If my business is PCI Compliant through another company like Signapay, do I have to get a compliance through SecurityMetrics too?

Hello there, tolley.

If your business is already PCI compliant through a provider like Signapay, you do not need additional compliance certification from SecurityMetrics. PCI DSS compliance is recognized globally, meaning the standards and certification set by the PCI Security Standards Council are accepted by all entities involved in handling credit and debit card transactions.

Once certified by a reputable vendor like Signapay, this certification is generally accepted by other security providers, helping you avoid redundant and costly processes. However, it’s important to confirm with your payment processor or bank to ensure there are no specific requirements or preferred vendors that may necessitate additional certification.

Additionally, all merchants are also required to complete a Self-Assessment Questionnaire (SAQ). The required SAQ depends on how you store, handle, and process card data. For more details about these requirements, I recommend reading through these resources:

• Learn about QuickBooks PCI Compliance
• Learn about the PCI DSS Compliance Services

Reach out to us if you need anything else about PCI. Please know we're always right here to help you.