PCI compliance means meeting the Payment Card Industry Data Security Standard (PCI DSS), a security framework for businesses that store, process, or transmit cardholder data. This page walks you through the annual tasks required to stay compliant, including your self-assessment questionnaire and any required scans.

Overview

Complete these annual steps to attest to your PCI compliance and avoid non-compliance fees.

1. Verify your merchant information. Confirm your business profile details are accurate and up to date.
2. Complete the PCI DSS self-assessment questionnaire (SAQ). PCI DSS (Payment Card Industry Data Security Standard) requires you to complete this annual questionnaire. The specific questionnaire you need depends on your processing style.
3. Complete an Approved Scanning Vendor (ASV) scan, if required by your SAQ. An ASV is a PCI-approved vendor that performs required external vulnerability scans. Not all questionnaires require a scan — check your SAQ requirements.
4. Review and sign your questionnaire.
   • If your SAQ does not require a scan, sign it as soon as you complete the questionnaire.
   • If your SAQ does require a scan, sign it after your first quarterly ASV compliance request is approved by the ASV team.

Log in to PCI Apply

If this is your first time logging in to PCI Apply, follow these steps to create your credentials and access the portal.

1. Go to pciapply.com/pcicompliance. Your URL may differ, or be a custom domain. Refer to your welcome email for the exact URL.
2. On the Login page, click Start Here under First Time Logging In.
3. Enter your full Merchant Number.
4. Enter the last 4 digits of the Federal Tax ID or SSN on file.
5. Enter your two-character state code.
6. Enter your ZIP/Postal code, then click Continue.
7. In the Update My Profile window, enter your Email Address.
8. Verify your First Name and Last Name.
9. Enter a New Password, then re-enter it to confirm.
10. Select a Security Question and enter your Security Answer.
11. Click Submit to access PCI Apply.