Paytia Puts All Nine PCI Self-Assessment Questionnaires in Your Pocket

24 July 2026

Product LaunchPCI ComplianceSAQPaytia ComplyFree Tools

Paytia Comply puts all nine PCI DSS Self-Assessment Questionnaires on your phone — the official questions word for word, with plain-English explanations, photo evidence captured on the device, and a clean PDF export for your acquirer or QSA. It's free on iPhone, iPad, Mac and Android, and it's joined by a free Chrome extension for the desk-bound half of the job.

Paytia Comply app showing a PCI DSS requirement with the official question, a plain-English explanation, and photo evidence attached to the requirement
Photograph evidence straight into the PDF — the photos never leave your device.

Every business that takes card payments works through a PCI DSS Self-Assessment Questionnaire once a year. The questions are set by the PCI Security Standards Council and they have to be answered as written. What nobody had fixed is where you're expected to answer them — at a desk, on a laptop, while the things the questionnaire is asking about sit in another room.

Comply moves the questionnaire to the phone in your pocket. All nine SAQ types — A, A-EP, B, B-IP, C, C-VT, D for Merchants, D for Service Providers and P2PE — and 966 real PCI DSS v4.0.1 requirements, one at a time, answered where the evidence actually is. Pick your questionnaire, or tap “Help me choose” and answer a few questions about how you take payments.

The question stays the question

Open any requirement and the official PCI SSC wording is there under a heading that says, plainly, “The question”. It isn't paraphrased or trimmed — a reworded SAQ isn't an SAQ, and we haven't touched them. What Comply adds is everything around it: what the requirement actually means, and what evidence you'll need to satisfy it — the documentation to examine, the personnel to interview, the settings to check.

The camera does the filing

Plenty of requirements want proof rather than a tick — the server room lock, the terminal setup, the visitor log. Collecting that has always been a chore: photograph it, email it to yourself, download it, rename it, then work out which requirement it belonged to. Comply cuts that out. You're standing in front of the thing the question is about, so you tap Take photo and it attaches to that requirement. The photos stay on your device, and when you're finished everything goes into a clean PDF you export or email for your acquirer or QSA.

A pocket reference for the browser, too

Not every PCI question comes up in a server room. Plenty arrive at a desk — usually as “which SAQ even applies to us?” or an acronym in an acquirer's email. For those we also publish a free Chrome extension, PCI SAQ Pocket Reference. It sits in your browser toolbar with an eight-question decision guide that lands you on the right SAQ, a plain-English glossary of fifteen PCI terms, and links through to our free checklists for SAQ A, A-EP, B and D. It works offline, asks for no permissions, carries no tracking, and the source code is open under an MIT licence.

The two tools split the job the way the job actually splits: the extension answers the questions that come up at a desk, and the app is where you complete the questionnaire — standing in front of the evidence.

And for anyone starting from “which SAQ even applies to us?”, there's a third way in: a free instant SAQ checker on our site — eight questions, answered in your browser, nothing collected.

“An SAQ isn't something you're allowed to simplify. The questions are the questions — reword them and you haven't filled one in. What nobody had asked is where you're supposed to be standing when you answer them. It's never at a desk. It's in the room with the card terminal, or the cabinet, or the visitor log. So we put the questionnaire on the phone, let the camera do the filing, and kept the photos on the device where they belong.” — Curtis Nash, CEO, Paytia

What it doesn't do

Comply is a checklist and an evidence-capture tool. It isn't legal or compliance advice, and your acquirer has the final say. It won't certify anyone as PCI compliant — that takes an attestation from a QSA, or for SAQ-eligible merchants a self-attestation the business signs off. What it does is take the questionnaire off the laptop and put it where the evidence is.

Availability

Paytia Comply is a free download with no in-app purchase: Apple App Store (iPhone, iPad, Apple Silicon Mac and Apple Vision Pro — iOS 15.0 or later) and Google Play (Android phones and tablets, UK and US). The Chrome extension is free on the Chrome Web Store. More at paytia.com/comply and on our free tools page.

More News