Because the software itself is already certified as PCI Compliant, the only thing left to do is take a "Self-Assessment Questionnaire" (SAQ) each year. Because ClearCart does not allow storing credit card data, and because the ClearCart software is regularly scanned for PCI compliance, ClearCart merchants benefit by being eligible to fill out the simplest form available. We provide a document that steps you through each question to make it a simple as possible. Questionairres usally take about half an hour to complete.
Once this process is completed and your answers are verified by our PCI partner, you will receive a PDF report stating your site is PCI compliant. You can send this to your merchant bank as proof of compliance. It is also recommended you save your reports in your records going back a minimum of 3 years.
Yes. Unfortunately, each scanning service looks for slightly different vulnerabilities, has slightly different requirements, and can have vastly different tools for reporting and resolving issues, with varying degrees of usability (see aforementioned extreme headaches). Consequently, it is often a long and somewhat painful process (for both of us) such that we cannot support it for free. Our fee for PCI Compliance help and resolution for non-partner vendors is $100/hour.
We have put a lot of effort into bringing you the ease and efficiency of our partnership program and we believe it is a good value and that you will be happy with it.
