Knowledgebase

Card-not-present (e-commerce or mail/telephone-order) merchants, all cardholder data functions outsourced. This would never apply to face-to-face merchants.

Imprint-only merchants with no electronic cardholder data storage

Stand-alone terminal merchants, no electronic cardholder data storage

Merchants with POS systems connected to the Internet, no electronic cardholder data storage

All other merchants (not included in Types 1-4 above) and all service providers defined by a payment brand as eligible to complete an SAQ.