Visa’s Global Registry of Service Providers - PCI DSS...

82
Visa’s Global Registry of Service Providers - PCI DSS Validated Entities The companies listed below were validated as being PCI DSS compliant by a QSA as of the "VALIDATION DATE". Service providers are required to revalidate their compliance to Visa on an annual basis, with the next annual Report on Compliance (ROC) due to Visa one year from the "VALIDATION DATE". ROCs that are from 1- 60 days late are noted in yellow and ROCs that are from 60-90 days late are noted in red. Entities with ROCs over 90 days past due are removed from this list. Entities are listed in each Visa region where they have been registered by at least one client, including: AP - Asia Pacific, CEMEA - Central Europe / Middle East / Africa, LAC - Latin America / Caribbean, NA - North America - Canada / United States. Visa client's are responsible for and are required to use compliant service providers and to follow up with service providers directly if there are any questions about their compliance status. As Of 1/9/2012 SERVICE PROVIDER VALIDATION DATE SERVICES COVERED BY REVIEW (1) ASSESSOR List of Compliant Service Providers - All AP CEMEA LAC NA 1 LINK (GUARANTEE) LIMITED Clearing & Settlement November 30, 2011 Trustwave Process Magnetic-Stripe Transactions Switching 1ShoppingCart.com Other June 30, 2011 Security Metrics Payment Gateway 1st Americard Data Preparation March 31, 2011 nGuard Inc. Records Management 1stPayGateway, LLC Authorization May 31, 2011 Internet Security Systems (a wholly owned IBM company) Payment Gateway 2checkout.com Back Office Services February 28, 2011 Arsenal Security Group Other 3dCart Hosting Provider March 31, 2011 SecurityMetrics Payment Gateway 3Delta Systems Authorization September 30, 2011 Fortrex Technologies MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching 800 Call KC Payment Processing - Internet May 31, 2011 Accudata Systems Payment Processing - MOTO 1 of 82 (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. © 2012 Visa Inc. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. * Current PCI DSS status is under review.

Transcript of Visa’s Global Registry of Service Providers - PCI DSS...

Page 1: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

The companies listed below were validated as being PCI DSS compliant by a QSA as of the "VALIDATION DATE". Service providers are required to revalidate their compliance to Visa on an annual basis, with the next annual Report on Compliance (ROC) due to Visa one year from the "VALIDATION DATE". ROCs that are from 1-60 days late are noted in yellow and ROCs that are from 60-90 days late are noted in red. Entities with ROCs over 90 days past due are removed from this list. Entities are listed in each Visa region where they have been registered by at least one client, including: AP - Asia Pacific, CEMEA - Central Europe / Middle East / Africa, LAC - Latin America / Caribbean, NA - North America - Canada / United States. Visa client's are responsible for and are required to use compliant service providers and to follow up with service providers directly if there are anyquestions about their compliance status.

As Of 1/9/2012

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

1 LINK (GUARANTEE) LIMITED

Clearing & SettlementNovember 30, 2011 Trustwave

Process Magnetic-Stripe Transactions

Switching

1ShoppingCart.com OtherJune 30, 2011 Security Metrics

Payment Gateway

1st Americard Data PreparationMarch 31, 2011 nGuard Inc.

Records Management

1stPayGateway, LLC AuthorizationMay 31, 2011 Internet Security Systems (a wholly owned IBM company)

Payment Gateway

2checkout.com Back Office ServicesFebruary 28, 2011 Arsenal Security Group

Other

3dCart Hosting ProviderMarch 31, 2011 SecurityMetrics

Payment Gateway

3Delta Systems AuthorizationSeptember 30, 2011 Fortrex Technologies

MOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe TransactionsSwitching

800 Call KC Payment Processing - Internet

May 31, 2011 Accudata Systems

Payment Processing - MOTO

1 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 2: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

A3 IT Solutions Hosting ProviderNovember 30, 2010 Trustwave

ABC FINANCIAL SERVICES, INC

AuthorizationMay 31, 2011 Trustwave

Clearing & SettlementHosting Provider

IPSP (E-commerce)

MOTO Payment ProcessingOtherPayment Gateway

Process Magnetic-Stripe Transactions

ABC Virtual Communications, Inc.

Hosting Provider - WebNovember 30, 2010 Compass IT Compliance, LLC

Payment Gateway/Switch

Acadaca LLC Hosting ProviderApril 30, 2011 Fortrex Technologies

Accel Networks OtherJanuary 31, 2011 Trustwave

Accelerated Payment Technologies Inc

AuthorizationJuly 31, 2011 Trustwave

IPSP (E-commerce)

Loyalty Programs

MOTO Payment ProcessingOther

Payment Gateway

Process Magnetic-Stripe Transactions

ACCENT Marketing MOTO Payment ProcessingMay 31, 2011 Crowe Horwath

Accertify Fraud and Chargeback Services

February 28, 2011 Halock Security Labs

Payment Gateway/Switch

Accesso, LLC Clearing & SettlementFebruary 28, 2011 Trustwave

Payment Gateway/Switch

AccountNow Payment GatewayJune 30, 2011 Trustwave

Acculynk Payment GatewayFebruary 28, 2011 Trustwave

ACH Direct Clearing & SettlementJanuary 31, 2011 Trustwave

Payment Gateway

Achieve Financial Services, LLC

Clearing & SettlementNovember 30, 2011 Information Exchange Inc.

Issuer ProcessingLoyalty Programs

ACI Worldwide Payment Processing - ATMApril 30, 2011 Solutionary, Inc

2 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 3: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

ACI Worldwide Payment Processing - POSApril 30, 2011 Solutionary, Inc

ACI Worldwide - Winn-Dixie Environment

Payment Gateway/SwitchSeptember 30, 2011 Solutionary

Payment Processing - POS

ACS Transportation Solutions Group – BATA Fastrak and MdTA E-Zpass

Hosting ProviderAugust 31, 2011 SecurityMetrics

MOTO Payment ProcessingPayment Gateway

Active Network Back Office ServicesOctober 31, 2011 Protiviti, Inc.

Payment Processing - InternetPayment Processing - POS

Adaptive Payments, Inc. Payment GatewayNovember 30, 2011 403 Labs, LLC

Adeptra OtherDecember 31, 2011 Protiviti

Advam Pty Ltd AuthorizationDecember 31, 2011 CQR Consulting Pty Ltd

IPSP (E-commerce)Payment Gateway

Process Magnetic-Stripe Transactions

Advantex Dining Corporation Loyalty ProgramsMarch 31, 2011 Datassurant, Inc.

Adyen B.V. Clearing & SettlementMay 31, 2011 Trustwave

IPSP (E-commerce)Other

Payment Gateway

Aegis Communications OtherDecember 31, 2010 K3DES

Payment Gateway

AEGIS USA, INC. OtherDecember 31, 2010 AT&T Consulting Solutions, Inc.

Aetna, Inc. Clearing & SettlementMay 31, 2011 Trustwave

Other

Affiliated Acceptance Corporation

MOTO Payment ProcessingOctober 31, 2011 Trustwave

Payment Gateway

AFFILIATED COMPUTER SERVICES, INC.

Issuing ProcessingFebruary 28, 2011 Jefferson Wells

Other

AFFINA LLC - Consumer's Union

OtherJune 30, 2011 Coalfire

Affinion Benefits Group AuthorizationDecember 31, 2011 Trustwave

3 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 4: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Affinion Benefits Group MOTO Payment ProcessingDecember 31, 2011 Trustwave

Payment Gateway

Affinion Loyalty Group AuthorizationDecember 31, 2011 Trustwave

MOTO Payment ProcessingPayment Gateway

Affinity Solutions Loyalty ProgramsNovember 30, 2011 Coalfire

Agilysys, Inc. Payment GatewayJuly 31, 2011 Trustwave

Process Magnetic-Stripe Transactions

Airlines Reporting Corporation

Clearing & SettlementFebruary 28, 2012 Protiviti Inc.

Akamai OtherSeptember 30, 2011 Neohapsis Inc.

Alacriti Payment Gateway/SwitchDecember 31, 2010 IGX Global

Alaska Option Services Corporation

AuthorizationApril 30, 2011 K3DES

Clearing & SettlementIssuing Processing

Process Magnetic-Stripe Transactions

Switching

Aliaswire Payment Gateway/SwitchSeptember 30, 2011 IGX Global

Payment Processing - MOTO

Alignet, S.A.C 3-D Secure Access Control Server

December 31, 2010 Xtrategies

IPSP (E-commerce)

OtherPayment Gateway

Alliance Data - Retail Services

AuthorizationDecember 31, 2011 Verizon Business Network Services Inc.

Clearing & SettlementIssuing Processing

Other

AllianceOne Inc. MOTO Payment ProcessingMay 31, 2011 AT&T Consulting Solutions, Inc.

Other

Allied Wallet AuthorizationMarch 31, 2011 Trustwave

IPSP (E-commerce)

Payment Gateway

Alpha Card Services, Inc. Clearing & SettlementNovember 30, 2011 INFORMATION EXCHANGE, INC.

4 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 5: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Alpha Card Services, Inc. Merchant ServicesNovember 30, 2011 INFORMATION EXCHANGE, INC.

Alta Resources IPSP (E-commerce)April 30, 2011 IBM Internet Security Systems

Loyalty ProgramsPayment Gateway

Amazon.com Merchant ServicesOctober 31, 2011 IOActive, Inc.

AmegyBank OtherDecember 31, 2010 Verizon Business

Payment Gateway

American Bancard Merchant ServicesJune 30, 2011 Enterprise Risk Management, Inc.

Other

American Data Technology Hosting ProviderApril 30, 2011 Specialized Security Services, Inc

Americaneagle.com Hosting ProviderNovember 30, 2011 Fortrex Technologies

Angel.com OtherOctober 31, 2011 Coalfire Systems, Inc.

AOC Solutions, Inc OtherOctober 31, 2011 Fortrex Technologies

AOL, Inc. Payment Processing - Internet

September 30, 2011 IOActive

Payment Processing - MOTO

Aon Hewitt OtherAugust 31, 2011 Trustwave

Aperia Solutions OtherJuly 31, 2011 Coalfire

Apriva, LLC Payment GatewayJuly 31, 2011 Trustwave

Switching

Arab Financial Services Company

Account ManagementJuly 31, 2011 SISA Information Security Pvt. Ltd.

Back Office Services

Clearing & SettlementFraud and Chargeback Services

Issuer ProcessingLoyalty Programs

Payment Gateway/SwitchPayment Processing

Payment Processing - ATMPayment Processing - Internet

Arcot Systems Inc. 3-D Secure Access Control Server

December 31, 2011 Payment Software Company (PSC)

5 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 6: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Area 101, Inc IPSP (E-commerce)July 31, 2011 Coalfire Systems. Inc.

Argus Payments Inc Payment Gateway/SwitchDecember 31, 2011 403 Labs

Aria Systems Payment GatewayDecember 31, 2011 TrustWave

Ariba Inc OtherMay 31, 2011 Payment Software Company (PSC)

Arise Virtual Solutions OtherMay 31, 2011 AT&T Consulting Solutions

Armenian Card CJSC AuthorizationDecember 31, 2010 Informzaschita

Clearing & Settlement

Issuing Processing

Process Magnetic-Stripe Transactions

ART Technology Group (ATG)

Hosting ProviderNovember 30, 2010 Trustwave

IPSP (E-commerce)

Artez Interactive Inc OtherDecember 31, 2011 IBM Security Services

Arvato Finance Services Limited

Clearing & SettlementJuly 31, 2011 Acertigo AG - An EXCELSIS Company

IPSP (E-commerce)Payment Gateway

ASAP TRANSACTION PROCESSING CORPORATION LIMITED

Loyalty ProgramsAugust 31, 2011 Evolution Ltd

Merchant ServicesPayment Gateway/Switch

Payment Processing - Internet

Payment Processing - MOTOPayment Processing - POS

ASF International IPSP (E-commerce)August 31, 2011 Trustwave

MOTO Payment Processing

Payment Gateway

ASIAPAY (HONG KONG) LTD

AuthorizationNovember 30, 2010 Trustwave

IPSP (E-commerce)Payment Gateway

Asociacion Cibao de Ahorros y Prestamos

AuthorizationSeptember 30, 2011 Trustwave

Issuing Processing

AT&T Managed Hosting and Application Services

Hosting ProviderOctober 31, 2011 Trustwave

6 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 7: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

AT&T Managed Services - AT&T Encryption Services

Managed ServicesOctober 31, 2011 Trustwave

AT&T Managed Services - AT&T Enhanced VPN Services, AT&T VPN Services, AT&T Private Network Transport Services

Managed ServicesJuly 31, 2011 Trustwave

AT&T Managed Services - AT&T Network Based IP VPN Remote Access Service / AT&T VPN Tunneling Service

Managed ServicesMay 31, 2011 Trustwave

Network Provider/Transmitter

AT&T Managed Services - Endpoint Security

Managed ServicesJuly 31, 2011 Trustwave

AT&T Managed Services - Intrusion Detection Services/Intrusion Prevention Services

Managed ServicesJuly 31, 2011 Trustwave

AT&T Managed Services - IP Telephony and LAN Services

Managed ServicesJuly 31, 2011 Trustwave

AT&T Managed Services - Managed Router Services

Managed ServicesJuly 31, 2011 Trustwave

AT&T Managed Services - Network Based Firewall

Managed ServicesJuly 31, 2011 Trustwave

AT&T Managed Services - Premise Based Firewall

Managed ServicesJuly 31, 2011 Trustwave

AT&T Managed Services - Transaction Routing Service

Managed ServicesJuly 31, 2011 Trustwave

AT&T Synaptic Hosting Hosting ProviderOctober 31, 2011 Trustwave

AT&T VoiceTone & Interactive Voice Services - Advanced Plus

Data PreparationJuly 31, 2011 Trustwave

Managed Services

AT&T WiFi Services OtherJanuary 31, 2011 TrustWave

Athenahealth, Inc. MOTO Payment ProcessingOctober 31, 2011 Trustwave

Payment GatewayProcess Magnetic-Stripe Transactions

Atos Services (M) Sdn Bhd Managed ServicesApril 30, 2011 TUV Rheinland Secure iT GmbH

7 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 8: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Atos Worldline India Private Limited

AuthorizationDecember 31, 2010 ControlCase

Clearing & Settlement

Fraud and Chargeback ServicesIssuing Processing

Loyalty Programs

MOTO Payment Processing

AudienceView Ticketing Corporation

OtherAugust 31, 2011 NCI (Net Cyclops Inc.)

Auric Systems International OtherDecember 31, 2011 Payment Software Company (PSC)

Aurora Financial Systems, Inc.

Payment GatewayApril 30, 2011 403 Labs, LLC

Autonomy Connected Back-Up

OtherNovember 30, 2011 Neohapsis

Records Management

Autonomy LiveVault OtherNovember 30, 2011 Neohapsis

Records Management

Autoscribe Corporation Payment GatewayJune 30, 2011 Fortrex Technologies

BancTec, Inc OtherJanuary 31, 2011 Trustwave

Bank Aljazira (Acquiring) ATM ProcessingJanuary 31, 2011 Acertigo

Authorization

Clearing & SettlementMerchant POS Processing

Payment Gateway

Bank of Khanty-Mansiysk ATM ProcessingJanuary 31, 2011 Nvision group

Authorization

Clearing & Settlement

Issuer

Merchant POS Processing

BankCard Services, Inc Account ManagementMay 31, 2011 Trustwave

Back Office Services

Fraud and Chargeback ServicesMerchant Services

Bankserv Payment Gateway/SwitchDecember 31, 2011 Trustwave

Payment Processing - Internet

Payment Processing - POS

8 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 9: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Beanstream Internet Commerce Inc.

Payment Gateway/SwitchSeptember 30, 2011 SPIGuard Security Solutions Inc

Payment Processing - Internet

Payment Processing - MOTO

Best Practice Systems, Inc. Payment Processing - Internet

December 31, 2010 Security Horizon, Inc.

