Sign in Apply for early access

Enpasse for independent QSAs

Start in one sitting and run a whole assessment on your own, with an outside QA reviewer on record and the same records a large firm keeps.

Apply for early accessFor larger firms

One lead.
The whole assessment.

You lead and decide every sentence. Enpasse keeps the record a QA reviewer, a client and PCI SSC may ask to see.

24 SepCreate
Northwind RetailReport on Compliance 2026, lead Maria Reyes
History on 24 Sep
      AI credit

      One assessment, 24 Sep to 4 Nov, every act in one strip. Each carries Maria's name, the outside QA review she records included. Switch how it runs: the stages and the record keep their shape.

      Outside QA,
      stamped on the version

      Press Record. The review lands on version 2, and section 1.1 names the reviewer.

      Record the QA reviewVersion 2
      ReviewerALAna LeePCIPTo 14 Mar 2027
      Review date23 Oct 2026After the DRAFT, 22 Oct
      ResultPassedChanges needed
      QA recordQA record, version 2.pdf
      Only the lead records it
      Northwind RetailReport on Compliance, version 2

      1.1 Contact information

      QA reviewerNot yet
      CredentialNot yet
      ReviewedNot yet

      Small firm.
      Same record.

      Nothing is cut down for a firm of one. The same stages, the same History and the same report as a firm of fifty.

      1 pageto create an assessment, with AI or without
      No limiton assessments Without AI, which use no AI credit

      Apply for
      early access

      Independent QSAs and small firms are welcome. We will reply by email.

      • A walkthrough on an engagement like yours
      • Setting up QA done outside Enpasse
      • Launch prices for small firms

      Please leave out client names.

      Questions
      and answers

      Can I run an assessment on my own?
      Yes. The lead does all the work and makes every decision. QA must come from someone who took no part, so choose QA done outside Enpasse: you download the version's draft, send it from your own email, and record the review against that version.
      Who can lead, and who records my credential?
      A current QSA credential leads. Admins record credentials; in a firm with one admin, that admin records their own. Enpasse warns 30 days before a credential lapses.
      Do I have to use AI?
      No. Without AI is a full way to work: every step works with zero model calls, it uses no AI credit, and it has no limit. You can switch later, either way.
      What does AI need before it touches a client's files?
      Your firm accepts Enpasse's AI policy once, naming its own written policy, and you record how the client agreed. Auto and Assisted each use one AI credit per assessment. More on Enpasse AI.
      What does it cost?
      Launch prices, in US dollars, on an annual plan: $2,000 for your QSA seat and $2,000 per ROC run with AI. Without AI is included. Prices will change after launch. Plans are agreed on an order form, and going over a plan never stops work. Pricing.
      Are client files used to train models?
      Where are files kept after delivery?
      You answer once, for every report's 6.1: in Enpasse, for at least 3 years after delivery, or in your own repository.
      What if I leave?
      Download any assessment's files and workpapers from its Details at any time. Leave Enpasse waits until every assessment has a current copy.

      Start in one sitting. Keep the record of a large firm.

      Apply for early access