About this quiz. PCI DSS compliance is formally established through the Self-Assessment Questionnaire (SAQ) that matches how you accept payments, plus any scans your acquiring bank requires, this short quiz is a readiness check, not the SAQ itself and not a compliance determination. The single biggest factor is whether card data ever touches your own systems: fully outsourced/hosted payments keep you in the smallest scope. Everything here runs in your browser and is not saved. Confirm your exact requirements with your payment provider or acquiring bank.
// What this means for your business
Stay in the smallest scope you can
The cheapest PCI programme is the one where card data never touches your systems, and the controls around it are simple and well run. We help Canadian merchants keep payments out of scope, close the gaps above, and handle the yearly paperwork so it is not a scramble.