Bill 1st, LLC Billing ManagementJuly 31, 2011 SecurityMetrics

Fraud and Chargeback Services

Payment Gateway/SwitchPayment Processing - Internet

BillMatrix Payment GatewayJuly 31, 2011 Payment Software Company (PSC)

Billtrust Payment GatewayOctober 31, 2010 Chief Security Officers, LLC

Blackbaud - Internet Services

IPSP (E-commerce)September 30, 2011 Trustwave

Payment Gateway

Process Magnetic-Stripe Transactions

Blackbaud Payment Services

Payment GatewayFebruary 28, 2011 Trustwave

Blackboard IPSP (E-commerce)March 31, 2011 Trustwave

Payment Gateway

Blackhawk Network AuthorizationNovember 30, 2011 ANXeBusiness Corp.

Clearing & SettlementHosting Provider

Issuing Processing

Payment Gateway

Switching

Bluefin Payment Systems Payment GatewayOctober 31, 2010 403 Labs

Process Magnetic-Stripe Transactions

BluePay OtherMay 31, 2011 Trustwave

Payment Gateway

BMI Fulfillment Services Loyalty ProgramsNovember 30, 2011 UHY Advisors

Managed Services

Bora Payment Systems Merchant ServicesMarch 31, 2011 Information Exchange

Payment Gateway/Switch

9 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 10: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Bora Payment Systems Payment Processing - Internet

March 31, 2011 Information Exchange

Braintree Payment Solutions Payment GatewayFebruary 28, 2011 Trustwave

Brinkman Financial AuthorizationJanuary 31, 2011 K3DES

IPSP (E-commerce)

MOTO Payment Processing

BSG Payments (formerly Billing Concepts)

Payment GatewayNovember 30, 2011 Trustwave

BTB Soft, Inc. DBA: B2B Soft

OtherOctober 31, 2010 IGX Global

Payment Gateway

Business Data Record Services

OtherNovember 30, 2011 RSM McGladrey

Cale Access AB (Cale Systems)

OtherNovember 30, 2010 Trustwave

Payment GatewayProcess Magnetic-Stripe Transactions

Caledon Card Services Clearing & SettlementMay 31, 2011 SPIguard Security Solutions Inc.

Fraud and Chargeback ServicesMerchant Services

Payment Gateway/Switch

Payment Processing - InternetPayment Processing - MOTO

Calypso Canada SwitchingJanuary 31, 2012 Trustwave

Camis, Inc. Payment Processing - Internet

October 31, 2011 SPIguard Security Solutions Inc.

Payment Processing - MOTO

Cantaloupe Systems, Inc. Payment Gateway/SwitchSeptember 30, 2011 403 Labs, LLC

Capital Card Services Hosting ProviderApril 30, 2011 Trustwave

IPSP (E-commerce)

MOTO Payment Processing

Other

Card Management Corporation (CMC)

OtherAugust 31, 2011 Trustwave

Card Tranz, Inc. Hosting ProviderDecember 31, 2011 Trustwave

IPSP (E-commerce)

10 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 11: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Cardinal Commerce Corp. 3-D Secure Access Control Server

December 31, 2011 Payment Software Company (PSC)

Payment Gateway/Switch

CardLab, Inc. Clearing & SettlementOctober 31, 2010 Information Exchange

Issuing Processing

Other

CARDLINK SERVICES LIMITED

Clearing & SettlementJune 30, 2011 Securus Global

MOTO Payment ProcessingPayment Gateway/Switch

CARDPAY INC OtherJune 30, 2011 Vectra Information Security Pte Ltd (Branch office of Vectra Corp)

Payment Gateway/Switch

Payment Processing - Internet

Payment Processing - MOTO

CardStandard AuthorizationApril 30, 2011 FortConsult A/S

Clearing & Settlement

Issuing Processing

MOTO Payment ProcessingProcess Magnetic-Stripe Transactions

Switching

Cardtronics EFT OtherMay 31, 2011 K3DES

Process Magnetic-Stripe Transactions

Switching

Cardworks Processing AuthorizationAugust 31, 2011 Trustwave

IPSP (E-commerce)

Payment Gateway

Cardworks Servicing LLC OtherFebruary 28, 2011 Trustwave

Carlson Marketing Worldwide - US

Loyalty ProgramsJune 30, 2011 Trustwave

CartManager IPSP (E-commerce)February 28, 2011 Trustwave

Payment Gateway

Process Magnetic-Stripe Transactions

CashEdge AuthorizationMay 31, 2011 AppSec Consulting, Inc.

CashLINQ Group, LLC MOTO Payment ProcessingAugust 31, 2011 SecurityMetrics

11 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 12: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

CashLINQ Group, LLC Payment GatewayAugust 31, 2011 SecurityMetrics

Process Magnetic-Stripe Transactions

CBC Companies, Inc OtherApril 30, 2011 Verizon Business, Inc

CBCInnovis, Inc. OtherApril 30, 2011 Verizon

CBORD Group AuthorizationFebruary 28, 2011 Trustwave

Payment GatewayProcess Magnetic-Stripe Transactions

Cboss Hosting Provider - WebNovember 30, 2011 KirkpatrickPrice Inc.

Hosting Provider- Hardware

Payment Processing - Internet

CCBill Clearing & SettlementJanuary 31, 2011 Coalfire Systems. Inc.

IPSP (E-commerce)

CDMS MERCHANT SERVICES, INC.

Merchant ServicesDecember 31, 2011 Enterprise Risk Management

Other

CDS Global, Inc. Issuer ProcessingNovember 30, 2011 Solutionary, Inc

Managed ServicesOther

Payment Processing - MOTO

CDW Hosting and Managed Services

Hosting ProviderOctober 31, 2010 Trustwave

Cedar Document Technologies

OtherAugust 31, 2011 igxglobal, Inc.

CenPos Payment GatewayJanuary 31, 2011 Enterprise Risk Management

Center Partners OtherOctober 31, 2010 IDEA Information Security

Centershift Hosting ProviderOctober 31, 2010 Security Metrics

Payment Gateway

Central Payment Corporation

OtherJuly 31, 2011 Trustwave

Central States Indemnity OtherOctober 31, 2011 Continuum Worldwide Corporation

Centrix Bank - LockBox Service

MOTO Payment ProcessingMay 31, 2011 SecurityMetrics

Century Bankcard Services Clearing & SettlementMay 31, 2011 Information Exchange

Merchant Services

12 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 13: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Certain Software Payment Gateway/SwitchOctober 31, 2011 Coalfire Systems

CHARGE Anywhere Payment GatewayApril 30, 2011 Trustwave

Chargeback Guardian OtherNovember 30, 2011 SecurityMetrics

Payment Processing - Internet

Chase Loyalty Solutions AuthorizationDecember 31, 2011 Trustwave

Clearing & SettlementLoyalty Programs

Payment Gateway

Switching

Chase Paymentech Solutions, LLC.

AuthorizationJanuary 31, 2011 Trustwave

Clearing & Settlement

Credit Card Payment ProcessingDebit Card Processing

Internet Payment Processing

Merchant POS Processing

Cintas Document Management Shredding

OtherJune 30, 2011 SecureState

Cintas Document Management Storage

OtherJune 30, 2011 SecureState

Clearent AuthorizationApril 30, 2011 Coalfire

Clearing & SettlementPayment GatewaySwitching

ClearTran MOTO Payment ProcessingJanuary 31, 2011 SecurityMetrics

Payment Gateway

Client Services OtherSeptember 30, 2011 Insight Networking

Cobre Bem IPSP (E-commerce)September 30, 2011 CPqD

MOTO Payment Processing

Payment Gateway

Collections Marketing Center, Inc.

OtherDecember 31, 2011 403 Labs

Payment Gateway/Switch

CollegeNET IPSP (E-commerce)March 31, 2011 Coalfire

Payment Gateway

Columbus Data AuthorizationJanuary 31, 2011 Information Exchange

Clearing & Settlement

Issuing Processing

13 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 14: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Columbus Data Payment GatewayJanuary 31, 2011 Information Exchange

CommerceV3 Hosting ProviderNovember 30, 2011 Secure Technology Group LLC

Payment Gateway/Switch

Compania Uruguaya de Medios de Procesamiento

AuthorizationJanuary 31, 2012 Xtrategies

Clearing & Settlement

MOTO Payment ProcessingPayment GatewayProcess Magnetic-Stripe Transactions

Switching

Compass Plus Clearing & SettlementNovember 30, 2011 Trustwave

Issuer Processing

Payment Gateway/SwitchPayment Processing - ATM

Payment Processing - POS

Complete Merchant Solutions

OtherFebruary 28, 2011 Security Metrics, Inc.

Computer Services, Inc. AuthorizationSeptember 30, 2011 Crowe Horwath LLP

Clearing & SettlementIssuing Processing

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

Concur - Redmond OtherJune 30, 2011 Verizon Business

CONDUCTOR TECNOLOGIA S.A.

AuthorizationJanuary 31, 2011 CIPHER

Clearing & Settlement

Issuing Processing

CONEXIS Back Office ServicesOctober 31, 2011 FishNet Security

Issuing Processing

Connexions Loyalty Travel Solutions

Loyalty ProgramsSeptember 30, 2011 Trustwave

MOTO Payment Processing

Consumer Benefit Services Loyalty ProgramsMarch 31, 2011 Trustwave

Contact Solutions Payment GatewayApril 30, 2011 SecurityMetrics, Inc.

Continental Credit Systems LLC

Account ManagementApril 30, 2011 Trustwave

14 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 15: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Continental Credit Systems LLC

Fraud and Chargeback Services

April 30, 2011 Trustwave

Merchant Services

Payment Processing - POS

Convergys (Home Agent) OtherJuly 31, 2011 Fortrex Technologies

Convergys CCMS OtherApril 30, 2011 Fortrex Technologies

Convergys Encore Payment GatewayMarch 31, 2011 Fortrex Technologies

Convergys Interaction Recording Platform

Merchant ServicesAugust 31, 2011 Accuvant, Inc.

Convergys Intervoice OtherJuly 31, 2011 Fortrex Technologies

Convergys SuddenLink ICOMS

IPSP (E-commerce)August 31, 2011 Fortrex Technologies

MOTO Payment ProcessingPayment Gateway

Convio, Inc. Payment GatewayJanuary 31, 2011 Trustwave

CO-OP Financial Services Clearing & SettlementApril 30, 2011 Tevora Business Solutions Inc

Fraud and Chargeback Services

Loyalty ProgramsOther

Payment Gateway/Switch

Corduro, Inc. Clearing & SettlementMarch 31, 2011 Trustwave

Hosting Provider

Loyalty Programs

MOTO Payment ProcessingPayment GatewayProcess Magnetic-Stripe Transactions

Switching

CORE Business Technologies

AuthorizationJuly 31, 2011 Trustwave

Hosting Provider

Payment GatewayProcess Magnetic-Stripe Transactions

CoSentry Managed ServicesApril 30, 2011 Continuum Worldwide

CRE Secure Payment GatewayJuly 31, 2011 Coalfire Systems, Inc.

Credibanco Visa Colombia AuthorizationApril 30, 2011 Xtrategies

Clearing & SettlementIPSP (E-commerce)

15 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 16: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Credibanco Visa Colombia Issuing ProcessingApril 30, 2011 Xtrategies

MOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

Credimatic S.A. AuthorizationJanuary 31, 2012 Trustwave

Clearing & SettlementIssuing Processing

MOTO Payment Processing

Other

Switching

CreditCall Ltd. AuthorizationJanuary 31, 2011 Foregenix

Clearing & Settlement

MOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Credomatic de Costa Rica AuthorizationJanuary 31, 2011 Xtrategies, LLC

Clearing & Settlement

IPSP (E-commerce)

MOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Switching

Credomatic de El Salvador AuthorizationSeptember 30, 2011 Xtrategies, LLC

Clearing & Settlement

IPSP (E-commerce)MOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

Credomatic de Guatemala AuthorizationMay 31, 2011 Xtrategies, LLC

Clearing & SettlementIPSP (E-commerce)

MOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

Credomatic de Honduras AuthorizationMay 31, 2011 Xtrategies, LLC

Clearing & Settlement

16 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 17: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Credomatic de Honduras IPSP (E-commerce)May 31, 2011 Xtrategies, LLC

MOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

Credomatic de Nicaragua AuthorizationSeptember 30, 2011 Xstrategies, LLC

Clearing & SettlementIPSP (E-commerce)

MOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

Credomatic de Panama AuthorizationMay 31, 2011 Xtrategies

Clearing & Settlement

IPSP (E-commerce)MOTO Payment Processing

Payment GatewayProcess Magnetic-Stripe Transactions

Switching

CREDOMATIC OF FLORIDA, INC.

AuthorizationSeptember 30, 2011 Xtrategies, LLC

Clearing & Settlement

IPSP (E-commerce)Issuing ProcessingMOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

Crescent Processing OtherOctober 31, 2011 SecurityMetrics

Payment Gateway

Croem, Inc. IPSP (E-commerce)October 31, 2011 Trustwave

MOTO Payment Processing

Payment GatewayProcess Magnetic-Stripe Transactions

CSG Content Direct Back Office ServicesMarch 31, 2011 Solutionary

Payment Gateway/Switch

Payment Processing - Internet

17 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 18: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

CSG Systems Inc. - Data Prose

Billing ManagementMay 31, 2011 Solutionary

Payment Processing - Internet

Records Management

CSG Systems, Inc. - Interactive Messaging

Back Office ServicesApril 30, 2011 Solutionary

Payment Gateway/Switch

Payment Processing - Internet

CSG Systems, Inc. – Statement and Account Billing Services

Back Office ServicesApril 30, 2011 Solutionary

Billing Management

Payment Gateway/Switch

Payment Processing - InternetRecords Management

CSI Software Hosting ProviderOctober 31, 2010 Trustwave

Payment Gateway

CSU CardSystem S.A. Account ManagementSeptember 30, 2011 Trustwave

Back Office Services

Billing ManagementClearing & Settlement

Fraud and Chargeback Services

Issuer ProcessingOtherPayment Gateway/Switch

Payment Processing - InternetPayment Processing - MOTO

Payment Processing - POS

CT-Paiement Inc. MOTO Payment ProcessingNovember 30, 2011 Bell Canada

Payment Gateway

Cvent, Inc. Payment Processing - Internet

August 31, 2011 Stratum Security

Cyber City Teleservices OtherDecember 31, 2011 CrimsonSecurity

Cybera SwitchingApril 30, 2011 FishNet Security

CyberSource (including Authorize.Net)

Billing ManagementAugust 31, 2011 Trustwave

Clearing & Settlement

18 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 19: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

CyberSource (including Authorize.Net)

Fraud and Chargeback Services

August 31, 2011 Trustwave

Hosting Provider - Web

Hosting Provider- Hardware

Managed ServicesMerchant ServicesNetwork Provider/Transmitter

Payment Gateway/SwitchPayment Processing - Internet

Payment Processing - POS

Cynergy Data Payment Gateway/SwitchAugust 31, 2011 Coalfire Systems. Inc.

Payment Processing - Internet

Payment Processing - MOTOPayment Processing - POS

Data Oceans, LLC Payment Processing - Internet

May 31, 2011 Compliance Point

Data Paradigm OtherJuly 31, 2011 Crowe Horwath LLP

Data Stream Clearing & SettlementFebruary 28, 2011 Information Exchange, Inc.

Merchant Services

Payment Gateway/Switch

Payment Processing - ATM

Dataline Systems, Inc. Payment GatewayDecember 31, 2011 Trustwave

Datapak Services Corporation

AuthorizationDecember 31, 2011 Trustwave

Hosting ProviderPayment Gateway

DataPipe Hosting ProviderSeptember 30, 2011 Trustwave

DataTrax Technologies Payment GatewayJanuary 31, 2011 SecurityMetrics, Inc.

Davis & Henderson G.P. Inc OtherSeptember 30, 2011 IBM Internet Security Systems

DAXKO Back Office ServicesApril 30, 2011 BrightLine

Payment Processing - Internet

Debit Plus Technologies, LLC

OtherFebruary 28, 2011 Specialized Security Services

Debit Technologies, Inc. Clearing & SettlementMay 31, 2011 Information Exchange

Merchant Services

19 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 20: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Delphis Software, Inc. Payment GatewayMay 31, 2011 Digital Resources Group (DRG)

Demandware Hosting ProviderJune 30, 2011 SecurityMetrics

IPSP (E-commerce)Payment Gateway

Denarii Systems AuthorizationJanuary 31, 2011 Fortrex Technologies, Inc.

Clearing & Settlement

IPSP (E-commerce)Issuing Processing

Loyalty Programs

MOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Switching

DHD Media Clearing & SettlementJune 30, 2011 Trustwave

Payment Processing - Internet

Diamond Marketing Solutions

OtherSeptember 30, 2011 Halock Security Labs

Diebold Transaction Services

AuthorizationDecember 31, 2010 Verizon Business Network Services Inc.

