---
title: Do you have a guide for PCI Compliance?
description: Understand how PCI DSS applies to your POS setup, why most requirements are out of scope, and how to answer the PCI SAQ correctly and confidently.
---
[Skip to content](https://help.hightrekpos.com/kb/what-is-htpos-pci-scope#main-content)
English - United States
Show submenu for translations
[](https://www.hightrekpos.com)
Open main navigation
Close main navigation
- English - United States
Show submenu for translations
- [Contact us](https://www.hightrekpos.com/contact-us.html#contact-form)
[Contact us](https://www.hightrekpos.com/contact-us.html#contact-form)
How can we help you?
- There are no suggestions because the search field is empty.
1. [High Trek POS Platform Knowledge Base](https://help.hightrekpos.com/kb?hsLang=en-us)
2. [Getting started](https://help.hightrekpos.com/kb/getting-started?hsLang=en-us)
3. [PCI](https://help.hightrekpos.com/kb/getting-started?hsLang=en-us#pci)
August 4, 2026
# Do you have a guide for PCI Compliance?
### **PCI Scope Overview for High Trek POS Customers**
This article explains how PCI DSS applies to your environment, why most requirements are out of scope for you, and how to correctly answer the PCI Self‑Assessment Questionnaire (SAQ).
For a step-by-step instructions please visit: [Step-by-Step Instructions](https://docs.google.com/document/d/1g33m3DIzl5RNQnfn6UgdHFjDiA3ly8PjGhwD5ty-It4/edit?tab=t.0)For a video walk through please visit: [Video Walk Through](https://drive.google.com/file/d/1LhhhvR5KZhijspZssSg90egr9GYzHKGu/view?usp=drive_link)
### **1. How Our Platform Minimizes PCI Scope**
Our platform is intentionally designed so that **raw credit card data never enters your systems or ours**. Because of this architecture, the majority of PCI DSS requirements do not apply to your environment.
**Card‑Present Payments (On‑Site Transactions)**All in‑person transactions use **PCI‑validated Point‑to‑Point Encryption (P2PE) terminals**.
- Card data is encrypted immediately inside the terminal.
- Encrypted data is sent directly to the payment processor.
- Neither you nor our platform ever sees or stores the card number.
This single control removes a large portion of PCI requirements from your scope.**Online Payments (Website Transactions)**
When customers enter card information online, the card field is a **secure iframe hosted by CardConnect**.
- Card numbers are entered directly into CardConnect’s vault.
- Our system receives only a token — a safe, non‑sensitive reference used to process payments.
- No cardholder data is stored, transmitted, or processed by your systems.
Because of these controls, your PCI responsibilities are limited to operational practices and basic administrative requirements.
### **2. Your Responsibilities Within PCI Scope**
Even though card data never touches your environment, PCI still requires you to maintain certain practices.
### **Operational Responsibilities**
Your staff must follow secure handling procedures, including:
- Not writing down, photographing, or storing card numbers in any unapproved manner
- Destroying any card information received verbally (e.g., over the phone) immediately after use
- Ensuring payment terminals remain secure and free from tampering or customer manipulation
These responsibilities focus on employee behavior and physical security — the only areas where you have direct PCI exposure.
### **3. Policy & Training Requirements**
PCI DSS also requires that you maintain **written policies and training** covering the responsibilities listed above. At a minimum, you must:
- Document on how employees are expected to handle card data securely
- Train all staff who may interact with payment information
- Review and update these policies periodically
These administrative controls demonstrate that your organization understands its PCI obligations and enforces secure practices.
### **4. How to Answer Out‑of‑Scope Questions in the PCI Questionnaire**
The PCI questionnaire includes many items that do not apply to your environment because you never store, transmit, or process raw credit card data. Examples include:
- “Do you lock up your physical media?”
- “How do you secure stored cardholder data?”
Since **no physical media or stored cardholder data exists**, these requirements are technically **Not Applicable**. However, PCI requires you to explain *why* something is not applicable, which often leads to unnecessary follow‑up questions.To avoid that, **you should answer “Yes” when the question refers to something that does not exist in your environment**, and interpret the question based on intent.
### **Example:**
**Question:**“Do you secure physical media containing cardholder data?”
**You should answer:**
“Yes — because no media containing cardholder data exists in our environment.”This approach:
1. Prevents confusion
2. Avoids additional PCI review steps
3. Still accurately reflects your true PCI scope
### **Summary**
Because of the security measures built into our platform — P2PE terminals and hosted payment fields — your PCI scope is extremely limited. Your responsibilities focus on:
- Employee behavior
- Terminal security
- Written policies and training
- Answering out‑of‑scope questions in a way that avoids unnecessary follow‑up
If you need help interpreting any specific PCI questions, our team is always available to assist.
