SAQ B-IP
PCIComplianceHubLast updated
The Self-Assessment Questionnaire for merchants using standalone, PTS-approved payment terminals with an IP connection to the processor, storing no account data electronically. The IP connectivity is what separates it from SAQ B and brings network security requirements into scope.
Applies to. Card-present or mail and telephone order merchants using only standalone, PCI-listed PTS point-of-interaction devices connected to the processor over IP, with no electronic storage of account data. Devices classed as secure card readers (SCR or SCRP) are not eligible.
Limits. Other IP-connected PTS devices may share the network zone, but the devices must be isolated from every other type of system, and a device that relies on a computer, phone or tablet to reach the processor breaks eligibility. The only permitted transmission of account data is from the device to the processor. Not for e-commerce channels.