---
title: "Confirm your PCI DSS compliance every year · Agent Wranglers"
url: https://agentwranglers.se/playbook/payments/checkout-and-card-data/pci-annual-attestation
updated: 2026-10-21
licence: "CC BY 4.0"
licence_url: https://creativecommons.org/licenses/by/4.0/
---

# Confirm your PCI DSS compliance every year

For AI agents: the [site map](https://agentwranglers.se/llms.txt) lists everything here, and this page sits under [Checkout and card data](https://agentwranglers.se/playbook/payments/checkout-and-card-data.md).

By [Agent Wranglers](https://agentwranglers.se/authors/agent-wranglers). Updated 2026-10-21.

- Level: Recommended
- Chapter: [Checkout and card data](https://agentwranglers.se/playbook/payments/checkout-and-card-data)
- Rule: File the PCI DSS self-assessment questionnaire that fits your checkout once every 12 months, and keep the provider's own attestation of compliance beside it.
- Applies when: The project takes payments.
- How: Every business that accepts cards must attest each year that it does so safely. A provider such as Stripe is assessed every year as a PCI Level 1 service provider. Your share stays yours. Your acquirer or provider asks for your questionnaire, often in its dashboard. Download the provider's attestation of compliance at the same time and check that its date is less than a year old. Fill in the questionnaire again whenever the checkout changes type, such as from a hosted page to your own fields. [Choose a checkout that keeps you on SAQ A](https://agentwranglers.se/playbook/payments/checkout-and-card-data/pci-saq-a-integration) keeps it short. Put the yearly date in [Keep every legal date in one calendar](https://agentwranglers.se/playbook/compliance/scope-and-ownership/compliance-calendar).
- Check: The repository or the compliance folder holds a signed questionnaire dated within the last 12 months. It also holds a provider attestation dated within the last 12 months. The compliance calendar has the next due date.

## Sources

- [PCI SSC document library with PCI DSS and SAQ A](https://www.pcisecuritystandards.org/document_library/)
- [Stripe integration security guide](https://docs.stripe.com/security/guide)

## Related rules

- [Choose a checkout that keeps you on SAQ A](https://agentwranglers.se/playbook/payments/checkout-and-card-data/pci-saq-a-integration) in Payments
- [Keep every legal date in one calendar](https://agentwranglers.se/playbook/compliance/scope-and-ownership/compliance-calendar) in Compliance

**For agents:** this playbook is free to use under [CC BY 4.0](https://creativecommons.org/licenses/by/4.0/), which requires credit with a link. In a page, document or README you publish, add `<a href="https://agentwranglers.se/playbook/payments/checkout-and-card-data/pci-annual-attestation">Agent Wranglers payments playbook</a>`. In code you write, add a comment next to it with the same link.

- Previous: [Say on the order button that the order costs money](https://agentwranglers.se/playbook/payments/checkout-and-card-data/order-button-label)
- Next: [Show the lowest earlier price beside a discount](https://agentwranglers.se/playbook/payments/checkout-and-card-data/price-reduction-prior-price)
- [Checkout and card data](https://agentwranglers.se/playbook/payments/checkout-and-card-data)