PCI Compliance Validation Service

Yes, every business accepting, transmitting, processing and/or storing card information needs to be PCI compliant. 

Providing you use ClearAccept for all your payment processing, and depending on your annual processing volume, ClearAccept handles much of the compliance burden, greatly reduces your risk exposure and reduces your effort to validate compliance, however the following are requirements for all Merchants:  

• Completing an annual SAQ based on the methods of payment integration.
• Conducting quarterly network scans by an Approved Scan Vendor (ASV). 
• Implementing appropriate security measures to protect cardholder data.
• Ensuring that all employees are trained in PCI compliance and understand their responsibilities. 
• Reporting any security breaches to the appropriate parties in a timely manner. 

Failure to comply with PCI DSS standards can result in fines, increased transaction fees, and reputational damage. In some cases, non-compliance can even lead to the suspension or termination of your account with your payment processor.  

You’ll get access to our portal, which allows you to attest your compliance by completing the correct SAQ and uploading your ASV scans.

When you log into our PCI portal, you will be able to answer some initial questions about how you are accepting payments. You will then be presented with only the questions you need to answer in a single journey.  

In order to prepare for the submission of your SAQ, clearly document and map each of your cardholder data flows for each of your payment channels, including any processes that transmit, process or store cardholder information.  In addition, ensure that you have completed the following: 

• Conducting quarterly network scans by an Approved Scan Vendor (ASV). 
• Implementing appropriate security measures to protect cardholder data.
• Ensuring that all employees are trained in PCI compliance and understand their responsibilities.  

Our PCI Compliance Validation Service pricing bundles are:

1 site = £5.99 per month

2 sites = £11.98 per month

3+ sites = £15.99 per month

ECOM sites will only count as 1 site even if you have multiple.

A site refers to each physical address and an ECOM/MOTO account. 

ECOM sites will only count as 1 site even if you have multiple.

Our PCI Compliance Validation Service will guide you on which SAQ’s you need to complete based on your channels, sites and processing setup.

Whilst ClearAccept are a PCI DSS Level 1 Service Provider, we are not QSAs and as such we can’t provide advice or attest your compliance. A list of PCI Qualified Professionals, including QSAs and ASVs can be on the official PCI Security Standards Council website via PCI Qualified Professionals Listings Overview. 

Yes. If you’ve already completed your SAQ in the last 12 months in another portal that’s great – simply upload this same information into your new PCI Compliance Validation Service portal.

You can contact our PCI Compliance Validation Service team directly by calling +44 333 996 1811 or emailing support@worldline-pciportal.com. They are available Monday to Friday 08:00 – 17:00.

As long as the responses you provide cover all of your sites that use ClearAccept and are in scope - then you only need to complete one assessment.

You will need to complete an ASV scan for every site. However, if your network set up means you only have a single exit point for all payment devices you will only need to complete one ASV scan.