Terms of Service

By accessing or using PCI Assessments Center (the "platform"), operated by Haumaru Whānau ("we", "our", or "us"), you accept and agree to be bound by these Terms of Service and our Privacy Policy. If you do not agree, do not use the platform.

PCI Assessments Center is a free platform that provides:

• An SAQ selector aligned to the official PCI SSC decision tree.
• Self-assessment workflows for all 10 PCI DSS v4.0.1 Self-Assessment Questionnaires.
• Generation of SAQ response PDFs and Attestations of Compliance (AoCs) from your inputs.
• Training modules and readiness content for PCIP and PCI QSA candidates.

Not a QSA-issued assessment. PCI Assessments Center helps you complete self-assessments. The SAQ and AoC PDFs generated by the platform are self-attested by you and are not a Report on Compliance (ROC) or a QSA-signed attestation. A formal QSA engagement with Haumaru Whānau (or another QSA Company) is required for QSA-signed deliverables.

When using PCI Assessments Center you agree to:

• Provide accurate and complete information at sign-up and in your assessments.
• Keep your account credentials confidential and notify us of suspected unauthorised access.
• Use the platform only for lawful purposes and in accordance with applicable PCI SSC guidance.
• Not interfere with, disrupt, or attempt to gain unauthorised access to the platform or other tenants' data.
• Not upload cardholder data, authentication data, or other sensitive personal data into free-text fields.

Each SAQ requires you to confirm the official PCI SSC eligibility criteria before you begin. You are solely responsible for the accuracy and completeness of your eligibility attestations and your responses. PCI Assessments Center records your inputs verbatim in the generated PDFs; it does not validate the truth of those inputs.

PCI DSS, the SAQs, the Attestations of Compliance, and related PCI SSC materials are © PCI Security Standards Council, LLC and are used in accordance with the PCI SSC's terms. Platform code, design, training content and other materials on PCI Assessments Center are owned by or licensed to Haumaru Whānau. You retain ownership of the answers, evidence, and generated reports specific to your organisation.

Assessment data is stored under per-tenant row-level security so only members of your organisation can access it. Please see the Privacy Policy for details on how we handle your data.

To the maximum extent permitted by law, Haumaru Whānau shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of profits, revenues, data, use, goodwill, or other intangible losses, arising out of or related to your use of the platform.

The platform is provided "as is" and "as available" without warranties of any kind, either express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, non-infringement, accuracy, reliability, or completeness. Nothing on the platform constitutes a QSA opinion or legal advice.

You agree to indemnify, defend, and hold harmless Haumaru Whānau and its affiliates, officers, directors, employees, and agents from any claims, liabilities, damages, losses, and expenses arising from your use of the platform or violation of these Terms.

We reserve the right to modify, suspend, or discontinue any part of the platform at any time. We may terminate or suspend access to any account that violates these Terms or misuses the platform.

These Terms are governed by the laws of New Zealand. Disputes arising from these Terms or the platform shall be resolved through binding arbitration or in the courts of appropriate jurisdiction in New Zealand.

We may modify these Terms from time to time. Material changes will be indicated by updating the "Last updated" date and, where appropriate, by notifying account holders. Continued use of PCI Assessments Center after such changes constitutes acceptance of the new Terms.

For questions about these Terms, contact Haumaru Whānau via the Haumaru contact page or visit haumaru.org.