Which statement best describes SAQ B-IP?

Which statement best describes SAQ B-IP?

• A. It applies to online merchants that host a hosted payment page
• B. It applies to merchants using E2EE with PCI PTS POI devices and IP network
• C. It applies to P2PE solutions
• D. It applies to merchants with only card-present dial-out terminals

Answer: (B)

SAQ B-IP targets merchants who process card data using end-to-end encryption at a point-of-interaction device that connects over an IP network. In this setup, the card data is encrypted at the POI device and decrypted only by the payment processor, so the merchant’s systems never handle unencrypted card data. Because the network path is IP-based, the PCI scope focuses on securing the POI device, the local network segment it sits on, and the payment application used to transmit data—not on hosting a payment page or managing the full payment environment. This is why it fits merchants using E2EE with PCI PTS POI devices and an IP network. It isn’t about hosted payment pages, which involve a different PCI SAQ, nor about full P2PE solutions that have their own scope, nor about card-present dial-out terminals that operate over non-IP connections.

SAQ B-IP targets merchants who process card data using end-to-end encryption at a point-of-interaction device that connects over an IP network. In this setup, the card data is encrypted at the POI device and decrypted only by the payment processor, so the merchant’s systems never handle unencrypted card data. Because the network path is IP-based, the PCI scope focuses on securing the POI device, the local network segment it sits on, and the payment application used to transmit data—not on hosting a payment page or managing the full payment environment. This is why it fits merchants using E2EE with PCI PTS POI devices and an IP network. It isn’t about hosted payment pages, which involve a different PCI SAQ, nor about full P2PE solutions that have their own scope, nor about card-present dial-out terminals that operate over non-IP connections.