NScope Advantage logo
PCI Compliance Services

PCI SAQ Assistance: Complete. Accurate. Evidenced.

Choosing the wrong SAQ type is the most common — and most costly — PCI compliance mistake. We determine the correct questionnaire for your payment architecture, complete every question accurately, and produce supporting evidence for every control you attest to.

Which SAQ Applies to You?

SAQ type is determined by your payment acceptance method and architecture. Selecting the wrong type invalidates your compliance submission.

SAQ A

Card-not-present merchants that fully outsource payment processing to PCI DSS compliant third parties.

22 requirements
SAQ A-EP

eCommerce merchants with a payment page partially or fully hosted on their own systems.

191 requirements
SAQ B

Merchants using imprint machines or standalone dial-out payment terminals only.

41 requirements
SAQ B-IP

Merchants using PTS-listed IP-connected payment terminals with an approved payment application.

83 requirements
SAQ C

Merchants with payment applications connected to the internet; no electronic cardholder data storage.

160 requirements
SAQ D (Merchant)

Merchants that don't qualify for a simpler SAQ type — including those storing cardholder data.

329 requirements
SAQ D (Service Provider)

Service providers eligible to complete an SAQ instead of a full ROC.

329 requirements

Not sure which applies to you? Contact us — we determine the correct SAQ type as part of every engagement.

Our SAQ Assistance Process

01

SAQ Type Determination

We review your payment architecture — how you accept cards, what systems are involved, and your third-party processor relationship — to confirm the correct SAQ type.

02

Question-by-Question Review

We walk through every question in the applicable SAQ with your team, mapping each answer to your actual controls and flagging anything that requires remediation before completion.

03

Evidence Collection

For every 'Yes' answer, we identify and collect the supporting evidence — configuration screenshots, policy documents, access logs, scan reports — that validates the attestation.

04

SAQ Completion

We complete the SAQ accurately and prepare the Attestation of Compliance (AOC) for signature by your authorised representative.

05

Submission Support

We prepare the submission package for your acquirer or card brand programme and assist with any questions during review.

Frequently Asked Questions

Complete Your SAQ With Confidence

Every question answered accurately. Every attestation evidenced. First-time submission.