Compliance Assessment Tool · Partner Overview

Your merchant portfolio.
Actually PCI-compliant.

AI-guided PCI DSS assessments your merchants actually finish — official signed documents, a live portfolio dashboard, and a launch that needs zero IT project.

complianceassessmenttool.comchris.larson@complianceassessmenttool.com

The problem

The annual SAQ is built for auditors, not merchants.

Roughly 4 in 5 organizations fail to maintain PCI DSS compliance (Verizon Payment Security Report).
The questionnaire is dozens of pages of control language — your merchants ghost it, your ops team chases PDFs.
Typical portfolio reality: only 30–40% validated, and most partners can't quote their own number.
Meanwhile the liability for a small-merchant breach lands on you, the acquirer — with PCI 4.0.1 now fully enforced.

Compliance Assessment Tool2

What we do

A 15-minute guided conversation instead of a 40-page form.

Merchant describes how they take payments in plain English — AI determines the correct SAQ across all nine types (A, A-EP, B, B-IP, C, C-VT, D, P2PE, SPoC) and shows its reasoning.
One combined question per PCI requirement with suggested answers — not 200+ sub-controls.
Merchant reviews and signs; nothing is auto-attested. Human in the loop on every step.
Out the other end: the official, card-brand SAQ + Attestation of Compliance PDFs, plus a live dashboard of your whole book.

~15 min

typical completion

SAQ types covered

100%

audit-trail coverage

Compliance Assessment Tool3

Launch

Three ways to go live. Most partners pick "none of the work."

Option	What you do	Time to live
Concierge launch	Send us your merchant list — every merchant gets a branded email with a personal link	under a week, zero code
One-button launch	Your web team adds one "Complete PCI compliance" button to your portal	an afternoon
Embedded	The whole experience runs inside your app — your brand, our engine (API/iframe)	~2 weeks

Plus the differentiator nobody else has: plug our AI into your support chatbot and merchants can complete their attestation conversationally.

Compliance Assessment Tool4

The merchant experience

Branded as you, start to finish.

Invite email carries your logo, your colors, your words — we customize every sentence with you.
Merchant clicks their personal link → describes their business → answers guided questions → signs.
Signed SAQ + AoC delivered automatically; you're notified the moment each merchant completes.
Next year: answers carry forward — the merchant confirms what changed, re-signs, done. Renewal chasing is automatic (60/30/7-day reminders).

See it live right now: complianceassessmenttool.com/portal — the demo needs no signup.

Compliance Assessment Tool5

Economics

Compliance becomes a service line, not a penalty line.

	Per merchant / yr
Industry-norm program fee you charge	$79–$119
CAT — per completed assessment	$25
Your margin per compliant merchant	$54–$94

No subscriptions, no per-API-call fees, no seat licenses, no minimums. You pay only when an assessment completes.

Merchants gladly pay for a 15-minute guided service; they resent penalty fees — and “no-PCI-fee” processors recruit on that resentment.
Stragglers who still won't complete? Your non-compliance fee still applies — now with a defensible paper trail.
Model it in your numbers: complianceassessmenttool.com/roi

Compliance Assessment Tool6

Risk

The number you can finally show the card brands.

PCI DSS 4.0.1 fully enforced since March 2025; Visa's consolidated acquirer monitoring (VAMP) tightens through 2026.
After a small-merchant breach, assessments flow to the acquirer — and the first question is whether that merchant had a current, validated SAQ.
A portfolio dashboard with a rising validation rate is risk-committee evidence, not just ops tooling.
Every assessment carries a complete audit trail: who answered, what the AI suggested, what the merchant signed.

Compliance Assessment Tool7

Why us

Incumbents skin a portal. We rebuilt the assessment.

	Legacy programs	CAT
Merchant experience	Static questionnaire portal	AI-guided conversation, plain English
Pricing	Long-term subscription lock-in	$25 per completed assessment
Integration	“Co-branded portal”	Concierge / one button / fully embedded / chatbot
Evaluation	Sales process before you touch it	Sandbox key in 60 seconds, live demo today
Documents	Official SAQ / AoC	Official SAQ / AoC — same paper, faster path

Compliance Assessment Tool8

Trust

Built so vendor risk is the easy part.

We hold our own signed PCI DSS AoC; public Trust Center with architecture, sub-processors, and pre-filled SIG/CAIQ answers.
Zero cardholder data touches our systems — we assess how card data flows; we never process it.
Executed OpenAI DPA: no model training on your data. Tenant isolation on every query; merchant-scoped browser tokens.
Full per-partner audit log, exportable for your SOC 2 / examiner evidence.

Compliance Assessment Tool9

Proposal

A 90-day pilot on a slice of your book.

Pick 100–500 merchants. We configure your branding and invite verbiage with you — live in under a week.
You pay only per completed assessment. No platform fee for the pilot.
At day 90 we review the completion-rate delta together. If it doesn't earn the rollout, walk away — no lock-in.
Your engineers can start today: sandbox key issued instantly at /signup.

Week 1

first invites out

Day 90

completion-rate review

until assessments complete

complianceassessmenttool.com10

Let's get your number.

What percentage of your merchant portfolio has a current, validated SAQ on file today? Let's find out — and fix it.

chris.larson@complianceassessmenttool.com
Live demo: complianceassessmenttool.com/portal
Your economics: complianceassessmenttool.com/roi
Docs & instant sandbox: complianceassessmenttool.com/docs

Compliance Assessment Tool, LLC11

Your merchant portfolio.Actually PCI-compliant.