There are 4 levels, with Level 1 being the most stringent and level 4 the least (although by no means
lax). The levels are primarily based on the number of transactions per year and the higher the level,
the less stringent the ongoing assessment processes.
Level 4: Applies to small businesses handling less than 20,000 eCommerce transactions and less than
1 million other transactions per year.
Level 3: The transactional range is between 20,000 eCommerce transactions to I million transactions
other transactions per year.
Level 2: Between 1 million to 5 million transactions per year.
Level 1: The highest corporate level – ‘big box’ retail chains and companies like Amazon – 6 million or
more transactions per year.