A PCI fee is a charge that some acquirers, independent sales organisations and payment processors add to a merchant's statement in connection with the Payment Card Industry Data Security Standard (PCI DSS). It comes in two main forms. A PCI compliance fee, usually charged monthly or annually, covers tools the provider offers to help the merchant complete its self-assessment questionnaire, run vulnerability scans and keep records. A PCI non-compliance fee is charged when the merchant has not submitted proof of compliance by the deadline, and it continues until the merchant validates. Neither fee is set by the card networks or the PCI Security Standards Council, which does not charge merchants directly; they are the provider's own pricing. Merchants can often avoid non-compliance fees by completing validation on time, and they should compare PCI fees with other fixed charges such as a monthly minimum fee and terminal rental fee.