4 ms·
At volume you can no longer self-certify to be PCI SAQ-D. There are limits based on transaction count or volume.
by jabart 2y ago
At volume you can no longer self-certify to be PCI SAQ-D. There are limits based on transaction count or volume.
- bdcravens 2y agoMakes sense. What are those volume limits like? I suspect the lion's share of companies like Stripe are those under those limits (since the largest companies are willing to trade simplicity for better rates) edit: according to a quick search, it looks like it's 6M transactions/year to require an audit vs self-assessment