PracticeQ Payments: PCI Compliance Guide

Use the guide below to become PCI compliant so you can process credit card payments with PracticeQ Payments.

What is PCI Compliance?

• The primary purpose of Payment Card Industry (PCI) Data Security Standards (DSS) is to ensure the secure handling and protection of customer credit card data, reducing the risk of data breaches and fraud. 
• To comply with the PCI standards, our processing partner, Stax, has created the PCI Toolkit, which each PQ Pay merchant must complete to attest to their compliance. Within two weeks of your PQ Pay account activation, you will be welcomed to the PCI Toolkit platform. 
• Link to the toolkit: https://stax.pcitoolkit.com/version3/SignIn.aspx
• For more information on PCI Compliance, please see our informational article PracticeQ Payments PCI Compliance.
• This guide will aid you in completing the steps of the toolkit. We urge you to reach out to us at hello@intakeq.com if you have any questions. Additionally, the PCI Support team is available for technical assistance via the toolkit Support tab, or via email at support@pcitoolkit.com. 

About the SAQ (Self-Assessment Questionnaire)

• The first step of the toolkit is a questionnaire that determines the category of card processing your business performs. This questionnaire assigns you an SAQ (self-assessment questionnaire) for Step 2. 
• It is very important that you are assigned to the correct SAQ. If you believe you were categorized incorrectly, reset your SAQ in one of two ways:
  
  • Reach out to the PCI support team via the Support tab of the toolkit and ask them to reset the SAQ for you.
  • Return to where your SAQ Type is listed, along with Step 1 and Step 2, etc. Click your SAQ type and you will be given the option to retake the Step 1 questionnaire to re-assign you. 

Select Your SAQ

• Please click the SAQ that best describes your practice, and then follow the instructions to complete your toolkit. If you belong to multiple categories, choose the option that occurs most often.
  
  • SAQ A - You have clients provide card details online via the portal, forms, invoices, or booking system.
  • SAQ C-VT - You manually enter card details yourself, either in person or over the phone.
  • SAQ B-IP - You use one of our terminals to swipe cards.