Contact us

Small Merchant PCI SAQ Helper

A plain-English guide for small merchants who were told to “complete your PCI questionnaire” and do not know where to start.

Buy the PCI SAQ Helper ($149)

Your processor wants a PCI SAQ. Here is how to pick the right one and finish it.

There are nine different SAQ types for merchants, and picking the wrong one is the most common small merchant mistake. A website that hosts its own payment form does not qualify for the short SAQ A. A virtual terminal on an office PC changes your answers. Card numbers written on paper or sitting in email change everything.

This kit walks you through how you take cards, which SAQ fits each channel, what evidence and policies you need, and how to fill in and sign the official forms.

What is inside

  • Start Here guide: what to gather before you begin
  • SAQ Guide: what PCI DSS asks of small merchants, each SAQ type in plain English, a step-by-step selection walkthrough, the most common mistakes, service provider AOCs, ASV scans, and how to complete and sign the AOC
  • SAQ Selection Worksheet: list every payment channel and work out the likely SAQ, then record your acquirer’s confirmation
  • Cardholder Data Flow Worksheet: where card data enters, travels and (ideally never) gets stored, plus your service provider list
  • Evidence and Policy Checklist: what to have ready for the common small merchant SAQs
  • Annual Compliance Calendar: the recurring tasks, month by month

Every document comes as an editable Word file and as a PDF.

Important

This kit is guidance only. It is not a PCI assessment and Core-Infosec is not a Qualified Security Assessor (QSA) company. Your acquirer or payment processor decides which SAQ applies to you. Always complete the current official SAQ and AOC from the PCI Security Standards Council.

Who it is for

Shops, restaurants, e-commerce stores, service businesses and nonprofits that accept cards and were asked by their bank or processor to validate PCI DSS compliance with an SAQ.

$149, one-time purchase. Instant download after payment.

Buy the PCI SAQ Helper ($149)

FAQ

Does this include the SAQ form? No. The official forms are free from the PCI Security Standards Council, and you must use their current versions. This kit helps you pick the right one and complete it.

Does buying this make me PCI compliant? No product can do that. Compliance comes from the controls you have in place and the attestation you sign.

Do you offer scans or testing? Core-Infosec provides PCI scoping help and penetration testing.

What if it is not what I expected? Email us through the contact page within 14 days and we will refund you.