PCI at a high level
PCI DSS (Payment Card Industry Data Security Standard) is the security framework card brands expect merchants and service providers to follow when cardholder data is stored, processed, or transmitted. Most small merchants complete an annual self-assessment questionnaire (SAQ) appropriate to how they accept cards, keep equipment and software in supported states, and avoid storing prohibited data (like full track data or CVV after authorization).
Merchant Services America provides education, not a substitute for a Qualified Security Assessor when one is required. Your exact SAQ type depends on your acceptance channels.
Encryption themes
Without naming unverified partner products, merchants commonly reduce exposure by:
- Using terminals and gateways that encrypt card data early in the path
- Avoiding email or chat for full card numbers
- Limiting who can see reports with sensitive fields
- Keeping POS software updated
- Segmenting networks so guest Wi-Fi is not sitting on the same trust level as payment devices
Named partner encryption product claims from legacy CDX content are not republished until a current, verified offer exists.
No unverified product partner claims
If a security add-on is available later under a verified partnership, it will be described accurately then. Until that day, ask practical questions through get a quote or read the companion guide payment security basics for small businesses. Also see FAQ and core merchant accounts.
Common questions
Do you sell a named encryption product on this page?
No unverified partner product is claimed here. Ask us what is currently available.
Does every merchant need a full on-site PCI audit?
Most small merchants use an SAQ path. Higher-volume or complex environments may need more. We do not invent assessment levels for you on a public page.
Where should staff start?
Habits matter: payment security basics.
Does a merchant account include security automatically?
Accounts come with obligations. Tools and practices still matter—see this page and the FAQ.
How do I ask security questions?
Ask via quote or contact.