SAQ SPoC
PCIComplianceHubLast updated
The Self-Assessment Questionnaire for merchants accepting payments through a commercial off-the-shelf mobile device paired with a secure card reader as part of a PCI SSC listed Software-based PIN entry on COTS solution, storing no account data electronically.
Applies to. Merchants taking attended card-present payments on a commercial off-the-shelf phone or tablet paired with a secure card reader from a solution on the Council's SPoC list, with no access to clear-text account data and no electronic storage.
Limits. New for v4.x. Not for unattended card-present, mail and telephone order or e-commerce channels, and not for service providers. The solution, not the reader alone, must be listed.