Top Banner
Visa’s Global Registry of Service Providers - PCI DSS Validated Entities The companies listed below were validated as being PCI DSS compliant by a QSA as of the "VALIDATION DATE". Service providers are required to revalidate their compliance to Visa on an annual basis, with the next annual Report on Compliance (ROC) due to Visa one year from the "VALIDATION DATE". ROCs that are from 1- 60 days late are noted in yellow and ROCs that are from 60-90 days late are noted in red. Entities with ROCs over 90 days past due are removed from this list. Entities are listed in each Visa region where they have been registered by at least one client, including: AP - Asia Pacific, CEMEA - Central Europe / Middle East / Africa, LAC - Latin America / Caribbean, NA - North America - Canada / United States. Visa client's are responsible for and are required to use compliant service providers and to follow up with service providers directly if there are any questions about their compliance status. As Of 4/9/2012 SERVICE PROVIDER VALIDATION DATE SERVICES COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA Visa’s Global Registry of Service Providers - PCI DSS Validated Entities 1 LINK (GUARANTEE) LIMITED Clearing & Settlement November 30, 2011 Trustwave Process Magnetic-Stripe Transactions Switching 1ShoppingCart.com Other June 30, 2011 Security Metrics Payment Gateway 1st Americard Data Preparation March 31, 2012 nGuard Inc. Records Management 1stPayGateway, LLC Authorization May 31, 2011 Internet Security Systems (a wholly owned IBM company) Payment Gateway 2C Processor USA, LLC Authorization January 31, 2012 Information Exchange Clearing & Settlement Managed Services MOTO Payment Processing Payment Gateway Payment Gateway/Switch Payment Processing - Internet Payment Processing - POS 2checkout.com Clearing & Settlement February 28, 2012 Arsenal Security Group Payment Processing - Internet 3dCart Hosting Provider March 31, 2012 SecurityMetrics Payment Gateway 3Delta Systems Authorization September 30, 2011 Fortrex Technologies MOTO Payment Processing 1 of 80 (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. © 2012 Visa Inc. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.
80

Cisp List of Pcidss Compliant Service Providers

Oct 24, 2014

Download

Documents

listbox
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: Cisp List of Pcidss Compliant Service Providers

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

The companies listed below were validated as being PCI DSS compliant by a QSA as of the "VALIDATION DATE". Service providers are required to revalidate their compliance to Visa on an annual basis, with the next annual Report on Compliance (ROC) due to Visa one year from the "VALIDATION DATE". ROCs that are from 1-60 days late are noted in yellow and ROCs that are from 60-90 days late are noted in red. Entities with ROCs over 90 days past due are removed from this list. Entities are listed in each Visa region where they have been registered by at least one client, including: AP - Asia Pacific, CEMEA - Central Europe / Middle East / Africa, LAC - Latin America / Caribbean, NA - North America - Canada / United States. Visa client's are responsible for and are required to use compliant service providers and to follow up with service providers directly if there are anyquestions about their compliance status.

As Of 4/9/2012

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

1 LINK (GUARANTEE) LIMITED

Clearing & SettlementNovember 30, 2011 Trustwave

Process Magnetic-Stripe TransactionsSwitching

1ShoppingCart.com OtherJune 30, 2011 Security Metrics

Payment Gateway

1st Americard Data PreparationMarch 31, 2012 nGuard Inc.

Records Management

1stPayGateway, LLC AuthorizationMay 31, 2011 Internet Security Systems (a wholly owned IBM company)

Payment Gateway

2C Processor USA, LLC AuthorizationJanuary 31, 2012 Information Exchange

Clearing & Settlement

Managed Services

MOTO Payment ProcessingPayment Gateway

Payment Gateway/Switch

Payment Processing - InternetPayment Processing - POS

2checkout.com Clearing & SettlementFebruary 28, 2012 Arsenal Security Group

Payment Processing - Internet

3dCart Hosting ProviderMarch 31, 2012 SecurityMetrics

Payment Gateway

3Delta Systems AuthorizationSeptember 30, 2011 Fortrex Technologies

MOTO Payment Processing

1 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 2: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

3Delta Systems Payment GatewaySeptember 30, 2011 Fortrex Technologies

Process Magnetic-Stripe TransactionsSwitching

800 Call KC Payment Processing - Internet

May 31, 2011 Accudata Systems

Payment Processing - MOTO

A3 IT Solutions Payment GatewayNovember 30, 2011 Trustwave

ABC FINANCIAL SERVICES, INC

AuthorizationMay 31, 2011 Trustwave

Clearing & SettlementHosting Provider

IPSP (E-commerce)MOTO Payment Processing

OtherPayment Gateway

Process Magnetic-Stripe Transactions

ABC Virtual Communications, Inc.

Hosting Provider - WebFebruary 28, 2011 Compass IT Compliance, LLC

Payment Gateway/Switch

Acadaca LLC Hosting ProviderApril 30, 2011 Fortrex Technologies

Accel Networks OtherJanuary 31, 2012 Trustwave

Accelerated Payment Technologies Inc

AuthorizationJuly 31, 2011 Trustwave

IPSP (E-commerce)

Loyalty ProgramsMOTO Payment ProcessingOther

Payment Gateway

Process Magnetic-Stripe Transactions

ACCENT Marketing MOTO Payment ProcessingMay 31, 2011 Crowe Horwath

Accertify Fraud and Chargeback Services

February 28, 2012 Halock Security Labs

Payment Gateway/Switch

Accesso, LLC Clearing & SettlementFebruary 28, 2011 Trustwave

Payment Gateway/Switch

AccountNow Payment GatewayJune 30, 2011 Trustwave

Acculynk Payment GatewayFebruary 28, 2011 Trustwave

ACH Direct Clearing & SettlementJanuary 31, 2012 Trustwave

Payment Gateway/Switch

2 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 3: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

ACH Direct Payment Processing - Internet

January 31, 2012 Trustwave

Achieve Financial Services, LLC

Clearing & SettlementNovember 30, 2011 Information Exchange Inc.

Issuer Processing

Loyalty Programs

ACI Worldwide Payment Processing - ATMApril 30, 2011 Solutionary, Inc

Payment Processing - POS

ACI Worldwide - Winn-Dixie Environment

Payment Gateway/SwitchSeptember 30, 2011 Solutionary

Payment Processing - POS

ACS Transportation Solutions Group – BATA Fastrak and MdTA E-Zpass

Hosting ProviderAugust 31, 2011 SecurityMetrics

MOTO Payment ProcessingPayment Gateway

Active Network Back Office ServicesOctober 31, 2011 Protiviti, Inc.

Payment Processing - InternetPayment Processing - POS

Adaptive Payments, Inc. Payment GatewayNovember 30, 2011 403 Labs, LLC

Adeptra OtherDecember 31, 2011 Protiviti

Advam Pty Ltd AuthorizationDecember 31, 2011 CQR Consulting Pty Ltd

IPSP (E-commerce)

Payment GatewayProcess Magnetic-Stripe Transactions

Advantex Dining Corporation Loyalty ProgramsMarch 31, 2012 Datassurant, Inc.

Adyen B.V. Clearing & SettlementMay 31, 2011 Trustwave

IPSP (E-commerce)

OtherPayment Gateway

Aegis Communications OtherDecember 31, 2011 K3DES

Payment Gateway

AEGIS USA, INC. OtherDecember 31, 2011 AT&T Consulting Solutions, Inc.

