Security
What PCI compliance means for a small shop
The questionnaire, the fees, and what you really have to do each year.
Hermosa Payments team6 min read
PCI DSS is the security standard for any business that takes cards. For most small businesses, staying compliant comes down to one yearly questionnaire and a few good habits.
The yearly questionnaire
After your account is approved, you’ll get an email with a link to the Self-Assessment Questionnaire. It asks how you take cards and how you protect that information. Most shops finish it in under an hour.
Habits that keep you compliant
- Never write down or store full card numbers.
- Change default passwords on terminals and Wi-Fi.
- Keep your POS and terminal software up to date.
- Limit who can issue refunds.
Stuck on a question? Call our support team and we’ll walk through it with you.
Want a second opinion on your statement?
Send us a recent statement and we’ll show you what you pay now and what you could pay. It’s free and there’s no commitment.
