Part 2f. Third-Party Service Providers Does your company use a Qualified Integrator & Reseller (QIR)? Yes No If Yes: Name of QIR Company: QIR Individual Name: Description of services provided by QIR: Does your company share cardholder data with any third-party service providers (for Yes No example, Qualified Integrator & Resellers (QIR), gateways, payment processors, payment service providers (PSP), web-hosting companies, airline booking agents, loyalty program agents, etc.)? If Yes: Name of service provider: Description of services provided: Note: Requirement 12.8 applies to all entities in this list. Part 2g. Eligibility to Complete SAQ B-IP Merchant certifies eligibility to complete this shortened version of the Self-Assessment Questionnaire because, for this payment channel: Merchant uses only standalone, PTS-approved point-of-interaction (POI) devices (excludes SCRs) connected via IP to merchant’s payment processor to take customers’ payment card information; The standalone IP-connected POI devices are validated to the PTS POI program as listed on the PCI SSC website (excludes SCRs); The standalone IP-connected POI devices are not connected to any other systems within the merchant environment (this can be achieved via network segmentation to isolate POI devices from other systems); The only transmission of cardholder data is from the PTS-approved POI devices to the payment processor; The POI device does not rely on any other device (e.g., computer, mobile phone, tablet, etc.) to connect to the payment processor; Merchant does not cardholder data in electronic format ; and If Merchant does store cardholder data, such data is only paper reports or copies of paper receipts and is not received electronically.
Part 2f. Third-Party Service Providers Does your company use a Qualified Integrator & Reseller (QIR)? If Yes: Name of QIR Company: QIR Individual Name: Description of services provided by QIR: Yes No Does your company share cardholder data with any third-party service providers (for example, Qualified Integrator & Resellers (QIR), gateways, payment processors, payment service providers (PSP), web-hosting companies, airline booking agents, loyalty program agents, etc.)? Yes No If Yes: Name of service provider: Description of services provided: Note: Requirement 12.8 applies to all entities in this list. Part 2g. Eligibility to Complete SAQ B-IP Merchant certifies eligibility to complete this shortened version of the Self-Assessment Questionnaire because, for this payment channel: Merchant uses only standalone, PTS-approved point-of-interaction (POI) devices (excludes SCRs) connected via IP to merchant’s payment processor to take customers’ payment card information; The standalone IP-connected POI devices are validated to the PTS POI program as listed on the PCI SSC website (excludes SCRs); The standalone IP-connected POI devices are not connected to any other systems within the merchant environment (this can be achieved via network segmentation to isolate POI devices from other systems); The only transmission of cardholder data is from the PTS-approved POI devices to the payment processor; The POI device does not rely on any other device (e.g., computer, mobile phone, tablet, etc.) to connect to the payment processor; Merchant does not cardholder data in electronic format ; and If Merchant does store cardholder data, such data is only paper reports or copies of paper receipts and is not received electronically.
SAQ_B-IP.docx