Merchant Fund Express
(305) 384-8391Call Now
Home/Clover/Fixing common problems/PCI compliance checklist for a small business

Guide

PCI compliance checklist for a small business

PCI compliance is a short list of good habits and an annual questionnaire. This is the practical version. This is general information, not legal or tax advice.

✓ Installed by our team and supported by phone. Rates and equipment are quoted to your business.

PlainEnglish
FreeRate review
PhoneHelp
Updated2026
Save on your processing rates: call now for a free rate review.Call (305) 384-8391

The short version

Merchant Fund Express explains payments in plain English so owners can make better decisions about equipment and processing.

PCI compliance is a short list of good habits and an annual questionnaire. This is the practical version. This is general information, not legal or tax advice.

PCI is the set of security standards for businesses that accept cards. For most small merchants it comes down to using a secure payment system, not storing card numbers and completing a yearly self-assessment.

A modern POS handles the hard part. Your job is the habits around it.

The steps

Use secure equipment

Use devices that encrypt card data.

Never store numbers

Do not write or keep card numbers on paper or files.

Control access

Individual logins and limited permissions.

Complete the questionnaire

Do the annual self-assessment on time.

Tips that help

Keep software and devices updated.
Train staff to never ask customers to read cards over email or text.
Keep a record of when you completed your assessment.

A worked example

A bakery owner realizes she has been jotting phone-order card numbers on a pad. She switches to the virtual terminal, shreds the pad and completes the questionnaire the same week.

Common mistakes

Keeping card numbers in a notebook.
Ignoring the annual reminder.
Sharing logins.
Call Now to Get Set Up: (305) 384-8391

The quick recap

Use secure equipment: Use devices that encrypt card data.
Never store numbers: Do not write or keep card numbers on paper or files.
Control access: Individual logins and limited permissions.
Complete the questionnaire: Do the annual self-assessment on time.

Before you decide: three questions

What does my current setup cost me in lost time, not just fees?
What would I do if it failed on my busiest day?
What does my current setup cost me in lost time, not just fees?

Questions worth asking your processor

Who do I call first, and what hours is that person reachable?
Can you put the answer in writing so I can keep it with my agreement?
Is anything here different for phone, online or in-person sales?
What notice will I get before anything about it changes?

How we help

This comes up for almost every owner at some point. Most of the stress is not the problem itself but not knowing the next step, so having the steps written down before you need them is the real fix. Print the steps, put them where your team can see them and rehearse them once.

If you would rather hear it from us, call (305) 384-8391. We will walk through the decision with you, quote the equipment and processing for your business and look at your statement while we are at it.

In more depth

Put the checklist on the calendar. Choose a date each year, perhaps with your accountant's deadline, to review equipment, passwords, staff access and any paper that touches card data. When something changes, such as a new device, a new online page or a new location, review again, because compliance follows the setup. Keep the completed attestation with your tax documents. This is general information, not legal or tax advice.

As explained by Merchant Fund Express. Updated 2026.

Common questions

Who tells me when it is due?

Your processor sends reminders; we help you complete it.

Is Clover compliant?

Clover is designed to meet PCI standards; your own habits still matter.

What if I take phone orders?

Use the virtual terminal and never write numbers down.

What if I miss it?

Some processors charge a fee for non-compliance; we help you stay current.

Does everything work if the internet goes down?

Clover can accept payments in offline mode for a limited time and sends the stored transactions when the connection returns; ask us how the limits apply to your account.

Is support available in Spanish?

Yes. English and Spanish support are available by phone, on site and during staff training, so the person who opens on Monday can learn it in the language they work in.

Keep exploring

Ready to get set up with Clover?

Call Merchant Fund Express. We install it, train your staff and stay on the line after launch. Ask for a free rate review while you are at it.

Call (305) 384-8391
Call NowAll Clover