Smaller merchants usually prove PCI compliance with a Self-Assessment Questionnaire. Accel PCI guides you through it in six steps, pre-fills what it can and tells you exactly what to do next.
Why it applies to most businesses
- Most small and mid-size merchants qualify for a self-assessment rather than a full audit.
- The questionnaire is long and technical; most merchants do not know which one applies.
- Your acquirer still expects it every year.
Who will ask you for it
- Your acquirerAsks for a completed questionnaire and Attestation of Compliance.
- Your payment provider or platformMay require proof before activation.
- Franchisors and head officesAsk each location to validate.
- 01
Sign up
Answer a few questions about how you take payments.
- 02
Get the right questionnaire
Accel identifies the SAQ that applies and pre-fills it.
- 03
Follow the to-do list
Clear tasks with experts on call when you need them.
- 04
Download your certificate
Submit and download the attestation for your acquirer.
What you can hand to them
Click a document to see a sample. All sample documents
- Completed Self-Assessment Questionnaire
- Attestation of Compliance
- Compliance certificate
- Reminders before renewal
Built and backed by the QSAs at Ubitrak, so the guidance matches what an assessor would ask.
Start
One-hour onboarding
A customer success expert sets up your account with you and answers your first questions.
Questionnaire
The right SAQ, pre-filled
Accel PCI identifies your questionnaire (A, A-EP, B, B-IP, C, C-VT or D) and pre-fills it with the Attestation of Compliance.
Track
Dashboard and to-do list
A personal PCI dashboard shows what is done and what is next.
Documents
Policy templates
Policy and procedure templates and PCI DSS training material for your team.
Add-ons
Scans and training
ASV scans for your website or IP addresses, and secure coding training for developers.
Groups
For associations and acquirers
Member programs, referral codes and white-label options for groups of merchants. See partner programs →
Frameworks
Delivered by
Commonly bundled with
- Security testingPenetration tests and scans.
- Privacy and security programLaw 25 and governance with Accel GRC.
Related insights
AI in the payment environment: what the PCI SSC’s new AI guidance means for your scope
The PCI SSC published Security Considerations for AI Systems on 2026-09-15. AI is scoped like any other technology. Where chatbots, agents and shadow AI…
Read the insight →Phishing and ransomware: the PCI DSS 4.x controls that actually help
Ransomware is the top cybercrime threat to Canadian critical infrastructure and phishing remains a leading way in. Five PCI DSS 4.x requirements that reduce…
Read the insight →You can’t lose what you don’t keep: reducing PCI scope by not storing card data
The most effective PCI DSS control is often the data you never hold. How hosted payment pages, tokenization and segmentation shrink your cardholder data…
Read the insight →