Knowledge center

Which SAQs exist?

PCI SSC publishes SAQ A, A-EP, B, B-IP, C-VT, C, P2PE, SPoC and D for merchants, plus SAQ D for service providers. Eligibility—not convenience—determines the route.

Why it matters

Each SAQ assumes a particular payment setup and scope.

What to confirm

Payment channels
Terminals, mobile devices, websites and third parties
Merchant or service-provider role

Official PCI DSS documentation · PCI DSS v4.0.1 · reviewed 2026-07-29

This content is informational and is not legal advice. The applicable route and validation method depend on the operation and requesting party.

Explore your likely route Back to all questions