Payment Processing - MOTO

Aetna, Inc. Clearing & SettlementMay 31, 2011 Trustwave

Other

Affiliated Acceptance Corporation

MOTO Payment ProcessingOctober 31, 2011 Trustwave

Payment Gateway

3 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 4: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

AFFINA LLC - Consumer's Union

OtherJune 30, 2011 Coalfire

Affinion Benefits Group AuthorizationDecember 31, 2011 Trustwave

MOTO Payment Processing

Payment Gateway

Affinion Loyalty Group AuthorizationDecember 31, 2011 Trustwave

MOTO Payment Processing

Payment Gateway

Affinity Solutions Loyalty ProgramsNovember 30, 2011 Coalfire

Agilysys, Inc. Payment GatewayJuly 31, 2011 Trustwave

Process Magnetic-Stripe Transactions

Airlines Reporting Corporation

Clearing & SettlementFebruary 28, 2012 Protiviti Inc.

Akamai OtherSeptember 30, 2011 Neohapsis Inc.

Alacriti Payment Gateway/SwitchDecember 31, 2011 IGX Global

Alaska Option Services Corporation

AuthorizationApril 30, 2011 K3DES

Clearing & Settlement

Issuing ProcessingProcess Magnetic-Stripe Transactions

Switching

Aliaswire Payment Gateway/SwitchSeptember 30, 2011 IGX Global

Payment Processing - MOTO

Alignet, S.A.C 3-D Secure Access Control Server

December 31, 2011 Xtrategies

IPSP (E-commerce)

Other

Payment Gateway

Alliance Data - Retail Services

AuthorizationDecember 31, 2011 Verizon Business Network Services Inc.

Clearing & SettlementIssuing Processing

Other

AllianceOne Inc. MOTO Payment ProcessingMay 31, 2011 AT&T Consulting Solutions, Inc.

Other

Allianz Global Assistance Payment Gateway/SwitchFebruary 28, 2012 Trustwave

Allied Wallet OtherMarch 31, 2012 Trustwave

Payment Gateway/Switch

4 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 5: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Allied Wallet Payment Processing - Internet

March 31, 2012 Trustwave

Alpha Card Services, Inc. Clearing & SettlementNovember 30, 2011 INFORMATION EXCHANGE, INC.

Merchant Services

Alta Resources IPSP (E-commerce)April 30, 2011 IBM Internet Security Systems

Loyalty Programs

Payment Gateway

Amazon.com Merchant ServicesOctober 31, 2011 IOActive, Inc.

Amdocs Champaign, Inc. Billing ManagementAugust 31, 2011 FishNet Security

Hosting Provider - WebHosting Provider- Hardware

Managed Services

Network Provider/Transmitter

American Bancard Merchant ServicesJune 30, 2011 Enterprise Risk Management, Inc.

Other

American Data Technology Hosting ProviderApril 30, 2011 Specialized Security Services, Inc

Americaneagle.com Hosting ProviderNovember 30, 2011 Fortrex Technologies

Angel.com OtherOctober 31, 2011 Coalfire Systems, Inc.

AOC Solutions, Inc OtherOctober 31, 2011 Fortrex Technologies

AOL, Inc. Payment Processing - Internet

September 30, 2011 IOActive

Payment Processing - MOTO

Aon Hewitt OtherAugust 31, 2011 Trustwave

Aperia Solutions OtherJuly 31, 2011 Coalfire

Apriva, LLC Payment GatewayJuly 31, 2011 Trustwave

Switching

Arab Financial Services Company

Account ManagementJuly 31, 2011 SISA Information Security Pvt. Ltd.

Back Office Services

Clearing & SettlementFraud and Chargeback ServicesIssuer Processing

Loyalty Programs

Payment Gateway/SwitchPayment Processing

Payment Processing - ATM

5 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 6: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Arab Financial Services Company

Payment Processing - Internet

July 31, 2011 SISA Information Security Pvt. Ltd.

Arcot Systems Inc. 3-D Secure Access Control Server

December 31, 2011 Payment Software Company (PSC)

Area 101, Inc IPSP (E-commerce)July 31, 2011 Coalfire Systems. Inc.

Argus Payments Inc Payment Gateway/SwitchDecember 31, 2011 403 Labs

Aria Systems Payment GatewayDecember 31, 2011 TrustWave

Ariba Inc OtherMay 31, 2011 Payment Software Company (PSC)

Arise Virtual Solutions OtherMay 31, 2011 AT&T Consulting Solutions

Artez Interactive Inc OtherDecember 31, 2011 IBM Security Services

Arvato Finance Services Limited

Clearing & SettlementJuly 31, 2011 Acertigo AG - An EXCELSIS Company

IPSP (E-commerce)

Payment Gateway

ASAP TRANSACTION PROCESSING CORPORATION LIMITED

Loyalty ProgramsAugust 31, 2011 Evolution Ltd

Merchant Services

Payment Gateway/Switch

Payment Processing - Internet

Payment Processing - MOTO

Payment Processing - POS

ASF International IPSP (E-commerce)August 31, 2011 Trustwave

MOTO Payment Processing

Payment Gateway

ASIAPAY (HONG KONG) LTD

Payment Gateway/SwitchNovember 30, 2011 Trustwave

Payment Processing - Internet

Asociacion Cibao de Ahorros y Prestamos

AuthorizationSeptember 30, 2011 Trustwave

Issuing Processing

AT&T Managed Hosting and Application Services

Hosting ProviderOctober 31, 2011 Trustwave

AT&T Managed Services - AT&T Encryption Services

Managed ServicesOctober 31, 2011 Trustwave

AT&T Managed Services - AT&T Enhanced VPN Services, AT&T VPN Services, AT&T Private Network Transport Services

Managed ServicesJuly 31, 2011 Trustwave

6 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 7: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

AT&T Managed Services - AT&T Network Based IP VPN Remote Access Service / AT&T VPN Tunneling Service

Managed ServicesMay 31, 2011 Trustwave

Network Provider/Transmitter

AT&T Managed Services - Endpoint Security

Managed ServicesJuly 31, 2011 Trustwave

AT&T Managed Services - Intrusion Detection Services/Intrusion Prevention Services

Managed ServicesJuly 31, 2011 Trustwave

AT&T Managed Services - IP Telephony and LAN Services

Managed ServicesJuly 31, 2011 Trustwave

AT&T Managed Services - Managed Router Services

Managed ServicesJuly 31, 2011 Trustwave

AT&T Managed Services - Network Based Firewall

Managed ServicesJuly 31, 2011 Trustwave

AT&T Managed Services - Premise Based Firewall

Managed ServicesJuly 31, 2011 Trustwave

AT&T Managed Services - Transaction Routing Service

Managed ServicesJuly 31, 2011 Trustwave

AT&T Synaptic Compute as a Service (CaaS)

Hosting ProviderJanuary 31, 2012 Trustwave

Other

AT&T Synaptic Hosting Hosting ProviderOctober 31, 2011 Trustwave

AT&T Synaptic Platform as a Service (PaaS)

Hosting ProviderJanuary 31, 2012 Trustwave

Other

AT&T Synaptic Storage as a Service (SaaS)

Hosting ProviderJanuary 31, 2012 Trustwave

Other

AT&T VoiceTone & Interactive Voice Services - Advanced Plus

Data PreparationJuly 31, 2011 Trustwave

Managed Services

AT&T WiFi Services Payment Processing - Internet

January 31, 2012 TrustWave

Athenahealth, Inc. MOTO Payment ProcessingOctober 31, 2011 Trustwave

Payment GatewayProcess Magnetic-Stripe Transactions

7 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 8: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Atos Services (M) Sdn Bhd Managed ServicesApril 30, 2011 TUV Rheinland Secure iT GmbH

Atos Worldline India Private Limited

Back Office ServicesDecember 31, 2011 ControlCase

Billing Management

Clearing & SettlementData Preparation

Fraud and Chargeback Services

Issuer ProcessingLoyalty Programs

Managed Services

Merchant ServicesPayment Gateway/Switch

Payment Processing - ATM

Payment Processing - InternetPayment Processing - MOTO

Payment Processing - POS

AudienceView Ticketing Corporation

OtherAugust 31, 2011 NCI (Net Cyclops Inc.)

