PCI DSS Compliance Levels Explained: Which One Applies to Your Business?
PCI DSS (Payment Card Industry Data Security Standard) compliance is tiered into four levels based on the number of card transactions your business processes annually. Understanding your level is the first step to knowing exactly what’s required.
The Four PCI Compliance Levels
- Level 1: Over 6 million transactions/year — requires annual on-site audit by a Qualified Security Assessor (QSA)
- Level 2: 1-6 million transactions/year — annual Self-Assessment Questionnaire (SAQ) plus quarterly network scans
- Level 3: 20,000-1 million e-commerce transactions/year — annual SAQ plus quarterly scans
- Level 4: Under 20,000 e-commerce or up to 1 million total transactions/year — annual SAQ, quarterly scans recommended
Most small and mid-sized businesses fall into Level 3 or 4. Vivant’s PCI compliance service is designed for Levels 3 and 4, making compliance straightforward and affordable. Learn more.
