All merchants are required to comply with the Payment Card Industry (PCI) Data Security Standard (DSS). This worldwide information security standard is designed to help prevent credit card fraud by providing guidelines and controls around card data management.
You will need to submit your SAQ forms to confirm your adherence with PCI security standards. BlueSnap has partnered with SecurityMetrics to assist merchants in completing the correct SAQ.
Your API implementation determines the SAQ compliance level you must follow, as shown below:
- Hosted Payment Fields: SAQ A
- Client-Side Encryption: SAQ A-EP
- Virtual Terminal: SAQ C-VT
- Unencrypted Data: SAQ D
SAQ Coverage
If you're certified for SAQ D, you are automatically covered for all other SAQ levels.
If you're not certified for SAQ D, you must submit separate SAQ forms for each BlueSnap solution you want to use.