Auric Systems International OtherDecember 31, 2011 Payment Software Company (PSC)

Aurora Financial Systems, Inc.

Payment GatewayApril 30, 2011 403 Labs, LLC

Autonomy Connected Back-Up

OtherNovember 30, 2011 Neohapsis

Records Management

Autonomy LiveVault OtherNovember 30, 2011 Neohapsis

Records Management

Autoscribe Corporation Payment GatewayJune 30, 2011 Fortrex Technologies

B3 Corp Hosting ProviderDecember 31, 2011 Digital Resources Group (DRG)

Payment Gateway

BANCO DE GUAYAQUIL S.A.

AuthorizationDecember 31, 2011 IQ Information Quality SAS

Back Office Services

Clearing & Settlement

Debit Card ProcessingFraud and Risk Analysis

Issuer

Other

Payment Processing - ATMSwitching

BancTec, Inc. MOTO Payment ProcessingJanuary 31, 2012 Trustwave

8 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 9: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

BANK AL JAZIRA - Acquiring

Clearing & SettlementJanuary 31, 2012 Acertigo

Payment Gateway/Switch

Payment Processing - ATM

Payment Processing - POS

BankCard Services, Inc Account ManagementMay 31, 2011 Trustwave

Back Office ServicesFraud and Chargeback ServicesMerchant Services

Bankserv Payment Gateway/SwitchDecember 31, 2011 Trustwave

Payment Processing - InternetPayment Processing - POS

Beanstream Internet Commerce Inc.

Payment Gateway/SwitchSeptember 30, 2011 SPIGuard Security Solutions Inc

Payment Processing - Internet

Payment Processing - MOTO

Best Practice Systems, Inc. Payment Processing - Internet

August 31, 2011 Security Horizon, Inc.

Bill 1st, LLC Billing ManagementJuly 31, 2011 SecurityMetrics

Fraud and Chargeback Services

Payment Gateway/SwitchPayment Processing - Internet

BillMatrix Payment GatewayJuly 31, 2011 Payment Software Company (PSC)

Billtrust Payment GatewayMarch 31, 2012 K3DES

Blackbaud - Internet Services

IPSP (E-commerce)September 30, 2011 Trustwave

Payment Gateway

Process Magnetic-Stripe Transactions

Blackbaud Payment Services

Payment Gateway/SwitchFebruary 28, 2012 Brightline CPAs & Associates, Inc.

Blackboard Payment Processing - Internet

March 31, 2012 Trustwave

Blackhawk Network AuthorizationNovember 30, 2011 ANXeBusiness Corp.

Clearing & Settlement

Hosting ProviderIssuing Processing

Payment Gateway

9 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 10: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Blackhawk Network SwitchingNovember 30, 2011 ANXeBusiness Corp.

BluePay OtherMay 31, 2011 Trustwave

Payment Gateway

BLUM INVESTMENT GROUP, INC.

Payment GatewayNovember 30, 2011 Coalfire

BMI Fulfillment Services Loyalty ProgramsNovember 30, 2011 UHY Advisors

Managed Services

Bora Payment Systems Merchant ServicesMarch 31, 2011 Information Exchange

Payment Gateway/Switch

Payment Processing - Internet

Braintree Payment Solutions Payment Gateway/SwitchFebruary 28, 2012 Trustwave

Payment Processing - Internet

Brightwell Payments, Inc. Clearing & SettlementFebruary 28, 2012 INFORMATION EXCHANGE, INC

Issuer ProcessingMerchant ServicesPrepaid Services

Brinkman Financial AuthorizationJanuary 31, 2011 K3DES

IPSP (E-commerce)MOTO Payment Processing

BSG Payments (formerly Billing Concepts)

Payment GatewayNovember 30, 2011 Trustwave

BTB Soft, Inc. DBA: B2B Soft

OtherOctober 31, 2011 IGX Global

Payment Processing - ATM

Business Data Record Services

OtherNovember 30, 2011 RSM McGladrey

Cale Access AB (Cale Systems)

Clearing & SettlementNovember 30, 2011 Trustwave

OtherPayment Gateway/Switch

Caledon Card Services Clearing & SettlementMay 31, 2011 SPIguard Security Solutions Inc.

Fraud and Chargeback Services

Merchant ServicesPayment Gateway/Switch

Payment Processing - Internet

Payment Processing - MOTO

Calypso Canada SwitchingJanuary 31, 2012 Trustwave

10 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 11: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Camis, Inc. Payment Processing - Internet

October 31, 2011 SPIguard Security Solutions Inc.

Payment Processing - MOTO

Cantaloupe Systems, Inc. Payment Gateway/SwitchSeptember 30, 2011 403 Labs, LLC

Capital Card Services Hosting ProviderApril 30, 2011 Trustwave

IPSP (E-commerce)

MOTO Payment ProcessingOther

Card Alliance Company Limited

Clearing & SettlementJanuary 31, 2012 Evolution Limited

Hosting Provider- HardwareIssuer Processing

Card Management Corporation (CMC)

OtherAugust 31, 2011 Trustwave

Card Tranz, Inc. Hosting ProviderDecember 31, 2011 Trustwave

IPSP (E-commerce)

Cardflex, Inc. AuthorizationDecember 31, 2011 K3DES LLC

MOTO Payment Processing

Other

Payment Gateway

Cardinal Commerce Corp. 3-D Secure Access Control Server

December 31, 2011 Payment Software Company (PSC)

Payment Gateway/Switch

CARDLINK SERVICES LIMITED

Clearing & SettlementJune 30, 2011 Securus Global

MOTO Payment Processing

Payment Gateway/Switch

CARDPAY INC OtherJune 30, 2011 Vectra Information Security Pte Ltd (Branch office of Vectra Corp)

Payment Gateway/SwitchPayment Processing - Internet

Payment Processing - MOTO

Cardtronics EFT OtherMay 31, 2011 K3DES

Process Magnetic-Stripe TransactionsSwitching

Cardworks Processing AuthorizationAugust 31, 2011 Trustwave

IPSP (E-commerce)Payment Gateway

Cardworks Servicing LLC Back Office ServicesFebruary 28, 2012 Trustwave

11 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 12: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Carlson Marketing Worldwide - US

Loyalty ProgramsJune 30, 2011 Trustwave

CartManager IPSP (E-commerce)February 28, 2011 Trustwave

Payment Gateway

Process Magnetic-Stripe Transactions

CashEdge AuthorizationMay 31, 2011 AppSec Consulting, Inc.

