TOPIC: Credit Card PCI Compliance Letter

You have to go through it because you can take a credit card on site or over the phone and enter the information into payfuse or your site manually. Since you have the possibility of being exposed, you have to go through it. Trust me, I wish it wasn't so!

Yeah, I know I do. The frustrating part is answer those SAQ questions. For example, all the SAQ levels assume that you keep a paper copy of the card number. I do not even see the card number let alone keep a paper record, so it makes it hard to answer some of the questions. I keep having to add a comment to the effect that I do not see the data.

You wouldn't happen to know what would be the best SAQ level, would you? They keep suggesting 'A', but that may change when I change some of the info you just gave me.

Dom, sorry to be asking you all these questions, but I emailed TrustWave these questions 3 days ago, and they have yet to send me a response. The webinar was a waste, they didn't even answer the questions, they ended it and said to ask those questions to the Rep. I do not know what Rep.

I don't know what rep they're referring to unless they mean the first national guys. If you don't keep a paper copy of the card you should be able to just mark that down.

I don't know either. So far the questioning does not allow you to answer that you do not keep paper records, all the SAQ levels assume that you keep them.

Strange. I thought previous guys had selected that option.

I have not come across the question where you can answer that you do not keep paper records. It does ask if you keep electronic records. It may also depend on what SAQ level you have to answer. I can not decide what SAQ level I am and I have been waiting 3 days for them to get back to me.

If I used paypal, would I have to do this compliance and pay the fee? I think you said something about using a paypal link.