How Long Does It Take to Become PCI Compliant?

Every business that stores any information from processing credit cards, debit cards and other payment cards is required to comply with PCI (Payment Card Industry) standards. All companies performing payment processing must meet the security compliance standards. Failure to comply can result in restrictions, heavy fines, or permanent expulsion from accepting cards and processing payments.

Becoming PCI Compliant

The entire process of becoming PCI compliant usually takes between one day and two weeks. The actual time for compliance will be dependent on how long the self-assessment questionnaire takes to complete. In addition, the business will need to pass a PCI scan. Once the questionnaire and scan have been passed, the results are turned in to the company’s merchant bank. That information is then passed on to the Payment Card Industry stating that the company has met the requirements of PCI compliance.

Specific Requirements

PCI compliance requirements are based on different merchant accounts, and the amount of transactions the business processes every year. In detail, these include:

Level 1 Requirements – Merchant accounts with transactions of 6 million or more a year, or companies with compromised data must perform a quarterly network security scan and an on-site annual security audit.

Level 2 Requirements – Merchant accounts that process transactions ranging from 150,000 to 6 million every year must complete the self-assessment questionnaire annually.

Level 3 Requirements – Merchants with payment processing numbers between 20,000 and 150,000 transactions are required to perform a self-assessment questionnaire every year, along with a quarterly scan performed by an ASV (Approved Scanning Vendor).

Level 4 Requirements – Any merchant processing no more than 20,000 transactions annually must maintain compliance at all times. However, they are not required to report compliance.

Necessary Steps

Every business that processes credit/debit cards and stores the information must determine their merchant level as assigned by the payment card industry. In addition, they need to determine their validation type and report their compliance through a self-assessment questionnaire.

A detailed report should include any vulnerability assessment scans, performed by an ASV. The report should detail the scan on any public-facing IP address used for processing, viewing, and handling credit and debit card data.

Becoming compliant and maintaining the status might appear overwhelming. However, businesses that break the process down into smaller sections can easily maintain their status. The working components will include the merchant, the hosting provider, the shopping cart (e-commerce application), the authorized payment gateway, ASV, and the merchant’s bank.

Leave a Reply



It took me a while to decide who I wanted to settle with to handle all of my credit card transactions because every company wants to make it sound like they're offering you the best rates. was able compare and beat all of the other offers I received. They were also able to provide me the fairest price on my EMV-compliant terminal. My sales representative and the support team were there to assist every step of the way. Ultimately, I'm looking forward to a long term relationship with this company.

Roland Tran from the Hong Kong Kitchen

It is a pleasure dealing with these folks. Their pricing is fair, their statements are understandable and their employees are knowledgeable and friendly.

John MacMillian from the Great Lakes Baking Company

The service was very professional, my sales person (Steven B.) was very well versed in the product and most helpful in getting our company set up to accept credit cards via my cell phone. Their rates are some of the lowest on the market and their service is unparalleled. I will recommend them to anyone requiring a credit card processing service.

Michael Harper from Deluxe Auto Body

Jonathan C. is wonderful to work with. He is very helpful, accommodating and resolves any issue quickly. It is hard these days to find someone who gives great customer service, but I can say, Jonathan is the best! I would not hesitate to recommend him to any business owner and to assist you in helping to grow your business.

Linda Garner from Regali Da Forno

I called indecisive about getting a device, but speaking to your Sales Consultant completely settled me. He was very professional, knowledgeable and patiently walked me through the process. He always responded to my voicemails and answered all my questions. After I received my merchandise, he called following up to ensure that I had received it. Customer service I would say is 5 stars. Stellar! Thanks Credit Card Processing, I will definitely recommend you.

Sarah Morgan from Vision International Ministries
Call Us Today! (866) 837-0751

© 2016 All rights reserved. Privacy Policy
CREDITCARDPROCESSING.COM, LLC is a registered ISO of Wells Fargo Bank, N.A. Walnut Creek, CA

*Further terms and conditions may apply. Promotion contingent upon's receipt of written competing offer(s).

**Certain restrictions may apply.

Promotional offers brought to you by

Call (866) 837-0751 for details.