CashLINQ Group, LLC MOTO Payment ProcessingAugust 31, 2011 SecurityMetrics

Payment Gateway

Process Magnetic-Stripe Transactions

CBC Companies, Inc OtherApril 30, 2011 Verizon Business, Inc

CBCInnovis, Inc. OtherApril 30, 2011 Verizon

CBORD Group, Inc. Payment Gateway/SwitchFebruary 28, 2012 Trustwave

Cboss Hosting Provider - WebNovember 30, 2011 KirkpatrickPrice Inc.

Hosting Provider- Hardware

Payment Processing - Internet

CCBill IPSP (E-commerce)January 31, 2012 Coalfire Systems. Inc.

CDMS MERCHANT SERVICES, INC.

Merchant ServicesDecember 31, 2011 Enterprise Risk Management

Other

CDS Global Inc.- PayDQ Gateway

Merchant ServicesNovember 30, 2011 Solutionary

Payment Gateway/Switch

Payment Processing - ATM

CDS Global, Inc. Issuer ProcessingNovember 30, 2011 Solutionary, Inc

Managed Services

Other

Payment Processing - MOTO

CDW Managed Services Hosting ProviderOctober 31, 2011 Trustwave

Cedar Document Technologies

OtherJanuary 31, 2012 igxglobal, Inc.

CenPos Payment Gateway/SwitchJanuary 31, 2012 Enterprise Risk Management

Centershift Back Office ServicesOctober 31, 2011 Grant Thornton, LLP

Data Preparation

Hosting Provider - WebHosting Provider- HardwareManaged Services

12 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 13: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Centershift Network Provider/Transmitter

October 31, 2011 Grant Thornton, LLP

Prepaid Services

Central Payment Corporation

OtherJuly 31, 2011 Trustwave

Central States Indemnity OtherOctober 31, 2011 Continuum Worldwide Corporation

Centre de services partagés du Québec

Hosting Provider- HardwareFebruary 28, 2012 Ubitrak inc.

Centrix Bank - LockBox Service

MOTO Payment ProcessingMay 31, 2011 SecurityMetrics

Century Bankcard Services Clearing & SettlementMay 31, 2012 Information Exchange

Merchant Services

Certain Software Payment Gateway/SwitchOctober 31, 2011 Coalfire Systems

CHARGE Anywhere Payment GatewayApril 30, 2011 Trustwave

Chargeback Guardian OtherNovember 30, 2011 SecurityMetrics

Payment Processing - Internet

Chase Loyalty Solutions AuthorizationDecember 31, 2011 Trustwave

Clearing & Settlement

Loyalty ProgramsPayment Gateway

Switching

Chase Paymentech Solutions, LLC.

Clearing & SettlementJanuary 31, 2012 Trustwave

Loyalty Programs

Merchant Services

Payment Gateway/SwitchPayment Processing - Internet

Payment Processing - POS

Cintas Document Management Shredding

OtherJune 30, 2012 SecureState

Cintas Document Management Storage

OtherJune 30, 2012 SecureState

CJSC PC (CARDSTANDARD)

Clearing & SettlementApril 30, 2012 FortConsult A/S

Data PreparationIssuing Processing

Payment Processing - ATM

Payment Processing - InternetPayment Processing - MOTO

13 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 14: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

CJSC PC (CARDSTANDARD)

Payment Processing - POSApril 30, 2012 FortConsult A/S

ClearChoice Merchant Service, LLC

Clearing & SettlementJanuary 31, 2012 Information Exchange

Merchant Services

Clearent AuthorizationApril 30, 2011 Coalfire

Clearing & Settlement

Payment Gateway

Switching

ClearTran Payment Processing - Internet

March 31, 2012 SecurityMetrics

Payment Processing - MOTO

Client Services OtherSeptember 30, 2011 Insight Networking

Cobre Bem IPSP (E-commerce)September 30, 2011 CPqD

MOTO Payment Processing

Payment Gateway

Collections Marketing Center, Inc.

OtherDecember 31, 2011 403 Labs

Payment Gateway/Switch

CollegeNET IPSP (E-commerce)March 31, 2011 Coalfire

Payment Gateway

Columbus Data Services Back Office ServicesJanuary 31, 2012 FishNet Security

Clearing & Settlement

Data PreparationIssuing Processing

Network Provider/Transmitter

Payment Processing - ATMPrepaid Services

CommerceV3 Hosting ProviderNovember 30, 2011 Secure Technology Group LLC

Payment Gateway/Switch

Compania Uruguaya de Medios de Procesamiento

AuthorizationJanuary 31, 2012 Xtrategies

Clearing & Settlement

MOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe TransactionsSwitching

Compass Plus Clearing & SettlementNovember 30, 2011 Trustwave

Issuer Processing

Payment Gateway/Switch

14 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 15: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Compass Plus Payment Processing - ATMNovember 30, 2011 Trustwave

Payment Processing - POS

Complete Merchant Solutions

OtherFebruary 28, 2012 Security Metrics, Inc.

Computer Services, Inc. AuthorizationSeptember 30, 2011 Crowe Horwath LLP

Clearing & Settlement

Issuing Processing

Payment GatewayProcess Magnetic-Stripe Transactions

Switching

Concur - Redmond OtherJune 30, 2011 Verizon Business

CONDUCTOR TECNOLOGIA S.A.

AuthorizationJanuary 31, 2011 CIPHER

Clearing & SettlementIssuing Processing

CONEXIS Back Office ServicesOctober 31, 2011 FishNet Security

Issuing Processing

Connexions Loyalty Travel Solutions

Loyalty ProgramsSeptember 30, 2011 Trustwave

MOTO Payment Processing

Consumer Benefit Services Loyalty ProgramsMarch 31, 2011 Trustwave

Convergence Technologies, Inc

Clearing & SettlementFebruary 28, 2012 403 Labs

Payment Gateway/SwitchPayment Processing - Internet

Convergys (Home Agent) OtherJuly 31, 2011 Fortrex Technologies

Convergys CCMS OtherApril 30, 2012 Fortrex Technologies

Convergys Encore Payment Gateway/SwitchMarch 31, 2012 Fortrex Technologies

Convergys Interaction Recording Platform

Merchant ServicesAugust 31, 2011 Accuvant, Inc.

Convergys Intervoice OtherJuly 31, 2011 Fortrex Technologies

Convergys SuddenLink ICOMS

IPSP (E-commerce)August 31, 2011 Fortrex Technologies

MOTO Payment Processing

Payment Gateway

Convio, Inc. Payment Gateway/SwitchJanuary 31, 2012 Trustwave

CO-OP Financial Services Clearing & SettlementApril 30, 2011 Tevora Business Solutions Inc

Fraud and Chargeback Services

15 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 16: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

CO-OP Financial Services Loyalty ProgramsApril 30, 2011 Tevora Business Solutions Inc

Other

Payment Gateway/Switch

Corduro, Inc. Clearing & SettlementMarch 31, 2011 Trustwave

Hosting ProviderLoyalty ProgramsMOTO Payment Processing

Payment GatewayProcess Magnetic-Stripe Transactions

Switching

CORE Business Technologies

AuthorizationJuly 31, 2011 Trustwave

Hosting Provider

Payment Gateway

Process Magnetic-Stripe Transactions

CoSentry Managed ServicesApril 30, 2011 Continuum Worldwide

CRE Secure Payment GatewayJuly 31, 2011 Coalfire Systems, Inc.

