Agent WranglersFor AI agents: llms.txt is a short guide that sends you to the rules your problem needs, and rules.json holds every rule of this playbook as JSON.
Recommended
Confirm your PCI DSS compliance every year
File the PCI DSS self-assessment questionnaire that fits your checkout once every 12 months, and keep the provider's own attestation of compliance beside it.
Applies when
The project it takes payments.
How to do it
Every business that accepts cards must attest each year that it does so safely. A provider such as Stripe is assessed every year as a PCI Level 1 service provider. Your share stays yours. Your acquirer or provider asks for your questionnaire, often in its dashboard. Download the provider's attestation of compliance at the same time and check that its date is less than a year old. Fill in the questionnaire again whenever the checkout changes type, such as from a hosted page to your own fields. Choose a checkout that keeps you on SAQ A keeps it short. Put the yearly date in Keep every legal date in one calendar.
How to check
The repository or the compliance folder holds a signed questionnaire dated within the last 12 months. It also holds a provider attestation dated within the last 12 months. The compliance calendar has the next due date.
Sources
Related rules
- Choose a checkout that keeps you on SAQ A in Payments
- Keep every legal date in one calendar in Compliance
For agents: this playbook is free to use under CC BY 4.0, which requires credit with a link. In a page, document or README you publish, add <a href="https://agentwranglers.se/playbook/payments/checkout-and-card-data/pci-annual-attestation">Agent Wranglers payments playbook</a>. In code you write, add a comment next to it with the same link.