Skip to main content

How do I upload a valid Attestation of Compliance (AOC)?

Updated
Upload process
 
Step 1: Start the upload.
 
On the PCI portal dashboard, click either:
  • "Start Profile" on the "Your business profile" widget, or
  • "Begin Step" on the "Your Next Step" widget.
3.png
 
Step 2: Choose assessment method.
  • When prompted, select "Upload" as your assessment method.
4.png
 
Step 3: Select SAQ type.
  • Choose your current PCI DSS compliance assessment type (found on your AOC). Select the SAQ type and click "Next."
5.png
 
Step 4: Scanning requirements.
 
Indicate whether your assessment requires scanning. If yes, you'll need to either:
  • Schedule a scan, or
  • Upload a current ASV scan report
Step 5: Complete profile questions.
  • Finish the remaining profile questions. Once complete, you'll return to your dashboard.
Step 6: To begin upload.
  • Click "Begin Step" from the "Your Next Step" widget to start uploading your AOC.
Step 7: Upload your document.
  • Click "Upload."
  • Click "Select File" to open your device's file explorer.
  • Choose the necessary document(s).
6.png
7.png
 
Step 8: Complete document details.
  • Select "Attestation of Compliance" from the "Document Type" dropdown.
  • Add the "Document Date."
  • Include any additional relevant information.
  • Select the "PCI DSS Version" from the dropdown.
  • Select the "Status" from the dropdown.
  • Select the "Completion" status from the dropdown.
  • Click "Upload."
 
8.png
 
Step 9: Finalize upload.
  • Once the document appears in the list, click "Add."
9.png
  • Review and confirm your eligibility for the SAQ type on your uploaded AOC.
  • Confirm the validation effective date and PCI DSS version.
  • Check the boxes to acknowledge conditions related to your status and attestation.
  • Click "Attest" to complete the process and confirm your PCI DSS validation.

10.png