Who renders the fields your customer types the card into?
This is the question your assessor asks first, because it decides whether the card number ever reaches a system you are responsible for.
Your answers so far
- Where does the payment happen?
- Online, or over the phone. Change
Choose one
What to build
What this means for PCI
This is guidance rather than a compliance determination. Which questionnaire you are eligible for depends on your full environment, so confirm it with your QSA or your acquirer before you rely on it.