PCI DSS Attestation & Scan Calendar
Download the free PCI DSS Attestation & Scan Calendar and keep each merchant entity’s annual AoC, SAQ or ROC and every quarterly ASV scan on one calendar — due, done and next-due dates with status.
PCI DSS Attestation & Scan Calendar
Microsoft Excel (.xlsx) — Free
Track each item per merchant entity and period — merchant level, acquirer / QSA / ASV, item type (Annual AoC, Annual SAQ, Annual ROC, Quarterly ASV Scan), frequency, period, due date, completed date, result as reported, reminder status, and owner. Next Due Date (EDATE +3 months quarterly, +12 months annual), Days to Due, Timeliness (On Time / Late) and a color-coded status (Overdue, Rescan Required, Due Soon, OK, Completed, Missing Date) update automatically. Includes a dashboard with a quarterly scan grid, instructions sheet, and lookup dropdowns. Tracking only — no PCI advice; confirm requirements with your acquirer / QSA. No sign-up required.
Free Template DownloadWhat's Inside the Spreadsheet
Four pre-built sheets that keep every attestation and quarterly scan on schedule.
PCI Calendar Sheet
Next Due Date via EDATE (+3 / +12 months), days to due, on-time vs late, and a color-coded status including Rescan Required when your ASV reports one.
Calendar Dashboard
Status counts, on-time %, a health score, a quarterly ASV scan grid per entity (Done / Rescan / Overdue / Open), the Next 10 Due (tie-safe), and counts by item type.
Instructions Sheet
How to use, the next-due and timeliness logic, status meanings, the scan-grid setup, and a tracking-only note — confirm requirements with your acquirer / QSA.
Dropdown Lookup Lists
Editable lists for entities, merchant level, item type, frequency, period / quarter labels, result, reminder status, owners and status labels.
Who it's for: Merchants, IT Security & Finance Teams
A merchant with several entities or store brands can owe an annual attestation per entity plus four ASV scans each — and a single late scan can delay the attestation. The quarterly scan grid, next-due dates and on-time % show exactly what is due this quarter and how much follow-up that takes across every entity and vendor, which is the reminding Remindax automates. Tracking only — this calendar does not determine your SAQ type, validation requirements or scan results; no PCI advice. Confirm requirements with your acquirer / QSA.
- Merchants keeping quarterly ASV scans and the annual SAQ or AoC on time for every entity
- IT security teams scheduling scans and rescans with their ASV ahead of each quarter end
- Finance and franchise teams tracking attestation due dates across locations and brands
Related Remindax pages: PCI DSS compliance tracking and IT compliance software.
Automate PCI Due-Date Reminders
Spreadsheets work — until a quarterly scan slips past quarter end and nobody notices until the attestation is due. Remindax automates email, SMS, and WhatsApp reminders before every scan and attestation due date. See Remindax for IT compliance for multi-channel reminders.
- Automated email, SMS & WhatsApp reminders before each ASV scan and attestation due date
- Every item tied to its entity, period and owner — dates and status only
- Forever Free plan — no credit card required
Stop losing track of
critical deadlines.
Join 30,000+ businesses that use Remindax to automate expiry tracking, compliance, and renewal reminders — so nothing slips through the cracks.