Complium Pricing Overview

Complium SAQ-A is built for e-commerce and mail/telephone-order merchants that fully outsource payment processing (for example, a hosted payment page or third-party processor). The platform maps your environment — iFrames and URL redirects — to the applicable SAQ-A requirements, with automated evidence collection and AI-drafted summaries, status suggestions, and narratives to speed documentation. Every AI-drafted artifact is routed to EIC Limited's certified QSAs for independent human review before it is accepted; AI never determines compliance status. Includes a 1-year platform license, automated evidence collection, AI-assisted documentation workflow, in-app QSA review, and Attestation of Compliance (AOC) output.

1-year platform license
Automated evidence collection
AI-assisted SAQ-A documentation
In-app QSA review
Attestation of Compliance (AOC) output
Show More

Complium for SAQ Types is a SaaS workspace for merchants eligible for PCI DSS v4.0.1 SAQ A-EP, B, B-IP, C, C-VT, P2PE or SPoC. One subscription covers any applicable SAQ type. A free scoping wizard helps identify your likely SAQ before you begin. The final SAQ decision rests with your acquirer or payment brand, not with Complium or EIC Limited. The platform activates a guided workflow scoped to your SAQ, and AI helps organize artifacts and draft evidence summaries. Every output is independently reviewed by an EIC Limited QSA, who makes all final compliance decisions and signs your Attestation of Compliance (AOC).

1-year platform license
Free SAQ scoping wizard
Covers SAQ A-EP, B, B-IP, C, C-VT, P2PE and SPoC
Guided workflow for your SAQ type
AI-assisted evidence summaries
Independent review by EIC's QSA
Attestation of Compliance (AOC) signed by EIC's QSA
Show More

Complium SAQ-D is a SaaS workspace for service providers and merchants with complex payment environments completing PCI DSS v4.0.1 SAQ-D. The platform helps you scope your environment, collect evidence organized by PCI DSS requirement, and track remediation in one place. AI helps analyze evidence, suggest requirement status and draft summaries, so your team spends less time on manual documentation. Every AI output is a draft. An EIC Limited QSA independently reviews all evidence, makes all final compliance decisions and signs your Attestation of Compliance (AOC).

1-year platform license
Environment scoping tools
Evidence organized by PCI DSS requirement
Automated evidence collection
AI-assisted SAQ-D workflows
Remediation tracking
Independent review by EIC's QSA
Attestation of Compliance (AOC) signed by EIC's QSA
Show More

Complium ROC is a SaaS workspace for Level 1 merchants and large service providers that need a full PCI DSS v4.0.1 Report on Compliance (ROC). The platform mirrors how an assessment runs, with evidence organized requirement by requirement, the way the ROC is written. Optional read-only cloud integration collects evidence directly from your environment, and AI helps analyze evidence and draft findings and narratives. Every AI output is a draft. EIC Limited's QSA independently reviews all evidence, makes all final compliance decisions, validates the ROC and signs your Attestation of Compliance (AOC).

1-year platform license
Evidence organized by PCI DSS requirement
Optional read-only cloud evidence integration
Automated evidence collection
AI-assisted ROC preparation
Remediation tracking
Independent review by EIC's QSA
Final ROC validated and AOC signed by EIC's QSA
Show More