NEW! TopsPay PCI Compliance with Aperia
Tops and Stax (our payment processor for TopsPay) are committed to providing you with the most secure and efficient tools to manage your business when using TopsPay to process your payments through Tops. As part of this commitment, we are excited to announce an upcoming upgrade to the PCI compliance program, previously managed through PCI Toolkit.
To better support your business and simplify your annual requirements, we are transitioning our PCI compliance platform to a new solution powered by Aperia Compliance, a global leader in PCI security.
Benefits of the new Aperia platform:
- Frictionless Process: Aperia has simplified the compliance process thanks to pre-populated data, guided workflows and integrated resources, designed to help you navigate PCI compliance more efficiently and reducing annual renewals to just minutes.
- Built-in Support: If your business requires vulnerability scanning, the new platform provides clear, step-by-step "how-to-fix" instructions to help you stay secure.
- Expert Assistance: You will have access to a dedicated, U.S.-based support team available with Aperia to assist you with compliance validation and technical questions.
What is Changing?
Effective May 1, 2026, your PCI ToolKit account will be transitioned to the Aperia platform.
Tops practices that have merchant accounts with TopsPay will receive an email the login credentials to Aperia from [email protected].
- If you are currently PCI compliant, your Attestation of Compliance (AOC) will carry over to Aperia.
- Program status, quarterly scans, and annual renewal of compliance should all be completed through Aperia moving forward as those dates were also carried over. Please set up your access as soon as possible to ensure you are aware of any upcoming requirements.
- If you are not currently compliant, you will continue to be billed a monthly non-compliance fee until compliance is completed in Aperia.
- Didn't receive the email? Please reach out to [email protected].
Note: Your costs for PCI enrollment and non-compliance will not be changing.
We are confident that this move will significantly improve your experience and make PCI compliance simpler for your business. If you have any immediate questions, please feel free to reach out to the Aperia support team at [email protected].