Self-Assessment Questionnaires (SAQs) reflect how much card data you handle. SAQ A is the shortest, for merchants who fully outsource card data handling (for example, via a hosted vault). SAQ A-EP applies when your site affects the payment page but you don't store card data. SAQ D is the most demanding, with hundreds of controls, for merchants that store, process, or transmit card data directly.

By vaulting card data with Guardian, merchants typically qualify for SAQ A or SAQ A-EP instead of SAQ D.

→ See how Guardian simplifies your SAQ