PCI compliance assistance
We help small businesses build the capabilities to reach and hold PCI DSS compliance — the engineering behind it, not just the paperwork.
If you take card payments, you are on the hook for PCI DSS. For a small business without a dedicated security team, the requirements can feel opaque — network segmentation, access control, logging, secure development, evidence.
We built Saqwise on payment-grade infrastructure, and we help other businesses build the same foundations: the controls, the documentation, and the engineering work that makes an audit pass instead of a scramble.
What's included
Scope assessment
What actually touches cardholder data, and how to shrink that footprint.
Gap analysis
Where you are against the relevant SAQ, in plain terms.
Infrastructure hardening
Segmentation, access control, encryption in transit and at rest, key handling.
Logging & monitoring
Centralised logs, alerting and retention that satisfy the requirements.
Secure development practices
Code review, dependency management, and a change process you can evidence.
Documentation & evidence
Policies, diagrams and the artefacts an assessor asks for.
What you get out of it
- A clear picture of your PCI scope and gaps
- Infrastructure that meets the technical controls
- Logs and evidence ready before the assessment
- A repeatable process, not a one-off panic
Common questions
Are you a QSA / can you certify us?
No — we are not a Qualified Security Assessor and do not issue certifications. We do the engineering and documentation work that gets you ready for the SAQ or a QSA assessment.
We use Stripe / a payment provider — do we still need PCI?
Yes, but usually a much lighter level (SAQ A) if payments are fully outsourced. We help you confirm your scope and meet the version that applies.
How long does it take?
For a small business with outsourced payments, a few weeks. Where cardholder data touches your own systems it is a larger project.
Does this connect to the website work?
Often, yes — checkout, hosting and logging all sit in scope. We can do the site and the compliance groundwork together.
Let's talk about your project
Tell us what you need and we'll come back with a free audit and a plan — no obligation.
or see all services · about Code Mutual