Guide
PCI SAQ B for stores with imprint machines or dial-out terminals
PCI SAQ B is a short questionnaire for merchants using only imprint machines or standalone terminals that dial out over a phone line. So it fits a narrow but still common setup.
- We prepare, a QSA assesses
- Published price ranges
- Written estimate, no call
Who qualifies for PCI SAQ B
The conditions focus on how the terminal connects. The form is in the PCI SSC document library.
- Only imprint machines or standalone dial-out terminals
- Terminals are not connected to other systems
- No electronic storage of card data
- Any paper with card data is protected
SAQ B compared with SAQ B-IP
Many modern terminals connect over the internet rather than a phone line. Therefore they usually need SAQ B-IP instead.
| SAQ B | SAQ B-IP | |
|---|---|---|
| Connection | Dial-out phone line or imprint. | IP, such as broadband. |
| Terminals | Standalone. | Standalone, approved models. |
| Length | Short. | Somewhat longer. |
PCI SAQ B eligibility check
Tick each true statement. All should be true for SAQ B.
Your result appears here as you tick, so you can see what is still open.
What PCI SAQ B asks
Questions focus on protecting paper records, restricting access and handling incidents. Also, you must keep policies that staff follow, because people are the main risk in this setup.
In practice that means locked storage for any paper with card numbers, and a clear rule on who may handle it.
Habits that push a store out of PCI SAQ B
Writing card numbers on paper for later entry, or keying them into a computer, changes your form. So check daily practice, not just the equipment list.
Our role with PCI SAQ B
We confirm eligibility and help you complete the form honestly. However, your executive signs it, since we are not a QSA.
Also train staff once a year on card handling, and keep a record of the session. It is a small task, but it answers several questions on the form and reduces real risk at the counter.
PCI SAQ B questions
Does a broadband terminal qualify for PCI SAQ B?
Usually not. IP-connected terminals generally use SAQ B-IP.
Do we need scans with SAQ B?
Typically not for dial-out setups, but confirm with your acquirer.
Is PCI SAQ B still common?
Less than before, as terminals move to IP, but it still applies to some stores.
Who signs it?
Your executive.
Related guides
Confirm the right form for your terminals
Tell us your terminal models and how they connect. We confirm the form and reply with a written estimate if needed.
Get my written estimate