Definition

SAQ

A SAQ, or Self-Assessment Questionnaire, is the tool smaller merchants use to document their PCI DSS compliance without a full onsite audit. The Payment Card Industry publishes several versions, each tailored to how a business accepts cards, from fully outsourced e-commerce to in-person terminals. You pick the SAQ that matches your setup, answer its yes-or-no questions honestly, and attest that the relevant requirements are met. The right questionnaire can cut the applicable controls dramatically, which is why the choice matters. A SAQ suits lower transaction volumes; higher-volume merchants generally move to a Report on Compliance signed by a qualified assessor.