's pipeline: FIS's supplier information portal, Fiserv via its certifying partner organizations, Visa through its supplier pages, Mastercard through the certifying bodies its program sources from. One afternoon each, with certifications attached.
- Target the primes, not just the logos. Visa's Second-Tier Initiative and Mastercard's subcontracting recognition mean the networks' existing large suppliers carry their own sourcing incentives. A subcontract through a prime is the fastest first dollar in this sector.
- Start SOC 2 before a buyer asks. It is the gate on every data-touching contract in payments.
- Recheck program pages the week you build a target list. Every name in this guide carries a July 24, 2026 verification date; most of these programs have been renamed or restructured since 2024, and the FIS and Global Payments deals redrew the processor map in January 2026.
The payments sector kept its buying machinery through the rollback; it repainted the signs. Certified firms that register where the databases still read certifications, and that clear vendor risk review early, are selling into a market with fewer competitors for the same procurement dollars. For the bank-side picture, the 2026 bank supplier diversity roundup has the program-by-program status.