Switching

Digital Payment Technologies

Payment Gateway/SwitchMay 31, 2011 Payment Software Company (PSC)

Digital River IPSP (E-commerce)July 31, 2011 NetSPI

Payment Gateway

Direct Cash Management AuthorizationDecember 31, 2010 S1 Corporation - Postilion Retail POS Environment

Switching

Direct Insite Payment Gateway/SwitchMay 31, 2011 Enterprise Risk Management, Inc.

Payment Processing - Internet

Direct Mail Processors, Inc. Payment GatewayJanuary 31, 2012 Fortrex Technologies

Donor.com Hosting Provider - WebJune 30, 2011 Coalfire

Other

Payment Processing - Internet

Payment Processing - MOTO

drugstore.com, inc. AuthorizationJune 30, 2011 Coalfire

20 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 21: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

drugstore.com, inc. Hosting ProviderJune 30, 2011 Coalfire

DST Output, LLC. - Payment Payment GatewayAugust 31, 2011 FishNet Security, Inc.

Duncan Solutions DBA: Duncan Parking Technologies

Payment Gateway/SwitchJune 30, 2011 SecurityMetrics

Duncan Solutions DBA: Professional Account Management

Account ManagementOctober 31, 2011 SecurityMetrics, Inc.

Billing Management

Payment Gateway/Switch

Records Management

EarthLink Business Network Provider/Transmitter

July 31, 2011 Neohapsis Inc.

EC Suite IPSP (E-commerce)August 31, 2011 Coalfire

Other

ECARD SOLUTIONS LTD AuthorizationMay 31, 2011 Ambersail Ltd

Clearing & SettlementIssuing ProcessingMOTO Payment Processing

Payment Gateway

Switching

EchoSat Communications Network Provider/Transmitter

September 30, 2011 ComplyGuard Networks Inc.

Payment Gateway

eCommLink Hosting ProviderMarch 31, 2011 Payment Software Company (PSC)

Issuing Processing

Edhance, Inc. Loyalty ProgramsJuly 31, 2011 Payment Software Company (PSC)

EFT SOURCE, INC. OtherJuly 31, 2011 Lattimore Black Morgan and Cain

eGate Payment Technologies Ltd

Back Office ServicesAugust 31, 2011 Sysnet

Payment Gateway/SwitchPayment Processing - Internet

Eigen Development, Ltd Payment Gateway/SwitchOctober 31, 2011 Payment Software Company (PSC)

Payment Processing - Internet

Payment Processing - MOTO

21 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 22: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Eigen Development, Ltd Payment Processing - POSOctober 31, 2011 Payment Software Company (PSC)

Elan Financial Services AuthorizationApril 30, 2011 TrustWave

Clearing & SettlementHosting Provider

IPSP (E-commerce)

Issuing ProcessingLoyalty ProgramsOther

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

Elan Financial Services Credit Card Issuing

Account ManagementDecember 31, 2011 Trustwave

Clearing & SettlementFraud and Chargeback Services

Issuing ProcessingOther

Elavon (formerly NOVA) AuthorizationMay 31, 2011 TrustWave

Clearing & Settlement

OtherPayment Gateway

Process Magnetic-Stripe Transactions

Elavon (formerly Southern Datacomm)

AuthorizationSeptember 30, 2011 Trustwave

IPSP (E-commerce)

Process Magnetic-Stripe TransactionsSwitching

Elavon Canada (formerly Internet Secure)

OtherJuly 31, 2011 Trustwave

Payment Gateway

Elavon Fusebox AuthorizationNovember 30, 2011 Verizon Business

Clearing & SettlementPayment Gateway

Process Magnetic-Stripe Transactions

ELECTRA CARD SERVICES PVT. LTD.

3-D Secure Hosting ProviderMay 31, 2011 ControlCase

Clearing & Settlement

Issuer ProcessingLoyalty Programs

22 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 23: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

ELECTRA CARD SERVICES PVT. LTD.

Payment Gateway/SwitchMay 31, 2011 ControlCase

Payment Processing - ATM

Payment Processing - Internet

Electronic Merchant Systems

OtherApril 30, 2011 Trustwave

Electronic Payment Exchange (EPX)

AuthorizationApril 30, 2011 Payment Software Company (PSC)

Clearing & Settlement

MOTO Payment Processing

Payment GatewayProcess Magnetic-Stripe Transactions

Switching

Electronic Payments Inc Clearing & SettlementJuly 31, 2011 Information Exchange

Loyalty Programs

Merchant Services

Electronic Processing Services

Clearing & SettlementJanuary 31, 2011 Information Exchange

Other

Electronic Transaction Systems Corporation (ETS Corp.)

Billing ManagementSeptember 30, 2011 Arsenal Security Group

Clearing & Settlement

Hosting Provider - WebMerchant ServicesPayment Gateway/Switch

Payment Processing - InternetPayment Processing - MOTO

Payment Processing - POS

Tax/Government Payments

Element Payment Services Clearing & SettlementNovember 30, 2011 Information Exchange

Merchant Services

Payment Gateway/SwitchPayment Processing - Internet

Payment Processing - POS

Emdeon Back Office ServicesMarch 31, 2011 Lattimore Black Morgan and Cain

Payment Processing - Internet

Payment Processing - POS

23 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 24: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

eMerchantPay Merchant ServicesDecember 31, 2011 Enterptise Risk Management

Other

Emergis Inc./Telus Health and Financial Service Solutions/CT Payments

Clearing & SettlementNovember 30, 2011 Trustwave

IPSP (E-commerce)

MOTO Payment Processing

Payment GatewayProcess Magnetic-Stripe Transactions

Switching

EMN8, Inc. Managed ServicesNovember 30, 2011 Tevora Business Solutions

Payment Gateway/Switch

Enacomm, Inc. Hosting ProviderMarch 31, 2011 True Digital Security

Encircle OtherDecember 31, 2010 Enterprise Risk Management

ENETS PTE LTD IPSP (E-commerce)November 30, 2010 Verizon Business

Payment Gateway

eNett International (Netherlands)B.V.

Fraud and Chargeback Services

December 31, 2011 Securus Global

Issuer Processing

Payment Processing - ATMPayment Processing - Internet

enStage Software Pvt Ltd 3-D Secure Access Control Server

December 31, 2010 Control Case

Payment Processing - Internet

Payment Processing - POSPrepaid Services

ePay Healthcare Payment GatewayJanuary 31, 2011 403 Labs, LLC

ePayData Clearing & SettlementOctober 31, 2011 Information Exchange

Merchant Services

Payment Gateway/Switch

Payment Processing - Internet

Epicor AuthorizationMarch 31, 2011 Trustwave

Payment Gateway

Epoch.com IPSP (E-commerce)November 30, 2011 Protiviti

eProcessing Network Payment GatewayApril 30, 2011 Trustwave

Epsilon Data Management, LLC

Loyalty ProgramsAugust 31, 2011 Brightline CPAs & Associates, Inc.

24 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 25: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Equiant Financial Services, LLC

Payment Processing - Internet

November 30, 2011 Datassurant, Inc

Payment Processing - MOTO

Escalate Retail Incorporated AuthorizationOctober 31, 2011 Trustwave

Loyalty Programs

MOTO Payment Processing

EURONET PAKISTAN (PRIVATE) LIMITED

Issuing ProcessingMay 31, 2011 Risk Associates

Switching

EURONET SERVICES INDIA PVT. LTD.

Issuer ProcessingApril 30, 2011 ControlCase

Payment Processing - ATM

Everlink Clearing & SettlementJune 30, 2011 Trustwave

Payment Gateway

EVERTEC Latinoamerica / ATH Costa Rica

AuthorizationDecember 31, 2011 Xtrategies

Clearing & Settlement

Issuing Processing

Loyalty Programs

MOTO Payment ProcessingProcess Magnetic-Stripe Transactions

Switching

EVERTEC, Inc. AuthorizationJanuary 31, 2011 Xtrategies

Clearing & Settlement

Hosting Provider

IPSP (E-commerce)Issuing Processing

MOTO Payment Processing

Payment GatewayProcess Magnetic-Stripe TransactionsSwitching

EVO Merchant Services AuthorizationOctober 31, 2011 Trustwave

Clearing & Settlement

Process Magnetic-Stripe Transactions

Switching

Evolution Benefits Issuer ProcessingDecember 31, 2010 Compass IT Compliance, LLC

E-xact Transactions Payment GatewayMay 31, 2011 Trustwave

25 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 26: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Excellence in Motivation Clearing & SettlementNovember 30, 2011 Information Exchange

Loyalty Programs

Merchant Services

Prepaid Services

Experian OtherSeptember 30, 2011 Verizon Business

Experient Payment GatewayJuly 31, 2011 Trustwave

ExtraMeasures OtherMay 31, 2011 Coalfire

EZFacility.com Payment GatewayAugust 31, 2011 Trustwave

Ezic, Inc. Merchant ServicesJuly 31, 2011 Information Exchange

Payment Gateway/SwitchPayment Processing - Internet

Payment Processing - MOTOPayment Processing - POS

EZIDEBIT PTY LTD Clearing & SettlementJuly 31, 2011 Trustwave

IPSP (E-commerce)MOTO Payment Processing

Other

Payment Gateway

ezRez Software Hosting Provider - WebOctober 31, 2011 Payment Software Company (PSC)

Fair Isaac Corporation OtherDecember 31, 2011 Trustwave

Faith Direct Billing ManagementJuly 31, 2011 CrimsonSecurity

Payment Processing - InternetPayment Processing - MOTO

Fédération des caisses Desjardins du Québec

AuthorizationAugust 31, 2011 Trustwave

Clearing & SettlementIssuing Processing

MOTO Payment Processing

Payment GatewayProcess Magnetic-Stripe Transactions

Fidelity Information Services - Acquiring Solutions, ATM Driving & Gateway Services

AuthorizationApril 30, 2011 Trustwave

Clearing & SettlementPayment Gateway

26 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 27: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Fidelity Information Services - Acquiring Solutions, ATM Driving & Gateway Services

Process Magnetic-Stripe Transactions

April 30, 2011 Trustwave

Switching

Fidelity Information Services - Australasia Pty Ltd

AuthorizationNovember 30, 2011 Trustwave

Clearing & SettlementIssuing Processing

Fidelity Information Services - Chicago Authnet

AuthorizationDecember 31, 2010 Trustwave

Debit Card Processing

Payment Gateway

POS Payment Processing

Switching

Fidelity Information Services - Clear Commerce

AuthorizationMay 31, 2011 Trustwave

Clearing & Settlement

Payment Gateway

Fidelity Information Services - Electronic Payment Presentment

AuthorizationJuly 31, 2011 Trustwave

Fidelity Information Services - eZCard Charlotte

OtherMarch 31, 2011 Trustwave

Fidelity Information Services - Issuing Solutions, Debit Account, Healthcare Payment Card and Prepaid Card Solutions

AuthorizationApril 30, 2011 Trustwave

Issuing Processing

Fidelity Information Services - Lisle Remittance Processing

OtherJanuary 31, 2011 Trustwave

Fidelity Information Services - Loyalty Card Processing

Loyalty ProgramsJune 30, 2011 Trustwave

Fidelity Information Services - Merchant Acquiring and Credit Card Account Processing Services

OtherApril 30, 2011 Trustwave

Fidelity Information Services - Norcross Debit Card Processing

AuthorizationApril 30, 2011 Trustwave

Clearing & Settlement

27 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 28: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Fidelity Information Services - Norcross Debit Card Processing

Issuing ProcessingApril 30, 2011 Trustwave

Process Magnetic-Stripe Transactions

Fidelity Information Services - Output Solutions San Antonio

OtherFebruary 28, 2011 Trustwave

Fidelity Information Services - Payment Processing and Data Center Little Rock, AR

MOTO Payment ProcessingMay 31, 2011 Trustwave

Process Magnetic-Stripe Transactions

Fidelity Information Services - Prepaid Solutions - South

AuthorizationJuly 31, 2011 IBM – Internet Security Systems (ISS)

Clearing & Settlement

Issuing Processing

Payment GatewaySwitching

Fidelity Information Services - Processadora e Servicos S.A. Brazil

AuthorizationApril 30, 2011 Trustwave

Clearing & Settlement

Issuing Processing

Payment Gateway

Process Magnetic-Stripe Transactions

Fidelity Information Services - PSS India

Issuing ProcessingJanuary 31, 2012 Trustwave

Payment Gateway/Switch

Payment Processing - ATM

Fidelity Information Services - St. Petersburg Check

OtherMarch 31, 2011 Trustwave

Payment Gateway

Fidelity Information Services - St. Petersburg Remittance Processing

MOTO Payment ProcessingSeptember 30, 2011 Trustwave

Fidelity Information Services - Web Vault

OtherJanuary 31, 2011 Trustwave

Fidelity Information Services Electronic Payments, New Berlin WI

Clearing & SettlementSeptember 30, 2011 Trustwave

Payment Gateway/Switch

28 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 29: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Fidelity Information Services India Business Process Outsource (BPO) Program

Account ManagementSeptember 30, 2011 Trustwave

Back Office Services

Fidelity Information Services PayDirect Solutions - Government

AuthorizationMarch 31, 2011 Trustwave

Clearing & Settlement

Payment Gateway

Process Magnetic-Stripe Transactions

Fifth Gear IPSP (E-commerce)August 31, 2011 Trustwave

MOTO Payment Processing

Payment Gateway

Financial Transmission Network Inc

Payment GatewayJanuary 31, 2011 Trustwave

Process Magnetic-Stripe Transactions

First American Payment Systems

Clearing & SettlementJune 30, 2011 IBM Internet Security Systems

First Atlantic Commerce, Ltd.

MOTO Payment ProcessingMarch 31, 2011 Coalfire Systems

Payment Gateway

Switching

First Data - Cono Sur S.R.L. AuthorizationMarch 31, 2011 Trustwave

Clearing & Settlement

IPSP (E-commerce)

Issuing ProcessingLoyalty Programs

MOTO Payment Processing

OtherPayment GatewayProcess Magnetic-Stripe Transactions

Switching

First Data Buypass (First Data Concord Payment Services)

AuthorizationSeptember 30, 2011 Trustwave

Clearing & SettlementIPSP (E-commerce)

Issuing Processing

MOTO Payment Processing

Payment Gateway

29 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 30: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

First Data Buypass (First Data Concord Payment Services)

Process Magnetic-Stripe Transactions

September 30, 2011 Trustwave

Switching

First Data CAC (Processing Center, S.A.)

AuthorizationMarch 31, 2011 TrustWave

Clearing & Settlement

Issuing Processing

Process Magnetic-Stripe Transactions

First Data Card Services International

AuthorizationSeptember 30, 2011 Trustwave

Clearing & Settlement

IPSP (E-commerce)Issuing Processing

MOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Switching

First Data Clientline Reporting (First Data Concord Electronic Financial Systems)

Clearing & SettlementSeptember 30, 2011 Trustwave

First Data EFS Transportation System

AuthorizationSeptember 30, 2011 Trustwave

Clearing & SettlementIPSP (E-commerce)

Issuing Processing

MOTO Payment ProcessingPayment GatewayProcess Magnetic-Stripe Transactions

Switching

First Data Global Gateway (First Data LinkPoint/First Data YourPay)

IPSP (E-commerce)September 30, 2011 Trustwave

MOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

First Data Government Solutions

IPSP (E-commerce)September 30, 2011 Trustwave

Payment Gateway

First Data Integrated Payment Systems

OtherSeptember 30, 2011 Trustwave

30 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 31: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

First Data International ANZ AuthorizationSeptember 30, 2011 Trustwave

Clearing & Settlement

IPSP (E-commerce)

Issuing ProcessingLoyalty ProgramsMOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

First Data International China

AuthorizationSeptember 30, 2011 Trustwave

Clearing & Settlement

Issuing Processing

Loyalty ProgramsProcess Magnetic-Stripe Transactions

First Data International Korea

AuthorizationOctober 31, 2011 Trustwave

Clearing & Settlement

Loyalty Programs

Payment Gateway

Switching

First Data Merchant Services

AuthorizationSeptember 30, 2011 Trustwave

Clearing & SettlementIPSP (E-commerce)MOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

First Data Money Network AuthorizationSeptember 30, 2011 Trustwave

Clearing & Settlement

IPSP (E-commerce)

Issuing ProcessingMOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Switching

First Data PayPoint Clearing & SettlementSeptember 30, 2011 Trustwave

IPSP (E-commerce)

Process Magnetic-Stripe Transactions

31 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 32: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

First Data Prepaid Services (First Data Concord Financial Technologies)

AuthorizationSeptember 30, 2011 Trustwave

Clearing & Settlement

IPSP (E-commerce)Issuing Processing

Loyalty Programs

MOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Switching

First Data RemitCo OtherSeptember 30, 2011 Trustwave

Remittance Processing

First Data Resources AuthorizationSeptember 30, 2011 Trustwave

Clearing & Settlement

IPSP (E-commerce)

Issuing ProcessingMOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Switching

First Data Retail ATM AuthorizationSeptember 30, 2011 Trustwave

Clearing & Settlement

IPSP (E-commerce)MOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe TransactionsSwitching

First Data Secure Transport (Datawire)

AuthorizationSeptember 30, 2011 Trustwave

IPSP (E-commerce)

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

First Data STAR (Networks, Processing and Systems Inc.)

