How do we determine your Self-Assessment Questionnaire (SAQ) type and what each one means?
Merchants who have outsourced all account data functions to PCI DSS compliant third parties.
Merchants who partially outsource e-commerce payment channels to PCI DSS compliant third parties.
Merchants who use imprint-only, or standalone, dial-out terminals.
Merchants who manually enter account data from an isolated computing device into an Internet-based virtual payment terminal connected via IP.
Merchants with point-of-sale (POS) systems or other payment application systems connected to the internet.
Merchants who only process account data via payment terminals from a validated PCI-listed Point to Point Encryption (P2PE) solution.
Account data processed only using a validated PCI-listed Software-based PIN Entry on COTS (SPoC) Solution.
Merchants applies to all other self-assessment eligible merchants not meeting the criteria for any other SAQ type.
