How do I complete our PCI screening?

The PCI Apply portal will enable you to fulfill the PCI compliance requirements, which are required by all credit card brands.  

 

You can log in to the PCI Apply portal at www.pciapply.com/pcicompliance


You will work within the PCI Apply portal to complete these steps:

  1. Confirming the merchant information.
  2. Selecting the questionnaire.
  3. Answering the questionnaire.
  4. Completing the network scan.
  5. Signing the report.

If you need support, there are options within the PCI Apply portal:

  • Email: support@pciapply.com
  • Phone: (833) 207-8338   

Click ‘Resources’ within the PCI Apply portal for access to:

  • Documents
  • Education
  • FAQs
  • Glossary 

Before you get started  



Please ensure that the information provided is specific to how your business connects to Worldline. 


For example, if you accept payments through other channels or providers, do not provide information related to these methods. 





Ensure that the information listed in this section is correct. 


Is your organization a service provider as defined by the PCI Council (e.g., hosting providers, payment processors, managed service providers)? The answer is likely No. 





Indicate all payment channels used by the business that are included in this assessment:

  • Mail order/telephone order (MOTO)
  • E-commerce
  • Card-present

The answer is likely E-Commerce. 








Do you electronically store or transmit consumer account data? The answer is likely No.  



Are any payment channels not included in this assessment? The answer is likely No. Click ‘Save.’ 




Do you have relationships with third-party service providers that handle your account data, such as payment gateways or processors? The answer is likely Yes.  



Do you engage with third-party service providers managing system components within your PCI DSS assessment scope? The answer is likely Yes.  



Do you work with third-party service providers that could impact the security of your Cardholder Data Environment? The answer is likely Yes.  



Enter the Service Provider. The Service Provider is likely Bambora Inc. The description is likely Payment Gateway. Click ‘Save.’ 









What solution do you use to process credit cards? 

  • Moto/E-commerce
  • Terminal
  • Mobile Processing
  • Standalone Computer
  • Integrated Network 
  • P2PE
  • SPoC 

The answer is likely Moto/E-commerce.  







Do you store sensitive cardholder data electronically? The answer is likely No.  



Does your business use network segmentation to affect the scope of your PCI DSS environment? The answer is likely No.  



How do you process payments?

  • Integrated Payment
  • Java Script/Direct Post
  • Hosted Payment and iFrame
  • Dial Pay 

The answer is likely Hosted Payment and iFrame. 





Does your website use either a redirection mechanism or an embedded payment form? The answer is likely Yes.  





Please add your Moto/E-Commerce solution information. Click ‘Add Solutions.’ Enter the Service Provider. The Service Provider is likely Bambora Inc. A default service name will display. Click ‘Save.’ 






Click ‘Save & Continue.’  





If you are unsure how to answer any of the above sections, click ‘Select Questionnaire Manually.’ 




Merchant Information

Part 1 Merchant Information

Part 2 Merchant Business Payment Channels

Part 3 Relationships

Part 4 Processing Solution

Questionnaire Selection

The questionnaire is likely A.


Confirm your eligibility to take the questionnaire.  



  • Click ‘Resources,’ then click ‘Documents.’ You will see a list of PCI DSS 4.0 SAQ Guides. Click ‘Download’ to download the Merchant Guide to SAQ A. 


Please follow the Merchant Guide to SAQ A to assist in answering the questionnaire. 


The questionnaire will present you with a variety of prompts. The options for each prompt are as follows:

  • In Place
  • In Place with CCW (Compensating Controls Worksheet) 
  • Not in Place 
  • Not Applicable 

Please ensure that the information provided is specific to how your business connects to Worldline. 



This section will require you to complete a network scan.

  • Please note: the network scan can take several days.

Once the scan is complete, you will submit your AVS Compliance. 

  • Please note: the review can take several days. 



Review the progress reports and sign the documentation.  

Good to know:

Questionnaire

Network Scan 

Review Sign