- [FAQs](https://help.hightrekpos.com/kb/faqs?hsLang=en-us)
- [Getting started](https://help.hightrekpos.com/kb/getting-started?hsLang=en-us#main-content)
- [Operating Hours](https://help.hightrekpos.com/kb/getting-started?hsLang=en-us#operating-hours)
- [Products](https://help.hightrekpos.com/kb/getting-started?hsLang=en-us#products)
- [Inventory](https://help.hightrekpos.com/kb/getting-started?hsLang=en-us#inventory)
- [Zoos](https://help.hightrekpos.com/kb/getting-started?hsLang=en-us#zoos)
- [Vouchers](https://help.hightrekpos.com/kb/getting-started?hsLang=en-us#vouchers)
- [PCI](https://help.hightrekpos.com/kb/getting-started?hsLang=en-us#pci)
- [Resources](https://help.hightrekpos.com/kb/getting-started?hsLang=en-us#resources)
- [Custom Calendar](https://help.hightrekpos.com/kb/getting-started?hsLang=en-us#custom-calendar)
- [Capacity](https://help.hightrekpos.com/kb/getting-started?hsLang=en-us#capacity)
- [Troubleshooting](https://help.hightrekpos.com/kb/troubleshooting?hsLang=en-us)
- [General](https://help.hightrekpos.com/kb/general?hsLang=en-us#main-content)
- [POS](https://help.hightrekpos.com/kb/general?hsLang=en-us#pos)
- [Reports](https://help.hightrekpos.com/kb/reports?hsLang=en-us)
- [Accounting](https://help.hightrekpos.com/kb/accounting?hsLang=en-us)
- [Hardware](https://help.hightrekpos.com/kb/hardware?hsLang=en-us)
- [Voucher Creation & Redemption](https://help.hightrekpos.com/kb/voucher-creation-redemption?hsLang=en-us)
- [Voucher Systems & Redemption Workflows](https://help.hightrekpos.com/kb/voucher-systems-redemption-workflows?hsLang=en-us)
- [POS Product Modifications & Add‑Ons](https://help.hightrekpos.com/kb/pos-product-modifications-add-ons?hsLang=en-us)
- [Physical Gift Card Production & Redemption](https://help.hightrekpos.com/kb/physical-gift-card-production-redemption?hsLang=en-us)
- [Bulk Voucher Management & Redemption](https://help.hightrekpos.com/kb/bulk-voucher-management-redemption?hsLang=en-us)
- [Payments & Cash Handling](https://help.hightrekpos.com/kb/payments-cash-handling?hsLang=en-us)
- [Product Setup & Configuration](https://help.hightrekpos.com/kb/product-setup-configuration?hsLang=en-us)
- [Reporting & Accounting](https://help.hightrekpos.com/kb/reporting-accounting?hsLang=en-us)
- [POS troubleshooting](https://help.hightrekpos.com/kb/pos-troubleshooting?hsLang=en-us)
- [Reporting & Data Export](https://help.hightrekpos.com/kb/reporting-data-export?hsLang=en-us)
- [POS Continuity & Outage Preparedness](https://help.hightrekpos.com/kb/pos-continuity-outage-preparedness?hsLang=en-us)
- [Location settings & configuration](https://help.hightrekpos.com/kb/location-settings-configuration?hsLang=en-us)
- [POS Permissions & Transactions](https://help.hightrekpos.com/kb/pos-permissions-transactions?hsLang=en-us)
- [Payments & Account Management](https://help.hightrekpos.com/kb/payments-account-management?hsLang=en-us)
- [Memberships & Customer Management](https://help.hightrekpos.com/kb/memberships-customer-management?hsLang=en-us)
- [Email templates & communication](https://help.hightrekpos.com/kb/email-templates-communication?hsLang=en-us)
- [Sales & Lead Management](https://help.hightrekpos.com/kb/sales-lead-management?hsLang=en-us)
- [Product Scheduling & Availability](https://help.hightrekpos.com/kb/product-scheduling-availability?hsLang=en-us)
- [Membership Management & Subscriptions](https://help.hightrekpos.com/kb/membership-management-subscriptions?hsLang=en-us)
[](https://help.hightrekpos.com/?hsLang=en-us)
[mailto:email@email.com](mailto:email@email.com)
Copyright © 2026, High Trek POS