Card-present (face-to-face) Card-present (face-to-face) [If your OST-approved 3rd party vendor IP-connected POS device is being used in compliance with PCI SAQ C requirements, you should only be taking transactions via Card-present or MOTO.] Note: If your organization has a payment channel or process that is not covered by this SAQ, consult your acquirer or payment about validation for the other channels. Part 2b. Description of Payment Card Business How and in what capacity does your business [Fill out per your OST-approved 3rd party store, process and/or transmit cardholder data? vendor.] Part 2c. Locations List types of facilities and a summary of locations (for example, retail outlets, corporate offices, data centers, call centers, etc.) included in the PCI DSS review. Number of facilities of Type of facility this type Location(s) of facility (city, country) Example: Retail outlets 3 Boston, MA, USA Part 2d. Payment Application Does the organization use one or more Payment Applications? Yes No [Yes] Provide the following information regarding the Payment Applications your organization uses: Payment Application Name Version Application Is application PA-DSS Listing Expiry date Number Vendor PA-DSS Listed? (if applicable) [Fill Yes No out per [Fill out [Fill out per your [Fill out per your your per your [Fill out per your OST-approved 3rd party OST-approved 3rd 3rd OST-approved 3rd vendor.] party vendor.] 3rd party party vendor.] party vendor.] vendor.] Yes No Yes No Yes No Yes No Part 2e. Description of Environment
Card-present (face-to-face) Card-present (face-to-face) [If your OST-approved 3rd party vendor IP-connected POS device is being used in compliance with PCI SAQ C requirements, you should only be taking transactions via Card-present or MOTO.] Note: If your organization has a payment channel or process that is not covered by this SAQ, consult your acquirer or payment about validation for the other channels. Part 2b. Description of Payment Card Business How and in what capacity does your business store, process and/or transmit cardholder data? [Fill out per your OST-approved 3rd party vendor.] Part 2c. Locations List types of facilities and a summary of locations (for example, retail outlets, corporate offices, data centers, call centers, etc.) included in the PCI DSS review. Type of facility Number of facilities of this type Location(s) of facility (city, country) Example: Retail outlets 3 Boston, MA, USA Part 2d. Payment Application Does the organization use one or more Payment Applications? [Yes] Yes No Provide the following information regarding the Payment Applications your organization uses: Payment Application Name Version Number Application Vendor Is application PA-DSS Listed? PA-DSS Listing Expiry date (if applicable) [Fill out per your OST-approved 3rd party vendor.] [Fill out per your 3rd party vendor.] [Fill out per your 3rd party vendor.] Yes No [Fill out per your OST-approved 3rd party vendor.] [Fill out per your OST-approved 3rd party vendor.] Yes No Yes No Yes No Yes No Part 2e. Description of Environment
saq_c_v3_1_instr.docx