AuthorizationSeptember 30, 2011 Trustwave

Clearing & Settlement

IPSP (E-commerce)Issuing ProcessingMOTO Payment Processing

32 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 33: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

First Data STAR (Networks, Processing and Systems Inc.)

Payment GatewaySeptember 30, 2011 Trustwave

Process Magnetic-Stripe TransactionsSwitching

First Data TeleCheck AuthorizationSeptember 30, 2011 Trustwave

Clearing & Settlement

Issuing ProcessingLoyalty Programs

MOTO Payment ProcessingPayment GatewayProcess Magnetic-Stripe Transactions

Switching

First Hawaiian Bank AuthorizationJune 30, 2011 Trustwave

Clearing & Settlement

Payment Gateway

Process Magnetic-Stripe Transactions

First National Bank of Omaha

AuthorizationJanuary 31, 2012 Trustwave

Clearing & SettlementIssuing ProcessingMOTO Payment Processing

Process Magnetic-Stripe TransactionsSwitching

First National Technology Solutions

Hosting Provider- HardwareMarch 31, 2011 Trustwave

Network Provider/Transmitter

Other

Payment Gateway/Switch

FirstSource Advantage, LLC OtherSeptember 30, 2011 SecurityMetrics

FirstView, LLC AuthorizationAugust 31, 2011 Trustwave

Issuing ProcessingMOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Fiserv - ACCEL/Exchange Issuing ProcessingApril 30, 2011 Payment Software Company (PSC)

33 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 34: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Fiserv - Amherst Call Center OtherMarch 31, 2011 Payment Software Company (PSC)

Fiserv - Bank Solutions Lincoln & Sioux Falls

OtherJuly 31, 2011 Payment Software Company (PSC)

Fiserv - Bank Solutions Precision Data Center

OtherNovember 30, 2011 Payment Software Company (PSC)

Fiserv ‐ Checkfree Club Solutions (I4 Aphelion, EFT, POS)

OtherDecember 31, 2011 Payment Software Company (PSC)

Fiserv - CheckFreePay OtherJune 30, 2011 Payment Software Company (PSC)

Fiserv - Club Solutions (Compete, EFT Web, EFT, POS)

AuthorizationJuly 31, 2011 Payment Software Company (PSC)

Payment Gateway

Fiserv - CUBEOL Issuing ProcessingMay 31, 2011 Payment Software Company (PSC)

Fiserv - CUSA OtherOctober 31, 2011 Payment Software Company (PSC)

Fiserv - Customer Solutions OtherNovember 30, 2011 Payment Software Company (PSC)

Fiserv - Electronic Document Delivery (EPSIIA)

OtherFebruary 28, 2011 Payment Software Company (PSC)

Fiserv - Enterprise Technology Group - Brookfield, WI Data Center

OtherOctober 31, 2011 Payment Software Company (PSC)

Fiserv - Enterprise Technology Group - Johns Creek, GA, Philadelphia, PA and Lewisville, TX Data Centers

OtherSeptember 30, 2011 Payment Software Company (PSC)

Fiserv – ETG Irving Data Center

OtherNovember 30, 2011 Payment Software Company (PSC)

Fiserv - Premier Central OtherNovember 30, 2011 Payment Software Company (PSC)

Fiserv - Signature Development Lake Mary

OtherAugust 31, 2011 Payment Software Company (PSC)

Fiserv - SourceOne OtherJuly 31, 2011 Payment Software Company (PSC)

FISERV - XP2 Hosting ProviderMay 31, 2011 Payment Software Company (PSC)

Other

34 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 35: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Fiserv - Xroads OtherFebruary 28, 2011 Payment Software Company (PSC)

FISERV Advantage AuthorizationSeptember 30, 2011 Payment Software Company (PSC)

Hosting ProviderSwitching

Fiserv Bank Solutions - Cleartouch Banking Platform

Hosting ProviderNovember 30, 2011 Payment Software Company (PSC)

IPSP (E-commerce)

Issuing Processing

Fiserv Bank Solutions - Southwest

AuthorizationMarch 31, 2011 Payment Software Company (PSC)

Issuing Processing

Switching

Fiserv Bank Solutions - Western Region Data Center

Issuing ProcessingNovember 30, 2011 Payment Software Company (PSC)

Fiserv Bank Solutions Eastern Region: Service Center

Issuing ProcessingDecember 31, 2011 Payment Software Company (PSC)

Fiserv Card Services Issuing ProcessingMarch 31, 2011 Payment Software Company (PSC)

Fiserv E-Banking Hillsboro Hosting ProviderSeptember 30, 2011 Payment Software Company (PSC)

Fiserv Electronic Banking, Biller Solutions & Itech

OtherOctober 31, 2011 Payment Software Company (PSC)

Payment Gateway

Fiserv Galaxy Issuing ProcessingJanuary 31, 2011 Payment Software Company (PSC)

Fiserv India PVT LTD OtherAugust 31, 2011 ControlCase India

Fiserv Lending Solutions - Loan Serv

OtherNovember 30, 2011 Payment Software Company (PSC)

Fiserv OnCU OtherJuly 31, 2011 Payment Software Company (PSC)

Fiserv Solutions, Inc. (Maverick)

Clearing & SettlementJuly 31, 2011 Pointe Solutions

Issuing Processing

Prepaid Services

Fiserv, Inc., Virtual Branch OtherDecember 31, 2011 Payment Software Company (PSC)

Florists’ Transworld Delivery, Inc.

Payment Gateway/SwitchDecember 31, 2011 Halock Security Labs

35 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 36: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Florists’ Transworld Delivery, Inc.

Payment Processing - POSDecember 31, 2011 Halock Security Labs

Fore! Reservations Payment Gateway/SwitchSeptember 30, 2011 BrightLine CPAs and Associates, Inc.

Fosdick Fulfillment Clearing & SettlementJuly 31, 2011 Trustwave

MOTO Payment Processing

Other

FreedomPay Inc. Clearing & SettlementJuly 31, 2011 CompliancePoint

Loyalty Programs

Payment Processing - InternetPayment Processing - POS

Frontline Processing OtherJune 30, 2011 SecurityMetrics

Payment Gateway

FrontStream Payments, Inc. Payment Gateway/SwitchMay 31, 2011 ControlCase

Payment Processing - Internet

Payment Processing - MOTO

Fry Inc. Hosting ProviderMay 31, 2011 IBM Internet Security Systems

FSV Payment Systems AuthorizationMay 31, 2011 K3DES

Clearing & Settlement

Other

Fujitsu America Inc. Managed ServicesFebruary 28, 2011 Verizon Business

Fulfillment Technologies AuthorizationJune 30, 2011 SecureState

Clearing & SettlementMOTO Payment Processing

Galileo Processing AuthorizationJuly 31, 2011 Trustwave

Clearing & SettlementIssuing Processing

Process Magnetic-Stripe Transactions

Ganart Technologies, Inc. OtherFebruary 28, 2011 ControlCase

Gateway Ticketing Systems, Inc.

Hosting ProviderOctober 31, 2011 Fortrex Technologies

IPSP (E-commerce)

GAZCARDSERVICE 3-D Secure Access Control Server

December 31, 2011 Informzaschita

AuthorizationClearing & Settlement

36 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 37: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

GAZCARDSERVICE IPSP (E-commerce)December 31, 2011 Informzaschita

Issuing Processing

MOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

GE Capital Retail Bank - Retail Finance

AuthorizationAugust 31, 2011 Trustwave

Issuing Processing

GE Capital Retail Bank - Sales Finance

Merchant ServicesDecember 31, 2010 Symantec

Payment Gateway/Switch

Payment Processing - Internet

Payment Processing - POS

GetNet Clearing & SettlementJuly 31, 2011 Cipher Informatica Ltda

Payment Gateway

Switching

Global Card Services (Elavon)

AuthorizationMay 31, 2011 Trustwave

Clearing & SettlementOther

Payment Gateway

Process Magnetic-Stripe Transactions

Global Cash Access Fraud and Chargeback Services

July 31, 2011 Trustwave

Other

Payment Processing - ATMPayment Processing - MOTO

Payment Processing - POS

Global Cash Card AuthorizationJanuary 31, 2011 Digital Resources Group (DRG)

Issuing Processing

Global Debt Registry OtherSeptember 30, 2011 Solutionary, Inc.

Global Electronic Technology

AuthorizationJanuary 31, 2011 403 Labs, LLC

Clearing & SettlementPayment Gateway

Global Payments Direct, Inc. AuthorizationJuly 31, 2011 Trustwave

Clearing & Settlement

37 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 38: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Global Payments Direct, Inc. MOTO Payment ProcessingJuly 31, 2011 Trustwave

Payment Gateway

Process Magnetic-Stripe Transactions

Switching

Global Processing Centre Clearing & SettlementJune 30, 2011 Information Exchange Inc.

Issuing Processing

Payment Gateway/SwitchPayment Processing - ATM

Payment Processing - Internet

Payment Processing - POS

GLOBAL REFUND HOLDINGS AB

Payment GatewayJanuary 31, 2011 Vectra Information Security Pte Ltd

Global Technology Partners LLC

OtherJune 30, 2011 Coalfire

Go Daddy OtherDecember 31, 2011 Protiviti

GoEmerchant AuthorizationMay 31, 2011 IBM Internet Security Systems

Payment Gateway

GolfSwitch IPSP (E-commerce)November 30, 2011 Chief Security Officers, LLC

MOTO Payment Processing

Google Payment GatewayJanuary 31, 2011 IOActive

Government Payments LLC IPSP (E-commerce)October 31, 2011 Trustwave

Payment Gateway

Govolution, Inc. AuthorizationMay 31, 2011 IBM Internet Security Systems

Payment Gateway

GP Network Corporation Issuing ProcessingSeptember 30, 2011 BSI Japan

Payment Gateway/Switch

GRANT STREET GROUP Payment GatewayFebruary 28, 2011 SecurityMetrics, Inc.

Process Magnetic-Stripe Transactions

Green Dot Issuing ProcessingOctober 31, 2011 Protiviti Inc.

GSI Commerce Solutions IPSP (E-commerce)September 30, 2011 Trustwave

Halyk Savings Bank of Kazakhstan

ATM ProcessingJanuary 31, 2011 FortConsult

Authorization

Clearing & SettlementPOS Payment Processing

38 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 39: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Halyk Savings Bank of Kazakhstan

Process Magnetic-Stripe Transactions

January 31, 2011 FortConsult

Hamer Enterprises Payment GatewayDecember 31, 2010 SecurityMetrics

Hanover Direct Payment GatewaySeptember 30, 2011 Fortrex Technologies

Harland Clarke OtherJune 30, 2011 Verizon Business

Harland Financial Solutions AuthorizationAugust 31, 2011 Crowe Horwath

Clearing & Settlement

MOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

Harris Connect Payment GatewayDecember 31, 2010 Trustwave

Harte-Hanks Merchant ServicesJune 30, 2011 CyberEnsure LLC

Hearst Communication Inc Merchant ServicesMay 31, 2011 Solutionary, Inc.

Payment Gateway/Switch

Heartland Payment Systems AuthorizationApril 30, 2011 Coalfire

Clearing & Settlement

MOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Switching

Heartland Payment Systems – mySchoolBucks

IPSP (E-commerce)August 31, 2011 Tevora Business Solutions

Helcim Inc. Payment Gateway/SwitchJune 30, 2011 SPIguard Security Solutions Inc.

Payment Processing - Internet

Payment Processing - MOTO

Hewlett-Packard (TD Bank Environment)

Clearing & SettlementJune 30, 2011 TELUS Security Solutions

Hosting Provider- HardwareManaged Services

Payment Processing - ATM

Payment Processing - POS

Higher One Payments Inc. (CASHNet)

Payment GatewayDecember 31, 2011 403 Labs, LLC

Payment Processing - Internet

39 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 40: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Higher One Payments Inc. (CASHNet)

Payment Processing - POSDecember 31, 2011 403 Labs, LLC

Hinda, Inc. Loyalty ProgramsJanuary 31, 2011 Tech Lock Inc

Hitachi Systems Ltd. AuthorizationJune 30, 2011 Internet Secuirty Services

Issuing Processing

Payment Gateway

Host.net Hosting ProviderDecember 30, 2011 BrightLine CPAs and Associates, Inc.

Other

HostedPCI Hosting Provider - WebMarch 31, 2011 NCI Secured Intellgence

Payment Gateway/Switch

Hosting.com Hosting ProviderApril 30, 2011 Trustwave

Other

HP Commercial Card (EDS) AuthorizationMay 31, 2011 Trustwave

Issuing Processing

HP Consumer Card Services (EDS)

Account Billing ServicesOctober 31, 2010 Trustwave

Account Collections

Issuing Processing

Statement Processing

HP Consumer Direct Clearing & SettlementSeptember 30, 2011 Arsenal Security Group

Hosting ProviderIPSP (E-commerce)Payment Gateway

HP EDS Merchant Acquirer AuthorizationOctober 31, 2011 Arsenal Security Group

Clearing & SettlementPayment Gateway

Switching

HP Guidance Authorization AuthorizationOctober 31, 2011 Arsenal Security Group

Issuing Processing

HP Oregon eGovernment (EDS)

Payment GatewayJune 30, 2011 Trustwave

HP Pay for Convenience (EDS)

Payment GatewayApril 30, 2011 Trustwave

HP Surveyor (EDS) OtherAugust 31, 2011 Trustwave

Hughes Network Systems Network Provider/Transmitter

September 30, 2011 IBM Internet Security Systems

Hyperativa Consultoria e Internet LTDA

Loyalty ProgramsJanuary 31, 2011 Cipher

40 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 41: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

HyperQuality, Inc. OtherApril 30, 2011 ControlCase

i2c Incorporated AuthorizationNovember 30, 2011 Trustwave

Issuing Processing

Payment Gateway

IATS Payment GatewayDecember 31, 2011 Internet Security Systems (ISS)

IC Systems Clearing & SettlementAugust 31, 2011 RSM McGladrey

iCongo Hosting ProviderJanuary 31, 2011 NetSPI

ID Analytics, Inc. OtherJune 30, 2011 Computer Task Group

iMax Bancard OtherDecember 31, 2011 SecurityMetrics

IModules Software, Inc Hosting Provider - WebAugust 31, 2011 FishNet Security

Network Provider/TransmitterPayment Processing - Internet

InComm AuthorizationSeptember 30, 2011 IBM Internet Security Systems

Issuing Processing

Other

Industry Retail Group OtherNovember 30, 2011 Trustwave

INetU, Inc. Hosting ProviderJanuary 31, 2012 Trustwave

Managed Services

Infinity Data Clearing & SettlementOctober 31, 2011 Information Exchange

Merchant Services

InfoGroup OtherMarch 31, 2011 Solutionary, Inc.

