COMPLIANCE ASSESSMENT TOOLPARTNER OVERVIEW

Your merchant portfolio.
Actually PCI-compliant.

AI-guided PCI DSS assessments your merchants actually finish — official signed documents, a live portfolio dashboard, and a launch that needs zero IT project.

complianceassessmenttool.comchris.larson@complianceassessmenttool.com

The problem

The annual SAQ is built for auditors, not merchants.

Roughly 4 in 5 organizations fail to maintain PCI DSS compliance (Verizon Payment Security Report).
The questionnaire is dozens of pages of control language — your merchants ghost it, your ops team chases PDFs.
Typical portfolio reality: only 30–40% validated, and most partners can't quote their own number.
Meanwhile the liability for a small-merchant breach lands on you, the acquirer — with PCI 4.0.1 now fully enforced.

Compliance Assessment Tool2

What we do

A 15-minute conversation instead of a 40-page form.

Merchants describe how they take payments in plain English — AI picks the right SAQ across all nine types and shows its reasoning.
One combined question per PCI requirement — not 200+ sub-controls.
Merchant reviews and signs; nothing is auto-attested — a human stays in the loop on every step.
Output: the official card-brand SAQ + AoC PDFs, plus a live dashboard of your whole book.

~15 min

typical completion

9

SAQ types covered

yourbank.com/compliance

How does your business take card payments? Describe it in your own words.

Customers tap their card on a terminal at the counter. We never write card numbers down.

That matches SAQ B-IP — standalone IP-connected terminals. I'll walk you through it one plain-English question at a time.
SAQ B-IP · determined✓ Requirement 3 · In Place

Compliance Assessment Tool3

Launch

Three ways to go live. Most partners pick "none of the work."

	Option	What you do	Time to live
📧	Concierge launch	Send us your merchant list — every merchant gets a branded email with a personal link	under a week, zero code
🔗	One-button launch	Your web team adds one "Complete PCI compliance" button to your portal	an afternoon
🧩	Embedded	The whole experience inside your app — your brand, our engine (API/iframe)	~2 weeks

Plus the differentiator nobody else has: plug our AI into your support chatbot and merchants complete their attestation conversationally.

Compliance Assessment Tool4

The merchant experience

Branded as you, start to finish.

📧

Branded invite

Your logo, your colors, your words — sent from your own domain (SPF/DKIM aligned). A personal link, valid 30 days.

💬

15-minute guided assessment

Plain English, one question per requirement, AI suggestions the merchant confirms — never auto-attested.

✍️

Review & sign

The merchant sees every answer, signs digitally, and seals the assessment.

📄

Official documents

Signed SAQ + AoC delivered instantly — you're notified the moment each merchant completes.

Next year: answers carry forward — the merchant confirms what changed, re-signs, done. Renewal reminders are automatic.
See it live right now: complianceassessmenttool.com/portal — the demo needs no signup.

Compliance Assessment Tool5

Economics

A service line, not a penalty line.

	Per merchant / yr
Industry-norm program fee you charge	$79–$119
CAT — per completed assessment	$25
Your margin per compliant merchant	$54–$94

No subscriptions, no per-call fees, no minimums — you pay only when an assessment completes.
Model it for your book: complianceassessmenttool.com/roi

Your portfolio · live (illustrative)

87%

412

merchants compliant

18

expiring within 60 days

Invited

474

Started

436

In progress

24

Compliant

412

Compliance Assessment Tool6

Risk

The number you can finally show the card brands.

After a small-merchant breach, assessments flow to the acquirer — and the first question is whether that merchant had a current, validated SAQ.
A portfolio dashboard with a rising validation rate is risk-committee evidence, not just ops tooling.
Every assessment carries a complete audit trail: who answered, what the AI suggested, what the merchant signed.

Mar 2025

PCI DSS 4.0.1 fully enforced

2026

Visa's consolidated acquirer monitoring (VAMP) tightens

$5k–100k/mo

reported post-breach assessment ranges*

*Industry-reported ranges; card-brand fine schedules are confidential.

Compliance Assessment Tool7

Why us

Incumbents skin a portal. We rebuilt the assessment.

	Legacy programs	CAT
Merchant experience	Static questionnaire portal	AI-guided conversation, plain English
Pricing	Long-term subscription lock-in	$25 per completed assessment
Integration	"Co-branded portal"	Concierge / one button / embedded / chatbot
Evaluation	Sales process before you touch it	Sandbox key in 60 seconds
Documents	Official SAQ / AoC	Official SAQ / AoC — same paper, faster path

Compliance Assessment Tool8

Trust

Built so vendor risk is the easy part.

We hold our own signed PCI DSS AoC; public Trust Center with architecture, sub-processors, pre-filled SIG/CAIQ answers.
Zero cardholder data touches our systems — we assess how card data flows; we never process it.
Executed OpenAI DPA: no model training on your data. Tenant isolation on every query; merchant-scoped browser tokens.
Full per-partner audit log, exportable for your SOC 2 / examiner evidence.

Compliance Assessment Tool9

Proposal

A 90-day pilot on a slice of your book.

Pick 100–500 merchants. We configure your branding and invite verbiage with you — live in under a week.
You pay only per completed assessment. No platform fee for the pilot.
At day 90 we review the completion-rate delta together. If it doesn't earn the rollout, walk away — no lock-in.
Your engineers can start today: sandbox key issued instantly at /signup.

Week 1

first invites out

Day 90

completion-rate review

$0

until assessments complete

Compliance Assessment Tool10

COMPLIANCE ASSESSMENT TOOL

Let's get your number.

What percentage of your merchant portfolio has a current, validated SAQ on file today? Let's find out — and fix it.

chris.larson@complianceassessmenttool.com
Live demo: complianceassessmenttool.com/portal
Your economics: complianceassessmenttool.com/roi
Docs & instant sandbox: complianceassessmenttool.com/docs

Compliance Assessment Tool, LLC11

Your merchant portfolio.Actually PCI-compliant.