Credibanco Visa Colombia AuthorizationApril 30, 2011 Xtrategies

Clearing & SettlementIPSP (E-commerce)

Issuing Processing

MOTO Payment Processing

Payment GatewayProcess Magnetic-Stripe Transactions

Switching

Credimatic S.A. AuthorizationJanuary 31, 2012 Trustwave

Clearing & SettlementIssuing Processing

MOTO Payment ProcessingOther

Switching

Credimax B.S.C. Clearing & SettlementNovember 30, 2011 SISA Information Security Pvt. Ltd.

CreditCall Ltd. AuthorizationApril 30, 2011 Foregenix

Clearing & Settlement

MOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Credomatic de Costa Rica Clearing & SettlementJanuary 31, 2012 Xtrategies, LLC

16 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 17: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Credomatic de Costa Rica Fraud and Chargeback Services

January 31, 2012 Xtrategies, LLC

Other

Payment Processing - ATM

Payment Processing - InternetPayment Processing - MOTO

Payment Processing - POS

Credomatic de El Salvador AuthorizationSeptember 30, 2011 Xtrategies, LLC

Clearing & SettlementIPSP (E-commerce)

MOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Switching

Credomatic de Guatemala AuthorizationMay 31, 2011 Xtrategies, LLC

Clearing & Settlement

IPSP (E-commerce)MOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

Credomatic de Honduras AuthorizationMay 31, 2011 Xtrategies, LLC

Clearing & Settlement

IPSP (E-commerce)MOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe TransactionsSwitching

Credomatic de Nicaragua AuthorizationSeptember 30, 2011 Xstrategies, LLC

Clearing & SettlementIPSP (E-commerce)

MOTO Payment Processing

Payment GatewayProcess Magnetic-Stripe Transactions

Switching

Credomatic de Panama AuthorizationMay 31, 2011 Xtrategies

Clearing & Settlement

IPSP (E-commerce)

MOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

17 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 18: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Credomatic de Panama SwitchingMay 31, 2011 Xtrategies

CREDOMATIC OF FLORIDA, INC.

AuthorizationSeptember 30, 2011 Xtrategies, LLC

Clearing & Settlement

IPSP (E-commerce)

Issuing ProcessingMOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe TransactionsSwitching

Crescent Processing OtherOctober 31, 2011 SecurityMetrics

Payment Gateway

Croem, Inc. IPSP (E-commerce)October 31, 2011 Trustwave

MOTO Payment Processing

Payment GatewayProcess Magnetic-Stripe Transactions

CSG Content Direct Back Office ServicesMarch 31, 2011 Solutionary

Payment Gateway/SwitchPayment Processing - Internet

CSG Systems Inc. - Data Prose

Billing ManagementMay 31, 2011 Solutionary

Payment Processing - Internet

Records Management

CSG Systems, Inc. - Interactive Messaging

Back Office ServicesApril 30, 2011 Solutionary

Payment Gateway/SwitchPayment Processing - Internet

CSG Systems, Inc. – Statement and Account Billing Services

Back Office ServicesApril 30, 2011 Solutionary

Billing Management

Payment Gateway/SwitchPayment Processing - Internet

Records Management

CSI Software Hosting ProviderDecember 31, 2011 Trustwave

Payment Gateway

CSU CardSystem S.A. Account ManagementSeptember 30, 2011 Trustwave

Back Office ServicesBilling Management

Clearing & Settlement

18 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 19: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

CSU CardSystem S.A. Fraud and Chargeback Services

September 30, 2011 Trustwave

Issuer Processing

Other

Payment Gateway/Switch

Payment Processing - InternetPayment Processing - MOTO

Payment Processing - POS

CT-Paiement Inc. Clearing & SettlementNovember 30, 2011 Trustwave

IPSP (E-commerce)

MOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Switching

Cvent, Inc. Payment Processing - Internet

August 31, 2011 Stratum Security

Cyber City Teleservices OtherDecember 31, 2011 CrimsonSecurity

Cybera SwitchingApril 30, 2011 FishNet Security

CyberSource (including Authorize.Net)

Billing ManagementAugust 31, 2011 Trustwave

Clearing & Settlement

Fraud and Chargeback Services

Hosting Provider - WebHosting Provider- Hardware

Managed Services

Merchant Services

Network Provider/Transmitter

Payment Gateway/Switch

Payment Processing - InternetPayment Processing - POS

Cynergy Data Payment Gateway/SwitchAugust 31, 2011 Coalfire Systems. Inc.

Payment Processing - InternetPayment Processing - MOTO

Payment Processing - POS

Data Oceans, LLC Payment Processing - Internet

May 31, 2011 Compliance Point

Data Paradigm OtherJuly 31, 2011 Crowe Horwath LLP

Data Stream Clearing & SettlementFebruary 28, 2011 Information Exchange, Inc.

19 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 20: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Data Stream Merchant ServicesFebruary 28, 2011 Information Exchange, Inc.

Payment Gateway/SwitchPayment Processing - ATM

DataCash Limited Fraud and Chargeback Services

August 31, 2011 SecuriCentrix

Payment Gateway/SwitchPayment Processing - Internet

Dataline Systems, Inc. Payment GatewayDecember 31, 2011 Trustwave

Datapak Services Corporation

AuthorizationDecember 31, 2011 Trustwave

Hosting ProviderPayment Gateway

DataPipe Hosting ProviderSeptember 30, 2011 Trustwave

DataTrax Technologies Payment Gateway/SwitchJanuary 31, 2012 SecurityMetrics, Inc.

Payment Processing - POS

Davis & Henderson G.P. Inc OtherSeptember 30, 2011 IBM Internet Security Systems

DAXKO Back Office ServicesApril 30, 2011 BrightLine

Payment Processing - Internet

Debit Plus Technologies, LLC

OtherFebruary 28, 2012 Specialized Security Services

Debit Technologies, Inc. Clearing & SettlementMay 31, 2011 Information Exchange

Merchant Services

Delphis Software, Inc. Payment GatewayMay 31, 2011 Digital Resources Group (DRG)

Demandware Hosting ProviderJune 30, 2011 SecurityMetrics

IPSP (E-commerce)

Payment Gateway

Denarii Systems AuthorizationJanuary 31, 2011 Fortrex Technologies, Inc.

Clearing & SettlementIPSP (E-commerce)

Issuing ProcessingLoyalty Programs

MOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe Transactions

Switching

DHD Media Clearing & SettlementJune 30, 2011 Trustwave

Payment Processing - Internet

20 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 21: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Diamond Marketing Solutions

OtherSeptember 30, 2011 Halock Security Labs

Digital Payment Technologies

Payment Gateway/SwitchMay 31, 2011 Payment Software Company (PSC)

Digital River IPSP (E-commerce)July 31, 2011 NetSPI

Payment Gateway

Direct Cash Management Network Provider/Transmitter

December 31, 2011 Accuvant, Inc.

Payment Gateway/SwitchPayment Processing - ATM

Payment Processing - POSPrepaid Services

Direct Insite Payment Gateway/SwitchMay 31, 2011 Enterprise Risk Management, Inc.

