Complete Your PCI SAQ. Step by Step
Any business that accepts credit or debit cards must file an annual PCI DSS Self-Assessment Questionnaire. We guide you through the entire process, from identifying which form you need to generating your compliance filing package.
Scope Check
Two quick questions to confirm your starting point and flag any factors that change your compliance requirements.
SAQ Type Finder
Answer plain-English questions about how you accept payments. We identify which of the 9 SAQ forms applies to you.
Readiness Check
A simplified version of your SAQ requirements, each question explained in plain language with examples.
Completion Kit
Your personalized remediation plan, evidence checklist, official filing steps, and AoC signing guide.
Takes 10–15 minutes end to end · SAQ type identification included
What is a PCI SAQ?
The Payment Card Industry Data Security Standard (PCI DSS) is a set of security requirements created by the major card brands. Visa, Mastercard, American Express, and Discover, to protect cardholders from fraud and data theft. Compliance is mandatory for any business that accepts card payments, enforced through your merchant agreement with your acquiring bank. The Self-Assessment Questionnaire (SAQ) is how smaller merchants document their compliance annually, without requiring a full external audit by a Qualified Security Assessor (QSA).
Failure to complete your annual SAQ can result in monthly non-compliance fees from your payment processor, higher transaction rates, and, in the event of a breach, substantially increased liability and fines from card brands.
This tool is an educational guide based on PCI DSS v4.0.1. It does not constitute legal or compliance advice. Your acquiring bank or payment processor is the authoritative source for your specific SAQ requirements. Complex environments should engage a PCI Qualified Security Assessor (QSA).