PCI DSS / B-IP
For merchants using standalone approved PTS POI terminals connected by IP to their payment processor, with no electronic account data storage.
Who it is for
SAQ B-IP covers eligible environments processing payments only through the permitted terminal types. Both device approval and connectivity to other systems matter. It is not a general questionnaire for every Internet-connected POS.
Key eligibility criteria
- Standalone PTS POI devices listed as approved by PCI SSC are used.
- Terminals connect by IP to the payment processor and are not connected to other device types in the same network zone.
- There is no electronic account data storage. Simple card readers do not substitute for the permitted POI devices.
- This path does not apply to e-commerce. Connections to a cash register, computer or other applications must be reviewed before eligibility is confirmed.
Payment flow
- 01Card at terminal
- 02Standalone PTS POI over IP
- 03Payment processor
Illustrative overview. Your actual data flow must be reviewed before choosing an SAQ.
Before completing your SAQ
Record the device model, version and approval status together with a network diagram. Review actual connections and applicable external scanning requirements with the accepting entity.
These criteria are a summary and do not replace the complete questionnaire. Confirm every criterion in the applicable version and the validation method with your acquirer or accepting entity.