Infusion Software MOTO Payment ProcessingJuly 31, 2011 SecurityMetrics

Payment Gateway

Innotrac Corporation IPSP (E-commerce)August 31, 2011 Trustwave

MOTO Payment Processing

Payment Gateway

Innovis Data Solutions, Inc. OtherApril 30, 2011 Verizon Business

IN-SOLUTIONS GLOBAL PVT LIMITED

Back Office ServicesApril 30, 2011 SISA Information Security

Clearing & SettlementIssuer Processing

Other

InstaMed Communications Payment GatewayFebruary 28, 2011 Trustwave

41 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 42: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

InstaMed Communications Process Magnetic-Stripe Transactions

February 28, 2011 Trustwave

Integrity Payment Systems Clearing & SettlementMarch 31, 2011 K3DES

Other

InteliSpend Prepaid Solutions

Issuing ProcessingSeptember 30, 2011 IBM Security Services

Loyalty Programs

Intellipay Clearing & SettlementFebruary 28, 2011 Trustwave

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

InterceptEFT Payment GatewaySeptember 30, 2011 Coalfire

Interface Security Secure - Managed Broadband

Network Provider/Transmitter

June 30, 2011 SecurityMetrics

International Bancard Corporation

Clearing & SettlementNovember 30, 2011 Information Exchange Inc.

Merchant Services

INTERNATIONAL CARD PROCESSING SERVICES LTD

Issuer ProcessingJune 30, 2011 ControlCase

Payment Processing - ATM

Payment Processing - POS

INTERNATIONAL CARD SYSTEMS AD (CASYS AD)

Clearing & SettlementAugust 31, 2011 Acertigo AG

Payment Gateway/Switch

Payment Processing - ATM

Payment Processing - InternetPayment Processing - POS

Internet Payment Exchange Network Provider/Transmitter

July 31, 2011 ANX

Payment Processing - Internet

Records Management

Internet Ticketing Systems, Inc

OtherJuly 31, 2011 SecurityMetrics

Payment Gateway/Switch

Payment Processing - InternetPayment Processing - POS

Interpro Group, Inc. OtherOctober 31, 2010 K3DES

42 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 43: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Intersections AuthorizationFebruary 28, 2011 Control Case

IPSP (E-commerce)

Interspire pty Ltd. Hosting ProviderNovember 30, 2011 Payment Software Company, LLC (PSC)

MOTO Payment Processing

INTESA SANPAOLO CARD D.O.O. (LTD)

AuthorizationDecember 31, 2011 Trustwave

Clearing & SettlementIPSP (E-commerce)Issuing Processing

Loyalty Programs

Payment GatewayProcess Magnetic-Stripe Transactions

Switching

Verified by Visa Access Control Server

Intrix Technology Inc. IPSP (E-commerce)March 31, 2011 Trustwave

Payment GatewayProcess Magnetic-Stripe Transactions

Intuit BackOffice Back Office ServicesNovember 30, 2011 Trustwave

Clearing & SettlementFraud and Chargeback Services

Other

Intuit Electronic Clearing House (ECHO, Inc.)

AuthorizationApril 30, 2011 Trustwave

Clearing & SettlementPayment Gateway

Process Magnetic-Stripe Transactions

Switching

Intuit Merchant OtherOctober 31, 2011 Trustwave

Intuit Processor Account ManagementOctober 31, 2011 Trustwave

Clearing & SettlementMerchant ServicesOther

Payment Gateway/Switch

Payment Processing - Internet

Prepaid Services

Intuition Systems, Inc. a.k.a Bill2Pay

Payment GatewayOctober 31, 2011 SecurityMetrics

43 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 44: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

IP Commerce OtherOctober 31, 2011 Coalfire

Payment Gateway

IP PAYMENTS PTY LTD Payment Gateway/SwitchAugust 31, 2011 Vectra Corporation

Payment Processing - Internet

iPass, Inc. OtherMarch 31, 2011 Digital Resources Group (DRG)

iPayment OtherJune 30, 2011 Trustwave

IPS Group Inc. Payment Gateway/SwitchOctober 31, 2011 Tevora Business Solutions

iQmetrix Payment Processing - Internet

August 31, 2011 Seccuris, Inc.

IRN Payment Systems Clearing & SettlementFebruary 28, 2011 Information Exchange

Merchant Services

Iron Mountain OtherMay 31, 2011 Neohapsis Inc.

iTransact MOTO Payment ProcessingMay 31, 2011 Specialized Security Services, Inc.

Payment Gateway

Process Magnetic-Stripe Transactions

ITS Inc./Shazam Inc. AuthorizationApril 30, 2012 Trustwave

Clearing & SettlementPayment GatewayProcess Magnetic-Stripe Transactions

Switching

Iveri Payment Technology AuthorizationMarch 31, 2011 Trustwave

IPSP (E-commerce)

MOTO Payment Processing

Switching

J.J. MacKay Canada Limited/MacKay Meters, Inc. (MacKay Meters)

Payment GatewayNovember 30, 2011 Trustwave

Jaded Pixel Technologies Hosting Provider - WebJuly 31, 2011 IOActive, Inc.

Managed Services

JetPay, LLC Clearing & SettlementApril 30, 2011 Trustwave

Payment Gateway

jha Payment Processing Solutions

Clearing & SettlementJune 30, 2011 Coalfire Systems Inc.

Issuing ProcessingLoyalty Programs

44 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 45: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

jha Payment Processing Solutions

Payment GatewayJune 30, 2011 Coalfire Systems Inc.

JP Morgan Chase Pay Connexion

Payment Processing - Internet

April 30, 2011 Jefferson Wells

JSC Chronopay IPSP (E-commerce)November 30, 2010 SRC Security Research & Consulting GmbH (SRC)

MOTO Payment Processing

Payment Gateway

JSC Georgian Card AuthorizationOctober 31, 2011 Trustwave

Clearing & Settlement

IPSP (E-commerce)Issuing Processing

MOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

JSC SMARTCARDLINK Payment Gateway/SwitchApril 30, 2011 Sysnet Global Solutions

Payment Processing - Internet

JSC TRANSCREDITCARD AuthorizationOctober 31, 2010 Evraas.I.T

E-CommerceIssuing ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

JSC United Financial Corporation

AuthorizationFebruary 28, 2011 Trustwave

Clearing & SettlementIssuing Processing

Other

Process Magnetic-Stripe TransactionsSwitching

Kalio Payment GatewayFebruary 28, 2011 SecurityMetrics

KeyBank Lockbox Payment Processing - MOTO

January 31, 2012 SecureState

Records Management

Kimbia, Inc. Hosting Provider - WebOctober 31, 2011 Compass IT Compliance, LLC

Payment Processing - Internet

Klik Technologies, Corp. OtherSeptember 30, 2011 Information Exchange

45 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 46: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Klik Technologies, Corp. Payment Gateway/SwitchSeptember 30, 2011 Information Exchange

Kobie Marketing, Inc. Loyalty ProgramsDecember 31, 2011 BrightLine CPAs and Associates, Inc.

Kony Solutions, Inc Payment GatewayFebruary 28, 2011 403 Labs, LLC

Kount, Inc (A Division of Keynetics, Inc)

OtherMarch 31, 2011 Trustwave

Kubra Data Transfer, Inc. Payment GatewayJuly 31, 2011 Trustwave

Layered Tech, formerly GSI Hosting

Hosting ProviderMay 31, 2011 BrightLine CPAs and Associates, Inc.

LesConcierges Loyalty ProgramsMarch 31, 2011 Digital Resources Group (DRG)

Lethoff, Inc. AuthorizationNovember 30, 2010 Trustwave

Payment Gateway

Lighthouse1 OtherFebruary 28, 2011 Jefferson Wells

Litle & Co AuthorizationJanuary 31, 2011 Payment Software Company (PSC)

Clearing & Settlement

Payment Gateway

LiveOps, Inc OtherJuly 31, 2011 Trustwave

LiveVox, Inc. OtherOctober 31, 2010 Verizon Business

LLC Multifunctional Processing Company

ATM ProcessingJanuary 31, 2011 FortConsult

AuthorizationClearing & Settlement

Internet Payment ProcessingMerchant POS Processing

MOTO Payment Processing

Process Magnetic-Stripe Transactions

LOTSolutions / Life of the South

MOTO Payment ProcessingJune 30, 2011 Trustwave

Other

Lundquist Consulting OtherDecember 31, 2010 Trustwave

Maas Global Solutions Corporation

AuthorizationOctober 31, 2011 Digital Resources Group (DRG)

MOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

46 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 47: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Magensa Fraud and Chargeback Services

August 31, 2011 Coalfire

Payment Gateway/Switch

Payment Processing - InternetPayment Processing - MOTO

Payment Processing - POS

Magic-Wrighter, Inc. AuthorizationJuly 31, 2011 Trustwave

Payment Gateway

Maintech SwitchingNovember 30, 2011 IBM Internet Security Systems

MAKO NETWORKS LIMITED

OtherFebruary 28, 2011 Verizon Business

Maritz Loyalty Marketing Loyalty ProgramsDecember 31, 2011 IBM Internet Security Systems

Maritz Travel OtherAugust 31, 2011 IBM Internet Security Systems

MarketLive Hosting ProviderOctober 31, 2011 AT&T Consulting Solutions

MBS Insight, Inc OtherMay 31, 2011 K3DES

MBS Textbook Exchange, Inc. - inSite

Payment GatewaySeptember 30, 2011 Trustwave

MBU d.o.o. 3-D Secure Access Control Server

August 31, 2011 Trustwave

AuthorizationClearing & Settlement

IPSP (E-commerce)

Issuing ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Switching

McKesson - RelayHealth IPSP (E-commerce)April 30, 2011 Trustwave

MOTO Payment ProcessingPayment Gateway

Mediterranean Smart Cards Company

3-D Secure Access Control Server

November 30, 2011 Trustwave

AuthorizationClearing & Settlement

Issuing Processing

Payment Gateway

Process Magnetic-Stripe Transactions

47 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 48: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Mediterranean Smart Cards Company

SwitchingNovember 30, 2011 Trustwave

MegaPath OtherJanuary 31, 2011 Trustwave

Member Solutions, Inc. AuthorizationSeptember 30, 2011 Trustwave

Clearing & Settlement

MOTO Payment Processing

Payment Gateway

Merchant e-Solutions AuthorizationJuly 31, 2011 Digital Resources Group (DRG)

Clearing & SettlementMOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Merchant Link, LLC Payment GatewayJanuary 31, 2011 Trustwave

Merchant One, Inc. Clearing & SettlementMarch 31, 2011 Information Exchange

Merchant Services

Merchant Partners Clearing & SettlementJuly 31, 2011 Information Exchange

Merchant Services

Payment Gateway/Switch

Payment Processing - Internet

Payment Processing - MOTO

Payment Processing - POS

Merchant Plus Payment GatewayJuly 31, 2011 Trustwave

Merchant Processing International

Fraud and Chargeback Services

May 31, 2011 Intersec Worldwide

Prepaid Services

Merchant Services LTD Merchant ServicesApril 30, 2011 The Compliance and Audit Group

Merchant Services Processing at Bank of America, NA

Clearing & SettlementMarch 31, 2011 Trustwave

Payment Gateway

Switching

Merchant Warehouse Payment GatewayMarch 31, 2011 Trustwave

Merchants Billing Services Clearing & SettlementNovember 30, 2011 Information Exchange Inc.

IPSP (E-commerce)

Merchant Services

MOTO Payment Processing

48 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 49: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Merchants Billing Services Payment GatewayNovember 30, 2011 Information Exchange Inc.

Payment Processing - Internet

Merchants’ Choice Payment Solutions

OtherSeptember 30, 2011 K3DES LLC

Mercury Payment Systems Payment GatewayNovember 30, 2011 Coalfire

Meridian Enterprises, Inc. AuthorizationDecember 31, 2010 Protiviti Inc.

Issuing Processing

Meritus Payment Solutions Merchant ServicesAugust 31, 2011 403 Labs

Payment Gateway/SwitchPayment Processing - Internet

Payment Processing - POS

Meta Payment Systems Clearing & SettlementApril 30, 2011 Trustwave

MetaSource OtherMarch 31, 2011 Compass IT

Metavante Biller Solution Product (BSP)

Billing ManagementSeptember 30, 2011 Trustwave

Metavante Healthcare Payment Solutions Group, Benefits Payment Systems

Account ManagementFebruary 28, 2011 TrustWave

Billing and Customer Support

Employee Benefits ProgramsHealth Savings Account Services

Prepaid Employee Benefits Programs

MICROPAGOS S.A. IPSP (E-commerce)February 28, 2011 CYBSEC SA

Micros Systems, Inc. Payment GatewayJanuary 31, 2011 Trustwave

Microsoft Dynamics Online AuthorizationMay 31, 2011 Trustwave

IPSP (E-commerce)

MOTO Payment ProcessingPayment GatewayProcess Magnetic-Stripe Transactions

Microsoft Tellme MOTO Payment ProcessingSeptember 30, 2011 Trustwave

Other

Minacs Worldwide Inc. Account ManagementApril 30, 2011 Trustwave

Loyalty ProgramsMOTO Payment Processing

49 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 50: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Minacs Worldwide Inc. OtherApril 30, 2011 Trustwave

Prepaid Services

Mindbody Hosting ProviderSeptember 30, 2011 Payment Software Company (PSC)

Payment Gateway

Moneris Solutions Corp - Shared Cash Dispensing Royal Bank of Canada

AuthorizationJuly 31, 2011 Control Gap

Clearing & Settlement

Process Magnetic-Stripe Transactions

Switching

Moneris Solutions Inc. 3-D Secure Access Control Server

July 31, 2011 Control Gap

Clearing & SettlementMOTO Payment Processing

Process Magnetic-Stripe Transactions

Monexa Solutions, Inc. OtherJanuary 31, 2011 Payment Software company (PSC)

Money Movers, Inc AuthorizationFebruary 28, 2011 Digital Resources Group (DRG)

Clearing & Settlement

Payment Gateway

MoneyGram Payment Systems / Property Bridge

IPSP (E-commerce)May 31, 2011 Payment Software Company (PSC)

Other

Moneytree ATM Digital Network Solutions LLC

Clearing & SettlementApril 30, 2011 Information Exchange

Merchant Services

Payment Gateway/SwitchPayment Processing - ATM

Monitise Americas Account ManagementSeptember 30, 2011 Trustwave

Moore Wallace OtherFebruary 28, 2011 Solutionary, Inc

Motionsoft Hosting ProviderDecember 31, 2010 Trustwave

Motivational Fulfillment & Logistics Services

Payment Processing - MOTO

February 28, 2011 Tevora Business Solutions

mPay Gateway Billing ManagementSeptember 30, 2011 SecurityMetrics

Payment Gateway/Switch

Prepaid Services

MPOS AUSTRALIA PTY LTD

MOTO Payment ProcessingOctober 31, 2010 Vectra Corporation Limited

50 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 51: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

MPOS AUSTRALIA PTY LTD

OtherOctober 31, 2010 Vectra Corporation Limited

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

MSI - Merchant Services, Inc. NJ

Clearing & SettlementMarch 31, 2011 Information Exchange

Merchant Services

MSX International AuthorizationDecember 31, 2010 Nuspire Networks

Mtrex (Vision Bankcard, Inc.)

IPSP (E-commerce)February 28, 2011 Trustwave

Payment GatewayProcess Magnetic-Stripe Transactions

MTXEPS Payment GatewayOctober 31, 2011 Trustwave

Process Magnetic-Stripe Transactions

Switching

Multi Service Corp AuthorizationFebruary 28, 2011 Trustwave

Clearing & Settlement

Payment GatewayProcess Magnetic-Stripe Transactions

National Bankcard Services Clearing & SettlementOctober 31, 2011 RSM McGladrey

Loyalty Programs

Payment Gateway/Switch

Payment Processing - POS

National Credit Cards Clearing & SettlementJuly 31, 2011 NVision Group

Issuer Processing

Other

Payment Gateway/SwitchPayment Processing - ATM

National Fulfillment Services (NFS)

AuthorizationOctober 31, 2011 SecurityMetrics

Clearing & Settlement

Hosting ProviderMOTO Payment Processing

Payment Gateway

National Information Solutions Cooperative

Payment GatewayMay 31, 2011 Trustwave

National Merchant Center AuthorizationDecember 31, 2011 Digital Resources Group (DRG)

51 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 52: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

National Merchant Center IPSP (E-commerce)December 31, 2011 Digital Resources Group (DRG)

MOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe Transactions

National Processing Company

OtherSeptember 30, 2011 Trustwave

National Records Management

OtherAugust 31, 2011 403 Labs

National Systems Corporation / QuikOrder, Inc.