Payment Processing - Internet

Direct Mail Processors, Inc. Payment GatewayJanuary 31, 2012 Fortrex Technologies

Donor.com Hosting Provider - WebJune 30, 2011 Coalfire

Other

Payment Processing - Internet

Payment Processing - MOTO

drugstore.com, inc. AuthorizationJune 30, 2011 Coalfire

Hosting Provider

DST Output, LLC. - Payment Payment GatewayAugust 31, 2011 FishNet Security, Inc.

Duncan Solutions DBA: Duncan Parking Technologies

Payment Gateway/SwitchJune 30, 2011 SecurityMetrics

Duncan Solutions DBA: Professional Account Management

Account ManagementOctober 31, 2011 SecurityMetrics, Inc.

Billing Management

Payment Gateway/Switch

Records Management

EarthLink Business Network Provider/Transmitter

July 31, 2011 Neohapsis Inc.

EC Suite IPSP (E-commerce)August 31, 2011 Coalfire

Other

ECARD SOLUTIONS LTD AuthorizationMay 31, 2011 Ambersail Ltd

Clearing & SettlementIssuing ProcessingMOTO Payment Processing

Payment Gateway

21 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 22: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

ECARD SOLUTIONS LTD SwitchingMay 31, 2011 Ambersail Ltd

EchoSat Communications Network Provider/Transmitter

September 30, 2011 ComplyGuard Networks Inc.

Payment Gateway

eCommLink Hosting ProviderMarch 31, 2011 Payment Software Company (PSC)

Issuing Processing

Edhance, Inc. Loyalty ProgramsJuly 31, 2011 Payment Software Company (PSC)

EFT SOURCE, INC. OtherJuly 31, 2011 Lattimore Black Morgan and Cain

eGate Payment Technologies Ltd

Back Office ServicesAugust 31, 2011 Sysnet

Payment Gateway/Switch

Payment Processing - Internet

Eigen Development, Ltd Payment Gateway/SwitchOctober 31, 2011 Payment Software Company (PSC)

Payment Processing - InternetPayment Processing - MOTO

Payment Processing - POS

Elan Financial Services AuthorizationApril 30, 2011 TrustWave

Clearing & Settlement

Hosting ProviderIPSP (E-commerce)

Issuing Processing

Loyalty Programs

OtherPayment Gateway

Process Magnetic-Stripe Transactions

Switching

Elavon (formerly NOVA) AuthorizationMay 31, 2011 TrustWave

Clearing & Settlement

OtherPayment Gateway

Process Magnetic-Stripe Transactions

Elavon Canada (formerly Internet Secure)

OtherJuly 31, 2011 Trustwave

Payment Gateway

ELAVON DO BRASIL SOLUCOES DE PAGAMENTO S.A.

Payment Processing - POSJanuary 31, 2012 Verizon Business Network Services Inc.

22 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 23: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Elavon Fusebox AuthorizationNovember 30, 2011 Verizon Business

Clearing & SettlementPayment Gateway

Process Magnetic-Stripe Transactions

ELECTRA CARD SERVICES PVT. LTD.

3-D Secure Hosting ProviderMay 31, 2011 ControlCase

Clearing & Settlement

Issuer ProcessingLoyalty Programs

Payment Gateway/Switch

Payment Processing - ATM

Payment Processing - Internet

Electronic Merchant Systems

OtherApril 30, 2011 Trustwave

Electronic Payment Exchange (EPX)

AuthorizationApril 30, 2011 Payment Software Company (PSC)

Clearing & Settlement

MOTO Payment ProcessingPayment GatewayProcess Magnetic-Stripe Transactions

Switching

Electronic Payments Inc Clearing & SettlementJuly 31, 2011 Information Exchange

Loyalty Programs

Merchant Services

Electronic Processing Services

Clearing & SettlementJanuary 31, 2011 Information Exchange

Other

Electronic Transaction Systems Corporation (ETS Corp.)

Billing ManagementSeptember 30, 2011 Arsenal Security Group

Clearing & SettlementHosting Provider - Web

Merchant ServicesPayment Gateway/Switch

Payment Processing - InternetPayment Processing - MOTO

Payment Processing - POSTax/Government Payments

Element Payment Services Clearing & SettlementNovember 30, 2011 Information Exchange

Merchant ServicesPayment Gateway/Switch

23 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 24: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Element Payment Services Payment Processing - Internet

November 30, 2011 Information Exchange

Payment Processing - POS

Emdeon Back Office ServicesMarch 31, 2011 Lattimore Black Morgan and Cain

Payment Processing - InternetPayment Processing - POS

eMerchantPay Merchant ServicesDecember 31, 2011 Enterptise Risk Management

Other

EMERGING MARKETS PAYMENTS - JORDAN

AuthorizationDecember 31, 2011 Trustwave

Clearing & SettlementIPSP (E-commerce)

Issuing Processing

MOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Switching

Emergis Inc. Clearing & SettlementNovember 30, 2011 Trustwave

IPSP (E-commerce)MOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Switching

EMN8, Inc. Managed ServicesNovember 30, 2011 Tevora Business Solutions

Payment Gateway/Switch

Enacomm, Inc. Managed ServicesMarch 31, 2012 True Digital Security

eNett International (Netherlands)B.V.

Fraud and Chargeback Services

December 31, 2011 Securus Global

Issuer ProcessingPayment Processing - ATMPayment Processing - Internet

enStage Software Pvt Ltd 3-D Secure Access Control Server

December 31, 2011 ControlCase India

Payment Gateway/Switch

Payment Processing - InternetPayment Processing - POS

Prepaid Services

ePay Healthcare Payment Gateway/SwitchJanuary 31, 2012 403 Labs, LLC

Payment Processing - Internet

24 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 25: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

ePay Healthcare Payment Processing - POSJanuary 31, 2012 403 Labs, LLC

ePayData Clearing & SettlementOctober 31, 2011 Information Exchange

Merchant Services

Payment Gateway/Switch

Payment Processing - Internet

Epicor Managed ServicesMarch 31, 2012 Trustwave

Payment Processing - Internet

Epoch.com IPSP (E-commerce)November 30, 2011 Protiviti

eProcessing Network Payment GatewayApril 30, 2011 Trustwave

eProcurement Services LLC MOTO Payment ProcessingSeptember 30, 2011 K3DES

Epsilon Data Management, LLC

Loyalty ProgramsAugust 31, 2011 Brightline CPAs & Associates, Inc.

Equiant Financial Services, LLC

Payment Processing - Internet

November 30, 2011 Datassurant, Inc

Payment Processing - MOTO

Equifax OtherDecember 31, 2011 Trustwave

Escalate Retail Incorporated AuthorizationOctober 31, 2011 Trustwave

Loyalty Programs

MOTO Payment Processing

EURONET PAKISTAN (PRIVATE) LIMITED

Issuing ProcessingMay 31, 2011 Risk Associates

Switching

EURONET SERVICES INDIA PVT. LTD.

