Your card processor sent it
That annual form from your card processor — the one with the fee.
If you take cards, your processor sends a Self-Assessment Questionnaire every year. Ignore it and most processors quietly add a monthly non-compliance charge.
What this actually is
PCI DSS is the card industry's security standard, and the SAQ is how small merchants attest to it. Which version you get depends on how you take payments — a counter terminal is a much shorter form than an online checkout.
What happens if you wing it
Skipping it costs real money every month in non-compliance fees. Guessing on it is worse: after a card-data incident, the SAQ you signed is the first document everyone reads.
How Vouchra answers it
From your own documents. With receipts.
Vouchra turns the SAQ's compliance-speak into plain English so you understand what each question is actually asking about your setup.
Answers are drafted from your own policies and practices, cited line by line — including what your processor or POS vendor is responsible for versus what's on you.
Where a control genuinely isn't in place, Vouchra flags it and gives you the playbook to close it, instead of papering over it.
You review, sign off, and send back a completed form in the processor's own format.
Who usually receives this
Sound familiar?
Questions
Before you ask
My POS vendor says they handle PCI. Do I still have to answer?
Usually yes — they harden the terminal, but questions about your office computer, your staff, and your policies are still yours. Vouchra's shared-responsibility engine attributes each answer to the right party, so you neither over-claim nor under-claim.
What's the non-compliance fee about?
Most processors bill merchants monthly until a current SAQ is on file. It's not a fine — it's a nudge. Completing the SAQ once, properly, is almost always cheaper than a year of ignoring it.
Next move
Bring this exact form to the walkthrough.
Thirty minutes, your real paperwork, and you leave knowing what your gaps are — whether or not you buy.
See your own paperwork answered.
Bring a real questionnaire — an insurer's renewal, a client's spreadsheet, the processor's SAQ — and watch it answered from real policies, with citations.