AuthorizationJuly 31, 2011 Trustwave

Hosting Provider

Nationwide Payment Solutions

AuthorizationNovember 30, 2010 Information Exchange

Clearing & Settlement

Payment Gateway

NBX Merchant Services, Inc. DBA Optimal Payments

Clearing & SettlementDecember 31, 2011 Trustwave

Payment Gateway

NCMIC Finance Corporation OtherOctober 31, 2011 SecurityMetrics

NCO Group OtherNovember 30, 2010 Payment Software Company (PSC)

Nebraska Electronic Transfer System, Inc.

Clearing & SettlementNovember 30, 2011 Trustwave

Payment Gateway/Switch

Payment Processing - ATM

Nelnet Business Solutions, Inc

AuthorizationApril 30, 2011 Trustwave

Payment Gateway

NeoSpire, Inc. Hosting ProviderApril 30, 2011 Trustwave

NETBilling Payment GatewayNovember 30, 2010 SecurityMetrics

NetCentrix Billing ManagementApril 30, 2011 INFORMATION EXCHANGE, INC

Clearing & Settlement

Loyalty ProgramsMerchant ServicesPayment Gateway/Switch

Payment Processing - Internet

Payment Processing - MOTO

52 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 53: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

NetCentrix Payment Processing - POSApril 30, 2011 INFORMATION EXCHANGE, INC

netSpend Corporation Clearing & SettlementJune 30, 2011 Coalfire Systems. Inc.

Issuer ProcessingPayment Gateway/Switch

Payment Processing - ATM

Payment Processing - InternetPrepaid Services

NetSuite Hosting ProviderJanuary 31, 2012 Trustwave

Payment Gateway

Network Merchants Payment GatewayMarch 31, 2011 Trustwave

NETWORK PROCESSING COMPANY S.A.E. (NPC)

AuthorizationJune 30, 2011 Trustwave

Clearing & Settlement

Issuing Processing

MOTO Payment Processing

Payment GatewaySwitching

Network Solutions Hosting Provider - WebNovember 30, 2011 Payment Software Company (PSC)

Newtek Merchant Solutions Clearing & SettlementOctober 31, 2011 SecurityMetrics

Loyalty Programs

NEXTAG, INC. Hosting ProviderJune 30, 2011 Trustwave

IPSP (E-commerce)

NEXUS, S.A. AuthorizationAugust 31, 2011 403 Labs, LLC

Clearing & SettlementIssuing Processing

nFinanSe Inc Account ManagementJune 30, 2011 Security Horizon, Inc.

Issuer ProcessingPrepaid Services

NIC Services, LLC Payment GatewayJune 30, 2011 Trustwave

North American Bancard Clearing & SettlementOctober 31, 2011 Information Exchange

Merchant Services

Payment Gateway/Switch

Payment Processing - InternetPayment Processing - POS

NPC Secure AuthorizationMarch 31, 2011 Trustwave

Payment Gateway

53 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 54: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

NPC Secure Process Magnetic-Stripe Transactions

March 31, 2011 Trustwave

NRT Technologies, Inc. AuthorizationFebruary 28, 2011 Trustwave

Clearing & SettlementProcess Magnetic-Stripe Transactions

Switching

Nuance Communications, Inc.

OtherJuly 31, 2011 Trustwave

NYCE Payments Network, LLC

AuthorizationApril 30, 2011 Trustwave

Oak Leaf Systems, Inc. Hosting ProviderFebruary 28, 2011 Raven Eye

Obopay Clearing & SettlementAugust 31, 2011 Digital Resources Group, LLC

MOTO Payment Processing

Other

OCA S.A. Issuer ProcessingJuly 31, 2011 Cybsec S.A.

Payment Gateway/Switch

Payment Processing - POS

Official Payments Corporation

Clearing & SettlementFebruary 28, 2011 Trustwave

IPSP (E-commerce)

MOTO Payment Processing

Payment GatewaySwitching

Ogone AuthorizationFebruary 28, 2011 NTT Security Limited

Clearing & Settlement

Payment GatewayProcess Magnetic-Stripe Transactions

OneBridge, Inc. Issuing ProcessingOctober 31, 2010 Crowe Horwath LLP

Switching

Onestop Internet, Inc. Merchant ServicesOctober 31, 2011 Neohapsis, Inc.

Open Solutions Issuing ProcessingApril 30, 2011 K3DES

Other

Open Solutions Canada Payment GatewayJuly 31, 2011 K3DES

Switching

OpSource Hosting ProviderFebruary 28, 2011 Trustwave

IPSP (E-commerce)MOTO Payment Processing

54 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 55: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

OpSource Payment GatewayFebruary 28, 2011 Trustwave

Opticard Payment Services Inc.

Clearing & SettlementApril 30, 2011 Information Exchange

Issuer ProcessingMerchant Services

Payment Gateway/Switch

Payment Processing - InternetPayment Processing - MOTO

Payment Processing - POS

Optimal Payments Clearing & SettlementJune 30, 2011 Trustwave

Payment Gateway

Oracle ATG Web Commerce On Demand

IPSP (E-commerce)October 31, 2011 Coalfire

Oracle EasyPay Hosting ProviderAugust 31, 2011 Coalfire

IPSP (E-commerce)

Oracle E-Billing Hosting ProviderAugust 31, 2011 Coalfire Systems

IPSP (E-commerce)

Oracle On Demand Service Hosting ProviderAugust 31, 2011 Coalfire

IPSP (E-commerce)

ORBIT Systems Inc. Hosting ProviderFebruary 28, 2011 Raven Eye

ORBITALL SERVICOS E PROCESSAMENTO DE INFORMACOES COMERCIAIS LTDA.

AuthorizationOctober 31, 2011 CPqD

Hosting Provider

Issuing ProcessingMOTO Payment Processing

Process Magnetic-Stripe Transactions

Switching

ORCC - eCommerce Division: Columbus

OtherNovember 30, 2011 Trustwave

ORCC - eCommerce Division: Parsippany

OtherOctober 31, 2011 Trustwave

ORCC - eCommerce Division: Princeton

Payment GatewayMay 31, 2011 Trustwave

ORCS Web, Inc. Hosting Provider - WebMay 31, 2011 igxglobal, Inc.

OrderMotion Payment Processing - Internet

May 31, 2011 Trustwave

55 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 56: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

OrderTalk IPSP (E-commerce)September 30, 2011 Trustwave

MOTO Payment Processing

Payment Gateway

OverDrive Inc Clearing & SettlementDecember 31, 2010 NetWorks Group

Payment Gateway

Payment Processing

Paciolan, Inc. Hosting ProviderOctober 31, 2011 Trustwave

Payment Gateway

Process Magnetic-Stripe Transactions

Palm Coast Data IPSP (E-commerce)December 31, 2011 K3DES

MOTO Payment Processing

Payment Gateway

PAMS Lunchroom LLC IPSP (E-commerce)August 31, 2011 Trustwave

MOTO Payment Processing

Panasonic Avionics Corporation

Payment Gateway/SwitchApril 30, 2011 Tevora Business Solutions

Paramount Acceptance OtherJune 30, 2011 SecurityMetrics, Inc.

Payment Gateway

Parkeon Payment GatewayMay 31, 2011 Trustwave

Parkmobile USA, Inc. OtherDecember 31, 2011 Coalfire Systems, Inc.

Passkey International, Inc. OtherJuly 31, 2011 IOActive Inc.

Passport EFT Solutions AuthorizationDecember 31, 2010 Trustwave

Switching

Passport Health Communications, Inc.

Payment GatewayFebruary 28, 2011 Trustwave

Patronpath, LLC IPSP (E-commerce)December 31, 2011 Crowe Horwath LLP

Pay DQ Payment GatewayNovember 30, 2010 Solutionary

PAY.ON IPSP (E-commerce)December 31, 2010 Acertigo AG

Payment Gateway

PayCommerce Inc. IPSP (E-commerce)October 31, 2011 Trustwave

MOTO Payment Processing

Payment Gateway

PayJunction OtherApril 30, 2011 Payment Software Company (PSC)

Payment Gateway

PayLeap LLC Clearing & SettlementFebruary 28, 2011 Information Exchange

56 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 57: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

PayLeap LLC Payment Gateway/SwitchFebruary 28, 2011 Information Exchange

Payment Data Systems Clearing & SettlementMay 31, 2011 Information Exchange Inc.

Issuer Processing

Merchant ServicesPayment Gateway/Switch

Payment Processing - POS

Payment Processing, Inc. IPSP (E-commerce)April 30, 2011 Trustwave

MOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe Transactions

Payment Service Network Payment GatewayDecember 31, 2010 Digital Resources Group (DRG)

Paymentus Corporation OtherOctober 31, 2011 SPIguard

Payment Gateway/Switch

Payment Processing - POS

Paymetric AuthorizationAugust 31, 2011 Trustwave

Clearing & Settlement

OtherPayment Gateway

Pay-O-Matic Corp OtherMarch 31, 2011 Jefferson Wells, Inc.

PayPal IPSP (E-commerce)December 31, 2011 K3DES

MOTO Payment ProcessingPayment Gateway

PaySimple Payment GatewaySeptember 30, 2011 Coalfire

PayTrace Clearing & SettlementAugust 31, 2011 Information Exchange

Merchant Services

Payment Gateway/Switch

Payment Processing - InternetPayment Processing - MOTO

Payment Processing - POS

Payvision BV AuthorizationAugust 31, 2011 Trustwave

IPSP (E-commerce)

Loyalty Programs

MOTO Payment ProcessingOther

Payment Gateway

PBD Worldwide Fulfillment Services

Clearing & SettlementJuly 31, 2011 Trustwave

57 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 58: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

PBD Worldwide Fulfillment Services

Hosting ProviderJuly 31, 2011 Trustwave

IPSP (E-commerce)

Payment Gateway

Peak 10, Inc. Hosting Provider- HardwareDecember 31, 2011 BrightLine CPAs and Associates, Inc.

PFSweb, Inc. AuthorizationApril 30, 2011 Trustwave

Clearing & SettlementIPSP (E-commerce)MOTO Payment Processing

Phoenix Managed Networks, LLC

OtherAugust 31, 2011 igxglobal, Inc.

Payment Gateway/Switch

PhoenixNap, LLC Hosting ProviderJanuary 31, 2011 Coalfire

Phreesia Payment GatewayJanuary 31, 2011 Trustwave

Pipeline Data Payment Gateway/SwitchNovember 30, 2011 Coalfire Systems. Inc.

Payment Processing - InternetPayment Processing - MOTO

Payment Processing - POS

Pitney Bowes Payment GatewayMarch 31, 2011 IBM Internet Security Systems

Pivotal Payments Clearing & SettlementFebruary 28, 2011 SecurityMetrics

Loyalty Programs

Payment Gateway

Planet Payment AuthorizationMarch 31, 2011 Trustwave

Clearing & SettlementMOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe Transactions

Plug & Pay Technologies, Inc.

Clearing & SettlementJune 30, 2011 SecurityMetrics

MOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe Transactions

POS Portal OtherAugust 31, 2011 Coalfire Systems. Inc.

Posatel Inc. AuthorizationMarch 31, 2011 SPIguard Security Solutions Inc.

Clearing & Settlement

58 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 59: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Posatel Inc. Issuing ProcessingMarch 31, 2011 SPIguard Security Solutions Inc.

Process Magnetic-Stripe Transactions

Switching

POST Integrations, Inc. (Ebocom, LLC)

Clearing & SettlementApril 30, 2011 Verizon Business Network Services Inc.

Powa Technologies Payment Processing - Internet

October 31, 2011 SecurityMetrics

PowerPay, LLC OtherOctober 31, 2011 Payment Software Company (PSC)

PreCash, Inc. OtherDecember 31, 2010 Trustwave

Preferred Health Technology Payment GatewayAugust 31, 2011 Trustwave

PREMIER TECHNOLOGIES PTY LTD

IPSP (E-commerce)March 31, 2011 Witham Laboratories

Payment Gateway

Prepaid Solutions Inc. Clearing & SettlementFebruary 28, 2011 INFORMATION EXCHANGE, INC

Issuing Processing

Presto - Publix Super Markets

OtherOctober 31, 2011 Solutionary

Switching

Primoris Services LLC Clearing & SettlementJuly 31, 2011 SecurityMetrics

IPSP (E-commerce)MOTO Payment Processing

Payment Gateway

Princeton Payment Solutions, LLC

Payment Gateway/SwitchOctober 31, 2011 SecurityMetrics

Priority Payment Systems OtherApril 30, 2011 SecurityMetrics

Payment Gateway

PROCARD SERVICES FZ LLC

AuthorizationJuly 31, 2011 Trustwave

Clearing & Settlement

Issuing ProcessingMOTO Payment Processing

Switching

Procecard, S.A. Billing ManagementMay 31, 2011 Internet Security Systems

Payment Gateway/Switch

Payment Processing

Payment Processing - ATM

Process America Clearing & SettlementSeptember 30, 2011 Information Exchange

59 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 60: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Process America Merchant ServicesSeptember 30, 2011 Information Exchange

Payment Gateway/Switch

Payment Processing - Internet

ProfitStars Payment GatewaySeptember 30, 2011 Coalfire Systems

Promoción y Operación S.A. de C.V. (PROSA)

Clearing & SettlementNovember 30, 2011 403 Labs

Issuer ProcessingPayment Gateway/Switch

Payment Processing - ATMPayment Processing - POS

ProPay USA, Inc. AuthorizationJune 30, 2011 SecurityMetrics

Issuing Processing

Payment Gateway

Process Magnetic-Stripe Transactions

Propco Marketing Loyalty ProgramsApril 30, 2011 Neohapsis, Inc.

PSCU Financial Services, Inc.

Payment GatewayFebruary 28, 2011 Verizon Business

PSiGate Payment GatewayApril 30, 2011 Trustwave

PSOnline, LLC OtherAugust 31, 2011 ControlCase

PSP Card Services Inc. Issuing ProcessingFebruary 28, 2011 Control Gap Inc.

Process Magnetic-Stripe Transactions

Pulse Network LLC SwitchingJuly 31, 2011 K3DES

PURE COMMERCE PTY LTD

Account ManagementNovember 30, 2011 Vectra Corporation

Back Office Services

Clearing & Settlement

Data PreparationFraud and Chargeback Services

Managed Services

OtherPayment Gateway/Switch

Payment Processing - ATM

Payment Processing - InternetPayment Processing - MOTO

Payment Processing - POS

Records Management

60 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 61: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Qgiv Payment GatewayMay 31, 2011 SecurityMetrics

QS/1 AuthorizationJune 30, 2011 Trustwave

Payment Gateway

Quality Technology Services Hosting ProviderApril 30, 2011 NDB Advisory

Other

QuanComm, Inc. Payment GatewayJuly 31, 2011 Trustwave

Quantum Services Payment Gateway/SwitchSeptember 30, 2011 Raven Eye

Payment Processing - Internet

Payment Processing - MOTOPayment Processing - POS

Qwest Communications Hosting ProviderMay 31, 2011 Trustwave

Other

Rackspace Hosting Hosting ProviderJuly 31, 2011 Trustwave

Radiant Systems - ALOHA COMMAND CENTER

Payment GatewayJanuary 31, 2011 Coalfire Systems, Inc.

Radiant Systems - ALOHA TAKEOUT

Payment GatewayOctober 31, 2010 Coalfire

Radiant Systems - CP GATEWAY

Payment GatewayOctober 31, 2011 Coalfire

Radiant Systems - CPOnline IPSP (E-commerce)November 30, 2011 Coalfire Systems. Inc.

Radiant Systems - PCI DATA CENTERS

Hosting ProviderOctober 31, 2010 Coalfire

Rainbow Rewards Loyalty ProgramsFebruary 28, 2011 Coalfire Systems. Inc.

