Stripe is asking for SAQ A-EP, like 50 pages, what to do?

[startover909]

So I deployed my WHMCS with Stripe earlier this year and now they're asking me to upload SAQ A-EP for PCI compliance. It's such an annoyingly long and bureaucratic form that I'd absolutely hate to fill out. Never had such nonsense using Paypal business before.

Doing some research online, apparently:

1. Some claim that the current WHMCS stripe.js v2 implementation should quality for the shorter SAQ A, but Stripe's dashboard says otherwise, is it possible to contest this?

2. WHMCS says they're "investigating" the newer Stripe mechanism per the feature request, but gave no ETA.

So I wonder what others' experiences are dealing with this.

Is it possible to delay the form and wait for WHMCS's Stripe overhaul?

Stripe's dashboard did not give any "deadline" for the form submission, do others know if there's a "grace period"? 

Your advice would be greatly appreciated.

[WHMCS ChrisD]

Hi @startover909

14 hours ago, startover909 said:

1. Some claim that the current WHMCS stripe.js v2 implementation should quality for the shorter SAQ A, but Stripe's dashboard says otherwise, is it possible to contest this?

1

Based on the knowledge I have our stripe module uses stripe.js v2, so the client would need to complete SAQ A-EP for compliance: https://stripe.com/docs/security we do recommend completing this.

14 hours ago, startover909 said:

 2. WHMCS says they're "investigating" the newer Stripe mechanism per the feature request, but gave no ETA.

 

A feature request does exist in the system https://requests.whmcs.com/topic/migrate-to-stripe-elements-implementation for migrating to Stripe ELements there's presently not a ETA set on when we may look to make this migration however i'll keep this thread updated of any changes as they become known

[havenswift-hosting]

On 7/30/2018 at 12:23 PM, WHMCS ChrisD said:

Based on the knowledge I have our stripe module uses stripe.js v2, so the client would need to complete SAQ A-EP for compliance: https://stripe.com/docs/security we do recommend completing this.

A feature request does exist in the system https://requests.whmcs.com/topic/migrate-to-stripe-elements-implementation for migrating to Stripe ELements there's presently not a ETA set on when we may look to make this migration however i'll keep this thread updated of any changes as they become known

Hi Chris

Can you or Andrew or anybody give an update on this - it has been at "Investigation" status for over 4 months although at least you acknowledge that there is a problem which seems to contradict the initial answer that Andrew gave.  Stripe was included by WHMCS a while back and you made a big thing about it but it was only ever a half hearted implementation (no 3D for example).  For smaller businesses, this requirement for SAQ A-EP effectively makes this module unusable