PCI compliance for small business
Stop paying PCI non-compliance fees.
If your statement shows a monthly "PCI non-compliance" charge, you're paying a penalty for paperwork. We complete your Self-Assessment Questionnaire, coordinate any required scans, and keep you compliant every year, so that fee comes off your statement.
What is a PCI non-compliance fee?
Every business that accepts cards is expected to follow the Payment Card Industry Data Security Standard (PCI DSS) and confirm it once a year, usually by completing a Self-Assessment Questionnaire (SAQ). When that confirmation isn't on file, many processors add a monthly non-compliance fee, often $20 to $40 a month, until it is.
The fix is usually not a security overhaul. For most small merchants it's picking the right SAQ, answering it correctly, and running quarterly network scans if your setup requires them.
How it works
- 1
Check out
Pay the one-time $99 fee through our secure Square checkout.
- 2
Tell us how you take cards
Right after checkout you land on a secure page to tell us how you accept cards: terminal, POS, online or phone. That decides which SAQ you need.
- 3
We handle the rest
We complete and submit your SAQ, set up any required scans, and track your annual renewal.
Signs you need this
- A "PCI non-compliance," "PCI penalty" or similar charge on your statement
- Emails or letters from your processor about PCI validation
- You don't know which SAQ applies to you, or whether you need quarterly scans
- You've switched equipment or processors and never re-validated
Our savings guarantee
If getting compliant doesn't save you more than the $99 fee over a year, you pay nothing. That's how confident we are that the numbers are on your side.
Questions
Is PCI compliance required for small businesses?
Yes. The card brands require every merchant that accepts cards to comply with PCI DSS, regardless of size. Most small businesses validate with a Self-Assessment Questionnaire once a year.
Which SAQ do I need?
It depends on how you accept cards, for example a standalone terminal, an integrated POS, or an online checkout. Identifying the right one is the first thing we do.
Do I need quarterly vulnerability scans?
Some setups require quarterly external scans by an approved scanning vendor; many terminal-only merchants don't. We'll tell you which applies and coordinate the scans if needed.
How is the $99 guarantee applied?
If getting compliant doesn't save you more than $99 a year in non-compliance fees, you pay nothing.
More ways we can help
Not ready to buy? Check your effective rate free with our calculator.