Issuer ProcessingApril 30, 2011 ControlCase

Payment Processing - ATM

Everlink Clearing & SettlementJune 30, 2011 Trustwave

Payment Gateway

EVERTEC Latinoamerica / ATH Costa Rica

AuthorizationDecember 31, 2011 Xtrategies

Clearing & SettlementIssuing Processing

Loyalty ProgramsMOTO Payment Processing

Process Magnetic-Stripe TransactionsSwitching

EVERTEC, Inc. AuthorizationJuly 31, 2011 Xtrategies

Clearing & SettlementHosting Provider

IPSP (E-commerce)

25 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 26: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

EVERTEC, Inc. Issuing ProcessingJuly 31, 2011 Xtrategies

MOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Switching

EVO Merchant Services AuthorizationOctober 31, 2011 Trustwave

Clearing & SettlementProcess Magnetic-Stripe TransactionsSwitching

E-xact Transactions Payment GatewayMay 31, 2011 Trustwave

Excellence in Motivation Clearing & SettlementNovember 30, 2011 Information Exchange

Loyalty Programs

Merchant Services

Prepaid Services

Experian OtherSeptember 30, 2011 Verizon Business

Experient Payment GatewayJuly 31, 2011 Trustwave

ExtraMeasures OtherMay 31, 2011 Coalfire

EZFacility.com Payment GatewayAugust 31, 2011 Trustwave

Ezic, Inc. Merchant ServicesJuly 31, 2011 Information Exchange

Payment Gateway/Switch

Payment Processing - InternetPayment Processing - MOTO

Payment Processing - POS

EZIDEBIT PTY LTD Clearing & SettlementJuly 31, 2011 Trustwave

IPSP (E-commerce)

MOTO Payment Processing

OtherPayment Gateway

ezRez Software Hosting Provider - WebOctober 31, 2011 Payment Software Company (PSC)

Fair Isaac Corporation OtherDecember 31, 2011 Trustwave

Faith Direct Billing ManagementJuly 31, 2011 CrimsonSecurity

Payment Processing - InternetPayment Processing - MOTO

Fédération des caisses Desjardins du Québec

AuthorizationAugust 31, 2011 Trustwave

Clearing & Settlement

26 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 27: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Fédération des caisses Desjardins du Québec

Issuing ProcessingAugust 31, 2011 Trustwave

MOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe Transactions

Fidelity Information Services - Acquiring Solutions, ATM Driving & Gateway Services

AuthorizationApril 30, 2011 Trustwave

Clearing & Settlement

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

Fidelity Information Services - Australasia Pty Ltd

AuthorizationNovember 30, 2011 Trustwave

Clearing & Settlement

Issuing Processing

Fidelity Information Services - Chicago Authnet

Payment Gateway/SwitchDecember 31, 2011 Trustwave

Payment Processing - ATM

Payment Processing - POS

Fidelity Information Services - Clear Commerce

AuthorizationMay 31, 2011 Trustwave

Clearing & Settlement

Payment Gateway

Fidelity Information Services - Electronic Payment Presentment

AuthorizationJuly 31, 2011 Trustwave

Fidelity Information Services - eZCard

OtherMarch 31, 2012 Trustwave

Fidelity Information Services - Issuing Solutions, Debit Account, Healthcare Payment Card and Prepaid Card Solutions

AuthorizationApril 30, 2011 Trustwave

Issuing Processing

Fidelity Information Services - Lisle Remittance Processing

OtherJanuary 31, 2012 Trustwave

Fidelity Information Services - Loyalty Card Processing

Loyalty ProgramsJune 30, 2011 Trustwave

27 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 28: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Fidelity Information Services - Merchant Acquiring and Credit Card Account Processing Services

OtherApril 30, 2011 Trustwave

Fidelity Information Services - Norcross Debit Card Processing

AuthorizationApril 30, 2011 Trustwave

Clearing & Settlement

Issuing ProcessingProcess Magnetic-Stripe Transactions

Fidelity Information Services - Output Solutions San Antonio

OtherFebruary 28, 2011 Trustwave

Fidelity Information Services - Payment Processing and Data Center Little Rock, AR

MOTO Payment ProcessingMay 31, 2011 Trustwave

Process Magnetic-Stripe Transactions

Fidelity Information Services - Prepaid Solutions - South

AuthorizationJuly 31, 2011 IBM – Internet Security Systems (ISS)

Clearing & SettlementIssuing Processing

Payment Gateway

Switching

Fidelity Information Services - Processadora e Servicos S.A. Brazil

AuthorizationApril 30, 2011 Trustwave

Clearing & SettlementIssuing Processing

Payment Gateway

Process Magnetic-Stripe Transactions

Fidelity Information Services - PSS India

Issuing ProcessingJanuary 31, 2012 Trustwave

Payment Gateway/Switch

Payment Processing - ATM

Fidelity Information Services - St. Petersburg Check

OtherMarch 31, 2011 Trustwave

Payment Gateway

Fidelity Information Services - St. Petersburg Remittance Processing

MOTO Payment ProcessingSeptember 30, 2011 Trustwave

Fidelity Information Services - Web Vault

OtherJanuary 31, 2011 Trustwave

28 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 29: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Fidelity Information Services Electronic Payments, New Berlin WI

Clearing & SettlementSeptember 30, 2011 Trustwave

Payment Gateway/Switch

Fidelity Information Services India Business Process Outsource (BPO) Program

Account ManagementSeptember 30, 2011 Trustwave

Back Office Services

Fidelity Information Services PayDirect Solutions - Government

AuthorizationMarch 31, 2011 Trustwave

Clearing & SettlementPayment Gateway

Process Magnetic-Stripe Transactions

Fifth Gear IPSP (E-commerce)August 31, 2011 Trustwave

MOTO Payment Processing

Payment Gateway

Financial Transmission Network Inc

Payment Gateway/SwitchJanuary 31, 2012 Trustwave

Finexus International Sdn Bhd

3-D Secure Hosting ProviderMarch 31, 2012 Trustwave

Authorization

Clearing & SettlementHosting Provider

Issuing ProcessingPayment Gateway/Switch

Payment Processing - MOTO

Payment Processing - POS

First American Payment Systems

Clearing & SettlementJune 30, 2011 IBM Internet Security Systems

First Atlantic Commerce, Ltd.

MOTO Payment ProcessingMarch 31, 2011 Coalfire Systems

Payment Gateway

Switching

First Data Buypass (First Data Concord Payment Services)

AuthorizationSeptember 30, 2011 Trustwave

Clearing & SettlementIPSP (E-commerce)

Issuing Processing

MOTO Payment Processing

Payment GatewayProcess Magnetic-Stripe Transactions

29 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 30: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

First Data Buypass (First Data Concord Payment Services)

SwitchingSeptember 30, 2011 Trustwave

First Data CAC (Processing Center, S.A.)

Clearing & SettlementMarch 31, 2012 TrustWave

Issuer ProcessingPayment Gateway/Switch

First Data Card Services International

AuthorizationSeptember 30, 2011 Trustwave

Clearing & Settlement

IPSP (E-commerce)

Issuing ProcessingMOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Switching

First Data Clientline Reporting (First Data Concord Electronic Financial Systems)

Clearing & SettlementSeptember 30, 2011 Trustwave

FIRST DATA CONO SUR, S.A.

