Security
💎 Built for Sidekick
✍️ Sidekick drafts it — you apply it
shopify
sidekick
security
pci
compliance
Run PCI Compliance Checklist
Ask Sidekick to explain PCI DSS basics for Shopify merchants and list who currently has payment-settings access — not a certified compliance audit.
Sidekick writes it — you put it live
Sidekick produces the content or code for this, but doesn't apply it to your store itself. You'll paste or publish the result yourself — the prompt tells Sidekick to explain exactly where it goes.
📋 Prompt
Help me understand my PCI DSS position as a Shopify merchant: Store Context: Payment processor: [YOUR PROCESSOR, e.g., Shopify Payments, Stripe, PayPal] Do you store any card data outside Shopify: [YES/NO] Third-party payment apps installed: [LIST APPS] Annual transaction volume: [VOLUME, e.g., 10,000 transactions] Sidekick can’t run a PCI audit, determine my SAQ type, or certify compliance — that requires a Qualified Security Assessor or my payment processor. What it can do: Explain in plain terms why Shopify Payments/Shopify-hosted checkout being PCI Level 1 compliant means I’m not handling raw card data directly, and what that does (and doesn’t) cover for me List the staff accounts that currently have access to Settings > Payments in my admin, so I can review who really needs it List the third-party apps I named above and flag, generically, which categories (payment apps vs. everything else) typically fall under stricter PCI scrutiny — for me to verify with each vendor Give a plain-language summary of what SAQ A vs. SAQ A-EP typically cover, as background before I talk to my processor or a QSA Draft a short internal note on “don’t paste card numbers into email/chat” for staff training, as a starting point Treat the output as background research and a staff-access snapshot, not a completed compliance checklist — the actual SAQ determination and sign-off needs to come from my processor or a qualified assessor.
How to Use
- Copy the prompt above
- Open Shopify Sidekick in your Shopify admin
- Paste the prompt and replace the bracketed placeholders with your details
- Review Sidekick's response and apply the suggestions