How can we help?

Guides and reference for running PCI DSS 4.0.1 assessments in Kliper, from engagement letter to signed ROC.

Quick startYour first assessment in five minutes.Core conceptsROC, LOE, scoping and evidence.Security & trustEvidence integrity and how Cortex handles data.What's newSeptember 2026: docs on our own infrastructure, now in French too.

Getting started

Step 1Set up the workspaceFirm profile, roles, permissions and single sign-on. Usually done once by an admin.Users & RBAC →Step 2Add a client and engagementCreate the client, draft the Letter of Engagement and define scope.Clients & engagements →Step 3Run the assessmentRequest evidence, test each requirement, review and generate the ROC.Assessment workbench →

Docs by role

QSA assessorScoping and the assessment workbench Interviews and testing notes Generating the ROC

Firm adminRoles and permissions Clients, engagements, billing Admin console and activity log

Evaluating KliperPlatform overview Security and AI trust Subprocessors

Core concepts

Report on ComplianceThe final deliverable, generated from the record.Letter of EngagementScope, dates and signatories. Every assessment starts here.ScopingCDE, connected systems, what applies and what does not.EvidenceRequests, uploads, validation, chain of custody.

Popular guides

Cortex AI: evidence validation and drafted findings→Readiness and maturity assessment→Creating an assessment with carry-forward→QA review before ROC sign-off→

Integrations

All integrations →