What a PCI SAQ-A means for your practice
The self-assessment questionnaire explained for the person who has to fill it in.
The questionnaire
Merchants confirm their card security each year through a self-assessment questionnaire. Which questionnaire applies depends on how card data flows through the business. The more the practice touches card data, the longer and more demanding the questionnaire.
The A category
SAQ-A is the shortest. It applies when all card data entry is handled by a validated third party and the practice's own systems never store, process or transmit card numbers. That is the position Medipay is built for: patients and staff type cards into fields served by our PCI DSS certified payment partners, never into anything the practice runs.
What that means day to day
- No card numbers written down, stored or emailed anywhere in the practice
- Phone payments keyed straight into the virtual terminal
- Card machines from Medipay, connected through the portal rather than through the practice's own network stack
- A short annual questionnaire rather than a long one
What is still yours
The practice remains responsible for how its staff behave and for keeping card data out of its own systems. Medipay makes the compliant path the easy one; it does not remove the need to follow it.
Get your practice on Medipay
Tell us about your practice and we will have you taking payments in days.