The SAQ is a checklist provided by the PCI Security Standards Council. You fill it in yourself, to see if you’re ticking all the boxes – kind of like a tax return, but for PCI compliance. It measures between 19 and 87 pages, and the length of time it takes to complete will depend on the size of your business and your sales volume.