SAQ C
PCIComplianceHubLast updated
The Self-Assessment Questionnaire for merchants with a payment application system connected to the internet, where the application is not on the same system as any other system holding account data, and no account data is stored electronically. It is one of the longer merchant questionnaires because the payment application and its network are fully in scope.
Applies to. Card-present or mail and telephone order merchants with a payment application system, such as a point-of-sale system, connected to the internet, storing no account data electronically. Single store only.
Limits. The payment application systems must not connect to other systems in the merchant environment, and the location must not connect to other premises. Not for e-commerce channels.