Eligibility first
Short questions about how each merchant takes payments point to the SAQ type that fits, before anyone answers a questionnaire.
In development · early access
Every merchant's PCI SAQ, organised in one portal.
CardSecurity is building PCI DSS self-assessment management for MSPs: the right questionnaire for each merchant, tasks and evidence in one place, and a signed pack the merchant can hand to its acquirer.
What's coming
The yearly PCI scramble, turned into a routine.
Questionnaire and tasks
Work through requirements in plain language, assign follow-up tasks and track what's left.
Evidence in one place
Attach scan results, screenshots and documents to the requirement they support.
Policies and providers
Keep the security policy, service provider list and incident register next to the assessment.
Signed packs
The merchant signs; CardSecurity assembles a pack with CSV export, print-to-PDF and read-only share links.
MSP overview
See which merchants are overdue or due soon, and send the same task to all of them at once.
CardSecurity helps merchants run their own self-assessment with their MSP's help. The merchant attests and the acquirer decides. CardSecurity does not certify compliance and is not a QSA.
FAQ
Frequently asked questions
Does CardSecurity certify merchants as PCI compliant?
No. The merchant completes and signs its own self-assessment questionnaire and attestation, and the acquirer decides what it accepts. CardSecurity organises the work, evidence and signatures; it never certifies, validates or states that anyone is compliant.
Which SAQ types will be supported?
SAQ A first, since most small e-commerce merchants on hosted checkout use it, then other SAQ types based on what pilot partners' merchants need.
Can my MSP see all merchants' progress?
Yes. The MSP view lists every organization by standing (overdue, due soon, in progress, self-attested) and can send the same task to many merchants at once. Merchants only see their own program.
When is it available?
It is in development with MSP pilot partners. Request early access and we'll let you know when your merchants can use it.
Ready for card-testing protection while PCI comes together?
Join the CardSecurity pilot for managed service providers. 30-day trial, up to 5 merchants.