Rapid Investments, Inc. Issuer ProcessingSeptember 30, 2011 ControlCase LLC

Ready Financial Group OtherJuly 31, 2011 Trustwave

RealPage, Inc. Payment GatewayJune 30, 2011 Trustwave

Rearden Commerce IPSP (E-commerce)April 30, 2011 IBM Internet Security Systems

Other

Recurly, Inc. Hosting ProviderJanuary 31, 2011 Trustwave

Switching

Redbanc, S.A. Clearing & SettlementJune 30, 2011 Xtrategies, LLC

Process Magnetic-Stripe Transactions

Switching

61 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 62: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Redcats USA IPSP (E-commerce)March 31, 2011 Trustwave

Redfin Network, Inc. Payment GatewayOctober 31, 2011 Trustwave

RegOnline AuthorizationApril 30, 2011 Coalfire

Clearing & SettlementPayment Gateway

Resurgent Capital Services OtherAugust 31, 2011 Protiviti

Retail Decisions 3-D Secure Hosting ProviderOctober 31, 2011 Trustwave

Clearing & Settlement

Fraud and Chargeback ServicesHosting Provider - WebPayment Gateway/Switch

Payment Processing - InternetPayment Processing - POS

Retail Point, LLC AuthorizationJuly 31, 2011 Trustwave

Payment Gateway

Rev Worldwide, Inc. AuthorizationMay 31, 2011 403 Labs

Issuing Processing

Revelex Corporation OtherSeptember 30, 2011 Trustwave

RevTrak, Inc AuthorizationMay 31, 2011 Coalfire Systems. Inc.

Payment Gateway

Rewards Network Loyalty ProgramsJuly 31, 2011 Sunera

RewardsNow Loyalty ProgramsMarch 31, 2011 AT&T Consulting Solutions, Inc.

RightNow Technologies, Inc. Hosting ProviderApril 30, 2011 FishNet Security

Other

ROAM Data, Inc. Payment Gateway/SwitchMarch 31, 2011 igxglobal, Inc.

RocketGate Payment Gateway/SwitchOctober 31, 2011 IGX Global

RSI International IPSP (E-commerce)January 31, 2011 Coalfire

Payment Gateway

RT Lawrence Payment GatewayApril 30, 2011 Trustwave

Rycom Inc Network Provider/Transmitter

November 30, 2011 NCI (Net Cyclops Inc.)

S1 Corp. - Postilion Retail POS Environment

Hosting ProviderOctober 31, 2011 Trustwave

Payment Gateway

62 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 63: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

S1 Corp. - Postilion Retail POS Environment

Process Magnetic-Stripe Transactions

October 31, 2011 Trustwave

Sabre GetThere OtherNovember 30, 2011 Verizon Business

Payment Gateway/Switch

Sabre Hospitality Solutions (SynXis)

SwitchingOctober 31, 2011 Fortrex Technologies

Sabre, Inc. Global Distribution SystemJuly 31, 2011 Verizon Business

Hosting Provider - Web

Other

Payment Gateway/Switch

Sage Payment Solutions (formerly Verus Card Services)

Payment Processing - Internet

July 31, 2011 Verizon Business Network Services Inc.

Sallie Mae Payment Gateway/SwitchApril 30, 2011 Specialized Security Services

Satellite Receivers, Ltd. (Cash Depot)

OtherDecember 31, 2011 K3DES

Switching

Savvis, Inc. OtherAugust 31, 2011 COALFIRE SYSTEMS

SBI VERITRANS CO., LTD Clearing & SettlementDecember 31, 2010 ICMS

Payment Gateway

SBW.com LLC Payment Processing - Internet

July 31, 2011 Neohapsis

ScholarChip Card Company, LLC

Payment Gateway/SwitchAugust 31, 2011 SecurityMetrics, Inc.

Prepaid Services

School-Link Technologies OtherApril 30, 2011 Coalfire

Payment Processing - Internet

SecureNet AuthorizationJune 30, 2011 RSM McGladrey Inc.

Clearing & Settlement

Hosting Provider

IPSP (E-commerce)

Loyalty ProgramsMOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

SecureTrading Limited Clearing & SettlementJune 30, 2011 Trustwave

Fraud and Chargeback Services

63 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 64: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

SecureTrading Limited Payment Gateway/SwitchJune 30, 2011 Trustwave

Payment Processing - ATM

Payment Processing - Internet

Payment Processing - MOTO

SegPay Clearing & SettlementAugust 31, 2011 Trustwave

Payment Processing - Internet

Sequoia Retail Systems Hosting ProviderJuly 31, 2011 Digital Resources Group (DRG)

Payment Gateway

Serve Virtual Enterprises, Inc.

Account ManagementMay 31, 2011 Trustwave

Back Office ServicesBilling ManagementClearing & Settlement

Fraud and Chargeback ServicesIssuer Processing

Loyalty Programs

Merchant Services

Network Provider/TransmitterPayment Processing - ATM

Payment Processing - InternetPayment Processing - POSPrepaid Services

Records Management

Servebase 3-D Secure Access Control Server

January 31, 2011 Foregenix

Authorization

Clearing & SettlementIPSP (E-commerce)

MOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

ServiceU Corporation Hosting ProviderApril 30, 2011 K3DES

MOTO Payment ProcessingPayment Gateway

Servicios Electrónicos Globales S.A. de C.V. (E-Global)

AuthorizationOctober 31, 2010 403 Labs

64 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 65: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Servicios Electrónicos Globales S.A. de C.V. (E-Global)

Clearing & SettlementOctober 31, 2010 403 Labs

Issuing Processing

Process Magnetic-Stripe TransactionsSwitching

SHC Direct Loyalty ProgramsApril 30, 2011 Trustwave

Shift4 DOLLARS ON THE NET

Payment Gateway/SwitchMay 31, 2011 Verizon Business

Sigma Micro IPSP (E-commerce)August 31, 2011 Trustwave

MOTO Payment Processing

Payment Gateway

Signature Card Services Loyalty ProgramsOctober 31, 2010 SecurityMetrics

Other

Simmons First National Corporation

Clearing & SettlementSeptember 30, 2011 Trustwave

Simply Easier Payments IPSP (E-commerce)October 31, 2011 Trustwave

Payment Gateway

SITA - PCI Common Use Platform

Managed ServicesJuly 31, 2011 IBM Security Services

Other

SITA Information Networking Computing, USA Inc.

AuthorizationApril 30, 2011 IBM Internet Security Systems

Global Distribution System

IPSP (E-commerce)

OtherSwitching

Six Card Solutions Luxembourg S.A.

AuthorizationApril 30, 2011 NTT Security Limited

IPSP (E-commerce)Payment Gateway

Process Magnetic-Stripe Transactions

Skipjack Financial Services AuthorizationJanuary 31, 2012 Trustwave

Payment Gateway

Process Magnetic-Stripe Transactions

SlimCD Merchant ServicesSeptember 30, 2011 Enterprise Risk Management

Payment Gateway/Switch

65 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 66: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Smart Business Technology, Inc

AuthorizationMarch 31, 2011 T3i

Clearing & Settlement

Loyalty Programs

Payment GatewaySwitching

SmartEtailing, Inc Hosting ProviderSeptember 30, 2011 Digital Resources Group (DRG)

Payment Gateway

SOCIEDADE INTERBANCARIA E SISTEMA DE PAGAMENTOS SARL

SwitchingJanuary 31, 2012 Trustwave

SoftHotel Payment GatewayOctober 31, 2010 Verizon Business Network Services Inc.

Softvoyage Inc Payment Processing - Internet

November 30, 2011 Ubitrak

SoundBite Communications OtherSeptember 30, 2011 K3DES

Spacenet OtherMay 31, 2011 Trustwave

SpeedFC, Inc. Hosting ProviderNovember 30, 2011 Payment Software Company (PSC)

Payment Gateway

Speedpay (Western Union Payment Services)

MOTO Payment ProcessingAugust 31, 2011 Trustwave

Payment Gateway

Spendvision OtherApril 30, 2011 Integralis Ltd

Square, Inc. Payment Gateway/SwitchMay 31, 2011 Coalfire

Payment Processing - Internet

Stafford Associates Managed ServicesOctober 31, 2011 CrimsonSecurity

Stamps.com IPSP (E-commerce)August 31, 2011 Trustwave

MOTO Payment Processing

Payment Gateway

StarCite, Inc. Payment Processing - Internet

February 28, 2011 RSM McGladrey, Inc.

Sterling Payment Technologies

Clearing & SettlementAugust 31, 2011 Trustwave

IPSP (E-commerce)

Loyalty Programs

MOTO Payment ProcessingPayment Gateway

66 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 67: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Sterling Payment Technologies

Process Magnetic-Stripe Transactions

August 31, 2011 Trustwave

Sterling Valley Systems, Inc.- Inntopia

AuthorizationJuly 31, 2011 Trustwave

MOTO Payment ProcessingPayment Gateway

STI PROCESSING LTD. AuthorizationApril 30, 2011 K3DES LLC

Clearing & SettlementIssuing ProcessingMOTO Payment Processing

Process Magnetic-Stripe TransactionsSwitching

StoneEagle Services, Inc. Clearing & SettlementOctober 31, 2011 Information Exchange Inc.

Issuer ProcessingMerchant Services

Payment Gateway/Switch

Payment Processing - Internet

Stored Value Solutions Hosting ProviderSeptember 30, 2011 K3DES LLC

IPSP (E-commerce)Payment Gateway

StoreFinancial Services, LLC

AuthorizationDecember 31, 2010 403 Labs

Issuing ProcessingPayment Gateway

StoresOnline, Inc. / iMergent, Inc

Hosting ProviderJanuary 31, 2011 SecurityMetrics

Payment Gateway

Strategic Fulfillment Group / Dynamic Resource Group (SFG/DRG)

IPSP (E-commerce)August 31, 2011 Trustwave

MOTO Payment Processing

Payment Gateway

STRATEGIC PAYMENTS SERVICES PTY LTD

Issuing ProcessingApril 30, 2011 Verizon Business

Payment Gateway/SwitchPayment Processing - ATM

Payment Processing - MOTOPayment Processing - POS

Strategic Profits Hosting Provider - WebApril 30, 2011 SPIguard Security Solutions Inc.

Managed Services

67 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 68: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Strategic Profits Payment Gateway/SwitchApril 30, 2011 SPIguard Security Solutions Inc.

Payment Processing - Internet

Payment Processing - MOTO

Stripe, Inc Payment GatewayMarch 31, 2011 Payment Software Company (PSC)

SunGard Availability Services

Hosting ProviderFebruary 28, 2011 Fortrex Technologies

SunGard Public Sector Hosting ProviderOctober 31, 2010 SecurityMetrics

Payment Gateway

Superior Financial Systems, LLC

OtherSeptember 30, 2011 Trustwave

Synapse Group, Inc. OtherOctober 31, 2011 Neohapsis Inc.

T.K. Keith Company, Inc. (dba Primax)

OtherJuly 31, 2011 Verizon Business Network Services Inc.

T2 Systems, Inc. MOTO Payment ProcessingNovember 30, 2011 Trustwave

Other

Process Magnetic-Stripe Transactions

TalentBeat, Inc Payment GatewaySeptember 30, 2011 K3DES

Switching

Tangible Software Merchant ServicesDecember 31, 2011 Arsenal Security Group

Payment Gateway/SwitchPayment Processing - Internet

TD Merchant Services AuthorizationMarch 31, 2011 Telus Security Solutions

Tecnicard Inc AuthorizationMay 31, 2011 Xtrategies

Clearing & SettlementIssuing Processing

MOTO Payment Processing

Process Magnetic-Stripe TransactionsSwitching

Teleflora IPSP (E-commerce)February 28, 2011 Trustwave

Payment Gateway

Teleformix, LLC Clearing & SettlementSeptember 30, 2011 RSM McGladrey

Loyalty Programs

Telekenex, Inc. OtherOctober 31, 2011 Trustwave

68 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 69: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Teleperformance Brazil Hosting ProviderApril 30, 2011 British Telecom

Teleperformance USA MOTO Payment ProcessingFebruary 28, 2011 AT&T Consulting Solutions, Inc.

Telered S.A. ATM ProcessingFebruary 28, 2011 Trustwave

Debit Card Processing

POS Payment Processing

TeleTech Holdings MOTO Payment ProcessingAugust 31, 2011 AT&T Consulting

Other

Telvista - Grupo Tecnico de Servicios

Account ManagementJanuary 31, 2012 Trustwave

OtherPayment Processing - MOTO

Teranet Enterprises Inc. IPSP (E-commerce)April 30, 2011 Trustwave

Terremark North America, Inc.

Hosting Provider - WebDecember 31, 2011 BrightLine CPAa & Associates, Inc.

Hosting Provider- Hardware

Tessitura Network, Inc. AuthorizationMay 31, 2011 Trustwave

MOTO Payment Processing

Payment GatewayProcess Magnetic-Stripe Transactions

T-Gate LLC Payment GatewayNovember 30, 2011 Trustwave

The Bancorp Bank Issuing ProcessingSeptember 30, 2011 FishNet Security

The DataBase Group Loyalty ProgramsSeptember 30, 2011 Specialized Security Services

Payment Gateway

The Members Group OtherJanuary 31, 2012 RSM McGladrey

The Shubert Organization AuthorizationFebruary 28, 2011 Trustwave

IPSP (E-commerce)MOTO Payment ProcessingProcess Magnetic-Stripe Transactions

Thermeon Hosting Provider - WebMay 31, 2011 Tevora Business Solutions

Managed Services

Payment Processing - POS

Threshold Financial Technologies

SwitchingJune 30, 2011 Control Gap Inc.

Ticketmaster, LLC MOTO Payment ProcessingJune 30, 2011 Trustwave

Other

69 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 70: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Ticketmaster, LLC Payment GatewayJune 30, 2011 Trustwave

Process Magnetic-Stripe Transactions

TicketNetwork, Inc. Hosting ProviderNovember 30, 2011 Trustwave

Payment Gateway

Tickets.com Advantix AuthorizationNovember 30, 2010 Trustwave

Payment Gateway

Process Magnetic-Stripe Transactions

Tickets.com ProVenue Clearing & SettlementJanuary 31, 2011 Trustwave

IPSP (E-commerce)MOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Tickets.com ProVenue Elite AuthorizationDecember 31, 2011 Trustwave

MOTO Payment Processing

Payment GatewayProcess Magnetic-Stripe Transactions

Tickets.com ProVenue Online

IPSP (E-commerce)January 31, 2011 Trustwave

Payment Gateway

TIES IPSP (E-commerce)January 31, 2011 Trustwave

Payment Gateway

Time Customer Service OtherJuly 31, 2011 Neohapsis, Inc

Payment Gateway/SwitchPayment Processing - Internet

TIO Networks Corp Payment GatewayOctober 31, 2010 SPIguard Security Solutions Inc.

Tix, Inc. OtherJuly 31, 2011 Compass IT Compliance, LLC

Total Card, Inc. OtherMay 31, 2011 SecurityMetrics, Inc.

Payment Gateway

Total Merchant Services Clearing & SettlementFebruary 28, 2011 Information Exchange

Merchant Services

TouchNet Payment Gateway/SwitchApril 30, 2011 Trustwave

Town North Bank Credit Card Services

OtherFebruary 28, 2011 Trustwave

70 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 71: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Transaction Network Services (TNS)

OtherJune 30, 2011 Trustwave

Payment Gateway

Switching

Transaction Network Services (TNS) – TNSPay CNP Gateway

Payment GatewayJune 30, 2011 Trustwave

Transaction Processing Partners

Clearing & SettlementMay 31, 2011 Information Exchange

Merchant Services

Payment Gateway/Switch

Payment Processing - InternetPayment Processing - POS

Transactis Clearing & SettlementJune 30, 2011 INFORMATION EXCHANGE, INC

Merchant Services

Payment Gateway/Switch

Payment Processing - Internet

Transbank, S.A. AuthorizationDecember 31, 2011 Xtrategies

Clearing & Settlement

IPSP (E-commerce)MOTO Payment Processing

Payment GatewayProcess Magnetic-Stripe TransactionsSwitching

Transcom North America/Asia

MOTO Payment ProcessingJanuary 31, 2011 Sunera LLC

Other

TransCore Hosting ProviderApril 30, 2011 Trustwave

MOTO Payment ProcessingPayment Gateway

TransFirst Back Office ServicesMay 31, 2011 Solutionary, Inc.

Clearing & SettlementFraud and Chargeback Services

Merchant ServicesOtherPayment Gateway/Switch

Payment Processing - Internet

Payment Processing - MOTO

71 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 72: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

TransFirst Payment Processing - POSMay 31, 2011 Solutionary, Inc.

Transnational Bankcard, Inc. OtherJanuary 31, 2011 Valcom

TransPerfect Translations Inc.

OtherDecember 31, 2011 403 Labs

TransUnion Interactive, Inc. OtherNovember 30, 2011 SecurityMetrics, Inc.

Tranzact Payment GatewayOctober 31, 2011 Trustwave

Travelport GDS IPSP (E-commerce)February 28, 2011 Jefferson Wells Inc.

