What does SAQ D apply to?

SAQ D, or Self-Assessment Questionnaire D, is designed to cover any merchants that do not meet the criteria for the other, more specialized self-assessment questionnaires and all service providers. This means that merchants whose business processes or systems involve more complexity or risk, and who handle cardholder data in ways that aren't fully covered by the specific requirements of the other SAQs, will use SAQ D. Additionally, service providers that store, process, or transmit cardholder data also fall under this category.

For clarity, this encompasses merchants that conduct transactions across various channels—whether in-person, online, or through other means—thus broadening the scope beyond just those with e-commerce stores. The other choices do not reflect the comprehensive applicability of SAQ D, as it is inclusive of all merchants and service providers that aren't suited for other SAQ categories.