Everything your website needs, in one place.
PCI compliance assistance
We help small businesses build the capabilities to reach and hold PCI DSS compliance: the engineering behind it, not just the paperwork.
What's included
Scope assessment
What actually touches cardholder data, and how to shrink that footprint.
We identify exactly what touches cardholder data in your systems, then look for ways to shrink that footprint, since a smaller scope means a lighter compliance burden.
Common questions
Are you a QSA, or can you certify us?
No. We are not a Qualified Security Assessor and do not issue certifications. We do the engineering and documentation work that gets you ready for the SAQ or a QSA assessment.
We use Stripe or another payment provider. Do we still need PCI?
Yes, but usually a much lighter level (SAQ A) if payments are fully outsourced. We help you confirm your scope and meet the version that applies.
How long does it take?
For a small business with outsourced payments, a few weeks. Where cardholder data touches your own systems it is a larger project.
Does this connect to the website work?
Often, yes. Checkout, hosting and logging all sit in scope, so we can do the site and the compliance groundwork together.
Let's talk about
your project.
Tell us what you need and we'll come back with a free audit and a plan, no obligation.
Tell us about your project
Takes about a minute. A person reads every note, no automated replies.