Knowledge center

Do I need a PCI DSS certificate?

Certificate is often used as a general name. The expected document may instead be an SAQ, AOC, ASV report or another validation.

Why it matters

Sending a different document can delay the process.

What to confirm

• Exact document name
• Who must receive it
• Required signature or review

Official PCI DSS documentation · PCI DSS v4.0.1 · reviewed 2026-07-29

This content is informational and is not legal advice. The applicable route and validation method depend on the operation and requesting party.