SAQ Definition.

Self-Assessment Questionnaire: the PCI DSS self-assessment form for merchants that are not subject to an on-site audit by a QSA. The applicable type depends on the integration: SAQ A (payment fully outsourced, via redirect or iframe), SAQ A-EP (the merchant’s website can affect the payment flow), and SAQ D (the merchant handles card data, with hundreds of requirements). Choosing a payment architecture is therefore first and foremost a decision about compliance scope.

All 151 glossary terms · All guides