Payment Gateway

Tridata, Inc. - Datalink Bankcard Services

Loyalty ProgramsDecember 31, 2010 Trustwave

Other

Trilegiant AuthorizationDecember 31, 2011 Trustwave

MOTO Payment Processing

Payment Gateway

Triplefin OtherJuly 31, 2011 Trustwave

TriSource Solutions, LLC (formerly Nobel EFT)

Clearing & SettlementSeptember 30, 2011 COALFIRE SYSTEMS, INC.

Tropical Productions Clearing & SettlementJune 30, 2011 Information Exchange

Merchant Services

Payment Gateway/Switch

Payment Processing - Internet

TrustCommerce Payment GatewayApril 30, 2011 403 Labs

Process Magnetic-Stripe Transactions

TRXSERVICES LLC Payment GatewayOctober 31, 2011 Coalfire Systems. Inc.

TSD Rental Payment Gateway/SwitchJanuary 31, 2011 Coalfire Systems, Inc

TSYS (Issuing Processing) AuthorizationJanuary 31, 2012 Trustwave

Issuing Processing

Process Magnetic-Stripe Transactions

TSYS Acquiring Solutions (formerly Vital Processing Services)

AuthorizationApril 30, 2011 Trustwave

Clearing & SettlementLoyalty Programs

TSYS Customer Insight OtherJanuary 31, 2012 TrustWave

72 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 73: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

TSYS Digital Document System

OtherFebruary 28, 2012 Trustwave

TSYS iSolutions OtherJanuary 31, 2012 Trustwave

TSYS Loyalty Loyalty ProgramsJuly 31, 2011 Trustwave

TSYS Managed Services - Myersville (Merlin Solutions)

OtherApril 30, 2011 Trustwave

TSYS Merchant Solutions OtherJanuary 31, 2012 Trustwave

TSYS Prepaid AuthorizationJuly 31, 2011 Trustwave

Issuing Processing

MOTO Payment Processing

TSYS SERVICOS DE TRANSACOES ELETRONICAS LTDA. (TSYS TS Prime Latin America)

AuthorizationNovember 30, 2011 Trustwave

Clearing & Settlement

Issuing ProcessingLoyalty Programs

MOTO Payment Processing

Process Magnetic-Stripe Transactions

Twin Oaks Billing ManagementFebruary 28, 2011 UHY Advisors TX, LLC

Payment Processing - MOTO

TxVia AuthorizationJanuary 31, 2011 403 Labs

Clearing & SettlementIssuing Processing

Payment GatewaySwitching

U.S. Bank Access Online OtherJuly 31, 2011 TrustWave

U.S. Payments MOTO Payment ProcessingDecember 31, 2010 403 Labs, LLC

Payment Gateway

UKRAINIAN NATIONAL PAYMENT CARD JSC (UKRCARD JSC)

OtherDecember 31, 2010 Trustwave Ltd.

Ukrainian Processing Center (UPC)

AuthorizationSeptember 30, 2011 SRC Security Research & Consulting GmbH (SRC)

Clearing & Settlement

IPSP (E-commerce)

Issuing ProcessingMOTO Payment ProcessingPayment Gateway

73 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 74: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Ukrainian Processing Center (UPC)

Process Magnetic-Stripe Transactions

September 30, 2011 SRC Security Research & Consulting GmbH (SRC)

Switching

UltraCart Merchant ServicesSeptember 30, 2011 Compliance Point

Payment Processing - Internet

UMS Banking OtherNovember 30, 2011 SecurityMetrics

Unirush, LLC (Rush Card) Payment GatewayDecember 31, 2011 Fortrex Technologies

United Bank Card Clearing & SettlementJuly 31, 2011 Information Exchange

Merchant Services

UNITED CARD SERVICE Back Office ServicesJanuary 31, 2011 Jet Infosystems

Billing Management

Clearing & SettlementData Preparation

Fraud and Chargeback Services

Issuing ProcessingLoyalty Programs

Merchant Services

Payment Processing - ATM

Payment Processing - InternetPayment Processing - MOTO

Payment Processing - POSRecords Management

United Merchant Services, Inc. (UMSI)

Fraud and Chargeback Services

April 30, 2011 Arsenal Security Group

Merchant ServicesPayment Gateway/Switch

Payment Processing - Internet

Payment Processing - POS

United Payment Services AuthorizationJanuary 31, 2011 Accudata Systems

Clearing & Settlement

MOTO Payment ProcessingOther

Payment Gateway

United States Department of The Treasury, Financial Management Service

Payment GatewayMarch 31, 2011 SecureState

UniteU Technologies, Inc Hosting ProviderAugust 31, 2011 SecurityMetrics

Payment Gateway

74 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 75: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Universal Money Centers Inc.

Clearing & SettlementSeptember 30, 2011 Information Exchange

Merchant Services

Payment Gateway/Switch

Payment Processing - ATM

UrbanStyle, Inc. Hosting ProviderDecember 31, 2011 Compass IT Compliance, LLC

US ALLIANCE GROUP, INC OtherNovember 30, 2011 SecurityMetrics

Payment Gateway

US Bank - ATM Banking AuthorizationApril 30, 2011 TrustWave

Clearing & Settlement

Other

Process Magnetic-Stripe TransactionsSwitching

US Bank - Gaming Services AuthorizationApril 30, 2011 TrustWave

Clearing & Settlement

OtherProcess Magnetic-Stripe Transactions

Switching

US Bank - Voyager OtherJuly 31, 2011 TrustWave

US Bank E-Payment Service IPSP (E-commerce)January 31, 2011 Trustwave

Payment Gateway

US Bank Multiservice Aviation

Payment Gateway/SwitchDecember 31, 2011 Trustwave

US Bank Retail Payment Solutions - Integrated Card Systems

Account ManagementDecember 31, 2011 TrustWave

Clearing & Settlement

Fraud and Chargeback ServicesIssuing Processing

Other

USA ePay AuthorizationApril 30, 2011 Trustwave

Payment Gateway

USA Fulfillment, Inc. AuthorizationNovember 30, 2011 AT&T Consulting

Clearing & Settlement

Hosting Provider

USA Payment Systems, Inc. AuthorizationDecember 31, 2010 K3DES

Clearing & Settlement

75 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 76: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

USA Payment Systems, Inc. Process Magnetic-Stripe Transactions

December 31, 2010 K3DES

Switching

USA Technologies Payment GatewayJanuary 31, 2011 Trustwave

USA800 MOTO Payment ProcessingSeptember 30, 2011 IOActive, Inc.

Payment Gateway

ValuCard Nigeria Plc 3-D Secure Access Control Server

October 31, 2010 Trustwave

Authorization

Issuing ProcessingPayment GatewayProcess Magnetic-Stripe Transactions

Switching

VALUE PAY SERVICES LLC, AN IPC COMPANY

Payment Gateway/SwitchNovember 30, 2011 IBM Security Services

Payment Processing - Internet

Value Payment Systems, LLC.

IPSP (E-commerce)December 31, 2010 SAIC

MOTO Payment Processing

Payment Gateway

Vanco Services Payment GatewayJanuary 31, 2011 SecurityMetrics

Process Magnetic-Stripe Transactions

Vantiv (a.k.a. Fifth Third Processing Solutions) – Acquiring Systems

AuthorizationJune 30, 2011 Trustwave

Clearing & SettlementMOTO Payment Processing

Vantiv (a.k.a. Fifth Third Processing Solutions) – Issuing and Switch Providing Systems

AuthorizationJune 30, 2011 Trustwave

Clearing & Settlement

Issuing ProcessingProcess Magnetic-Stripe Transactions

Switching

Varolii Corporation OtherMarch 31, 2011 Brightline CPAs & Associates, Inc.

Payment Gateway/Switch

VEGAS.COM Loyalty ProgramsJuly 31, 2011 Trustwave

MOTO Payment Processing

76 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 77: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

VEGAS.COM Payment GatewayJuly 31, 2011 Trustwave

Vendmore Systems, LLC (StadiumVIP, LLC)

AuthorizationNovember 30, 2010 Arsenal Security Group

Clearing & Settlement

VenTek International Payment GatewayNovember 30, 2011 Digital Resources Group (DRG)

Ventus Networks OtherOctober 31, 2010 UHY Advisors TX, LLC

Veracity Payment Solutions OtherDecember 31, 2010 Trustwave

VERePAY (formerly VEReFIED)

MOTO Payment ProcessingOctober 31, 2010 Solutionary

Payment Gateway

Verifi Hosting ProviderJune 30, 2011 Trustwave

Payment Processing - Internet

VeriFone - PAYware Connect

AuthorizationJune 30, 2011 Trustwave

Payment GatewayProcess Magnetic-Stripe Transactions

Verifone – WAY Payment Gateway

Payment Gateway/SwitchOctober 31, 2011 Network Security Professionals, Incorporated (NetSPI)

Verifone Transportation Systems

AuthorizationApril 30, 2011 Fortrex Technologies

Clearing & Settlement

Payment GatewayProcess Magnetic-Stripe Transactions

VeriFone VeriShield Protect OtherJuly 31, 2011 SecurityMetrics

Payment Gateway

Verizon Business (formerly MCI)

Payment GatewayNovember 30, 2010 TrustWave

Switching

Verizon Business Global Services System Integration (VB-GSSI)

Payment GatewayJanuary 31, 2011 Trustwave

Verizon Business Remote Application Management

OtherFebruary 28, 2011 Trustwave

Verizon Computing as a Service

Hosting ProviderJune 30, 2011 Trustwave

Verrus Mobile Technologies AuthorizationNovember 30, 2011 Trustwave

77 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 78: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Verrus Mobile Technologies MOTO Payment ProcessingNovember 30, 2011 Trustwave

VERSATILE TECHNOLOGY INC.

AuthorizationJune 30, 2011 Xtrategies, LLC

Clearing & SettlementIPSP (E-commerce)

MOTO Payment Processing

OtherPayment GatewayProcess Magnetic-Stripe Transactions

Switching

Vesdia Loyalty ProgramsApril 30, 2011 Coalfire Systems. Inc.

Vesta Corporation MOTO Payment ProcessingJune 30, 2011 AT&T Consulting, Inc.

Other

Payment Gateway

VetCentric, Inc. IPSP (E-commerce)April 30, 2011 Coalfire

Payment Gateway

VICTORIABANK AuthorizationDecember 31, 2011 Trustwave

Clearing & SettlementIPSP (E-commerce)

Issuing ProcessingOther

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

Vindicia OtherMarch 31, 2011 Payment Software Company (PSC)

Payment Gateway

Visa Argentina S A (VASA) 3-D Secure Access Control Server

August 31, 2011 Xtrategies, LLC

AuthorizationClearing & Settlement

IPSP (E-commerce)

Issuing ProcessingLoyalty Programs

MOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe TransactionsSwitching

Visa Inc. (including Visa Debit Processing)

3-D Secure Hosting ProviderJune 30, 2011 Trustwave

78 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 79: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Visa Inc. (including Visa Debit Processing)

Account ManagementJune 30, 2011 Trustwave

Back Office Services

Billing Management

Clearing & SettlementData PreparationFraud and Chargeback Services

Hosting Provider - WebHosting Provider- Hardware

Issuer Processing

Loyalty Programs

Managed ServicesMerchant ServicesNetwork Provider/Transmitter

Payment Gateway/SwitchPayment Processing - ATM

Payment Processing - Internet

Payment Processing - MOTO

Payment Processing - POS

Prepaid Services

Records ManagementTax/Government Payments

Visa Intellilink OtherDecember 31, 2011 Trustwave

Visa Processing Services Pte Ltd

AuthorizationJanuary 31, 2011 SISA Information Security Pvt Ltd.,

Clearing & Settlement

Hosting ProviderIssuing Processing

MOTO Payment Processing

Process Magnetic-Stripe TransactionsSwitching

VisionOne IPSP (E-commerce)September 30, 2011 IBM Security Services

Payment Gateway

VitalChek IPSP (E-commerce)October 31, 2011 Trustwave

MOTO Payment Processing

Payment GatewayProcess Magnetic-Stripe Transactions

Voice Data Solutions OtherOctober 31, 2011 SecurityMetrics

79 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 80: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Volusion Hosting ProviderJanuary 31, 2011 Payment Software Company (PSC)

Voxeo Corporation OtherDecember 31, 2011 Sunera LLC

VXI Global Solutions, Inc MOTO Payment ProcessingOctober 31, 2010 Trustwave

WageWorks Clearing & SettlementSeptember 30, 2011 RSM McGladrey

Loyalty Programs

Washington Metropolitan Area Transit Authority

Payment GatewayDecember 31, 2010 ControlCase

WEB ACTIVE CORPORATION PTY LTD (eWay)

Payment Gateway/SwitchAugust 31, 2011 Stratsec

Payment Processing - Internet

West - Managed Call Center Services

Account ManagementSeptember 30, 2011 Continuum Worldwide Corporation

Billing Management

West Business Services MOTO Payment ProcessingApril 30, 2011 Trustwave

West Customer Management Group - Work At Home (WCMG - WAH)

Account ManagementSeptember 30, 2011 Continuum Worldwide

Billing Management

West Direct - Direct Response

MOTO Payment ProcessingApril 30, 2011 Trustwave

West Direct - Smartsell OtherOctober 31, 2011 Trustwave

West Interactive DataGuard MOTO Payment ProcessingApril 30, 2011 Trustwave

Wipro Limited OtherSeptember 30, 2011 SISA Information Security Pvt Ltd

Wiretrust Payment GatewayJuly 31, 2011 Coalfire Systems. Inc.

WorkflowOne, Inc. OtherDecember 31, 2011 Protiviti, Inc.

World Acess Service Corp IPSP (E-commerce)January 31, 2011 Trustwave

WorldPay (UK) Limited - PaymentTrust (High Capacity Gateway)

3-D Secure Access Control Server

March 31, 2011 Arsenal Secuirty Group

Account Management

Clearing & SettlementFraud and Chargeback Services

Loyalty Programs

Payment Gateway/Switch

80 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 81: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

WorldPay (UK) Limited - PaymentTrust (High Capacity Gateway)

Payment Processing - Internet

March 31, 2011 Arsenal Secuirty Group

Payment Processing - MOTOPayment Processing - POS

Prepaid Services

WorldPay US, Inc. AuthorizationMay 31, 2011 Verizon Business

Clearing & SettlementIPSP (E-commerce)

Loyalty ProgramsPayment GatewayProcess Magnetic-Stripe Transactions

Switching

Wyndham Hotel & Resorts AuthorizationFebruary 28, 2011 Protiviti

IPSP (E-commerce)

Loyalty Programs

Other

Xtec Clearing & SettlementApril 30, 2011 Information Exchange

Payment Gateway/Switch

Yahoo! Stores IPSP (E-commerce)November 30, 2010 Accuvant, Inc.

YALAMANCHILI SOFTWARE EXPORTS (P) LTD

AuthorizationJune 30, 2011 SISA Information Security (P) Ltd

Clearing & SettlementHosting Provider

Issuing Processing

MOTO Payment ProcessingProcess Magnetic-Stripe Transactions

Switching

Yapstone Inc. Payment Gateway/SwitchApril 30, 2011 BrightLine

Payment Processing - Internet

Payment Processing - MOTO

Yes-Pay International Ltd. Issuer ProcessingJuly 31, 2011 Fortconsult

Payment Gateway/Switch

Payment Processing - InternetPayment Processing - MOTO

Payment Processing - POS

81 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

Page 82: Visa’s Global Registry of Service Providers - PCI DSS ...allegiancemerchantservices.com/wp-content/uploads/2011/12/global...Visa’s Global Registry of Service Providers - PCI DSS

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Yodlee Hosting ProviderDecember 31, 2010 AT&T Consulting

IPSP (E-commerce)

Zagrebačka banka d.d. AuthorizationJanuary 31, 2011 IBM Polska

Clearing & Settlement

ZEUS Corporation 3-D Secure Hosting ProviderOctober 31, 2011 NTT Data Security Corporation

Account Management

Billing ManagementClearing & Settlement

Payment Gateway/Switch

Payment Processing - InternetPayment Processing - POS

ZirMed, Inc. Payment GatewayApril 30, 2011 403 Labs

Zuora, Inc. AuthorizationJune 30, 2011 Digital Resources Group (DRG)

Payment Gateway

82 of 82

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.