Account ManagementMarch 31, 2012 Trustwave

Back Office ServicesClearing & Settlement

Data Preparation

Fraud and Chargeback ServicesIssuer Processing

Merchant ServicesOther

Payment Processing - ATMPayment Processing - Internet

Payment Processing - MOTOPayment Processing - POS

First Data EFS Transportation System

AuthorizationSeptember 30, 2011 Trustwave

Clearing & Settlement

IPSP (E-commerce)

Issuing ProcessingMOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Switching

30 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 31: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

First Data Global Gateway (First Data LinkPoint/First Data YourPay)

IPSP (E-commerce)September 30, 2011 Trustwave

MOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe Transactions

First Data Government Solutions

IPSP (E-commerce)September 30, 2011 Trustwave

Payment Gateway

First Data Integrated Payment Systems

OtherSeptember 30, 2011 Trustwave

First Data International ANZ AuthorizationSeptember 30, 2011 Trustwave

Clearing & Settlement

IPSP (E-commerce)Issuing ProcessingLoyalty Programs

MOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

First Data International China

AuthorizationSeptember 30, 2011 Trustwave

Clearing & SettlementIssuing Processing

Loyalty ProgramsProcess Magnetic-Stripe Transactions

First Data International Korea

AuthorizationOctober 31, 2011 Trustwave

Clearing & Settlement

Loyalty Programs

Payment Gateway

Switching

First Data International-OmniPay Limited

AuthorizationNovember 30, 2011 Trustwave

Clearing & SettlementMOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

First Data Merchant Services

AuthorizationSeptember 30, 2011 Trustwave

Clearing & SettlementIPSP (E-commerce)

31 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 32: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

First Data Merchant Services

MOTO Payment ProcessingSeptember 30, 2011 Trustwave

Payment Gateway

Process Magnetic-Stripe Transactions

Switching

First Data Money Network AuthorizationSeptember 30, 2011 Trustwave

Clearing & Settlement

IPSP (E-commerce)Issuing Processing

MOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

First Data PayPoint Clearing & SettlementSeptember 30, 2011 Trustwave

IPSP (E-commerce)Process Magnetic-Stripe Transactions

First Data Prepaid Services (First Data Concord Financial Technologies)

AuthorizationSeptember 30, 2011 Trustwave

Clearing & Settlement

IPSP (E-commerce)Issuing Processing

Loyalty Programs

MOTO Payment Processing

Payment GatewayProcess Magnetic-Stripe Transactions

Switching

First Data RemitCo OtherSeptember 30, 2011 Trustwave

Remittance Processing

First Data Resources AuthorizationSeptember 30, 2011 Trustwave

Clearing & Settlement

IPSP (E-commerce)

Issuing Processing

MOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Switching

First Data Retail ATM AuthorizationSeptember 30, 2011 Trustwave

Clearing & Settlement

IPSP (E-commerce)MOTO Payment Processing

Payment Gateway

32 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 33: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

First Data Retail ATM Process Magnetic-Stripe Transactions

September 30, 2011 Trustwave

Switching

First Data Secure Transport (Datawire)

AuthorizationSeptember 30, 2011 Trustwave

IPSP (E-commerce)Payment Gateway

Process Magnetic-Stripe Transactions

Switching

First Data STAR (Networks, Processing and Systems Inc.)

AuthorizationSeptember 30, 2011 Trustwave

Clearing & SettlementIPSP (E-commerce)

Issuing Processing

MOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Switching

First Data TeleCheck AuthorizationSeptember 30, 2011 Trustwave

Clearing & SettlementIssuing ProcessingLoyalty Programs

MOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

First Hawaiian Bank AuthorizationJune 30, 2011 Trustwave

Clearing & SettlementPayment Gateway

Process Magnetic-Stripe Transactions

First National Bank of Omaha

AuthorizationJanuary 31, 2012 Trustwave

Clearing & SettlementIssuing Processing

MOTO Payment Processing

Process Magnetic-Stripe TransactionsSwitching

First National Technology Solutions

Hosting Provider- HardwareMarch 31, 2012 Trustwave

Managed ServicesNetwork Provider/Transmitter

33 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 34: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

FirstSource Advantage, LLC OtherSeptember 30, 2011 SecurityMetrics

FirstView, LLC AuthorizationAugust 31, 2011 Trustwave

Issuing Processing

MOTO Payment Processing

Payment GatewayProcess Magnetic-Stripe Transactions

Fiserv - ACCEL/Exchange Issuing ProcessingApril 30, 2011 Payment Software Company (PSC)

Fiserv - Amherst Call Center OtherMarch 31, 2011 Payment Software Company (PSC)

Fiserv - Bank Solutions Lincoln & Sioux Falls

OtherJuly 31, 2011 Payment Software Company (PSC)

Fiserv - Bank Solutions Precision Data Center

OtherNovember 30, 2011 Payment Software Company (PSC)

Fiserv ‐ Checkfree Club Solutions (I4 Aphelion, EFT, POS)

OtherDecember 31, 2011 Payment Software Company (PSC)

Fiserv - CheckFreePay OtherJune 30, 2011 Payment Software Company (PSC)

Fiserv - Club Solutions (Compete, EFT Web, EFT, POS)

AuthorizationJuly 31, 2011 Payment Software Company (PSC)

Payment Gateway

Fiserv - CUBEOL Issuing ProcessingMay 31, 2011 Payment Software Company (PSC)

Fiserv - CUSA OtherOctober 31, 2011 Payment Software Company (PSC)

Fiserv - Customer Solutions OtherNovember 30, 2011 Payment Software Company (PSC)

Fiserv - Enterprise Technology Group - Brookfield, WI Data Center

OtherOctober 31, 2011 Payment Software Company (PSC)

Fiserv - Enterprise Technology Group - Johns Creek, GA, Philadelphia, PA and Lewisville, TX Data Centers

OtherSeptember 30, 2011 Payment Software Company (PSC)

Fiserv – ETG Irving Data Center

OtherNovember 30, 2011 Payment Software Company (PSC)

Fiserv - Galaxy Issuer ProcessingJanuary 31, 2012 Payment Software Company (PSC)

Fiserv - Premier Central OtherNovember 30, 2011 Payment Software Company (PSC)

34 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 35: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Fiserv - Signature Development Lake Mary

OtherAugust 31, 2011 Payment Software Company (PSC)

Fiserv - SourceOne OtherJuly 31, 2011 Payment Software Company (PSC)

FISERV - XP2 Hosting ProviderMay 31, 2011 Payment Software Company (PSC)

Other

Fiserv - Xroads OtherFebruary 28, 2012 Payment Software Company (PSC)

FISERV Advantage AuthorizationSeptember 30, 2011 Payment Software Company (PSC)

Hosting ProviderSwitching

Fiserv Bank Solutions - Cleartouch Banking Platform

Hosting ProviderNovember 30, 2011 Payment Software Company (PSC)

IPSP (E-commerce)Issuing Processing

Fiserv Bank Solutions - Southwest

AuthorizationMarch 31, 2011 Payment Software Company (PSC)

Issuing Processing

Switching

Fiserv Bank Solutions - Western Region Data Center

Issuing ProcessingNovember 30, 2011 Payment Software Company (PSC)

Fiserv Bank Solutions Eastern Region: Service Center

Issuing ProcessingDecember 31, 2011 Payment Software Company (PSC)

Fiserv Card Services Issuing ProcessingMarch 31, 2012 Payment Software Company (PSC)

Fiserv E-Banking Hillsboro Hosting ProviderSeptember 30, 2011 Payment Software Company (PSC)

Fiserv Electronic Banking, Biller Solutions & Itech

OtherOctober 31, 2011 Payment Software Company (PSC)

Payment Gateway

Fiserv India PVT LTD OtherAugust 31, 2011 ControlCase India

Fiserv Lending Solutions - Loan Serv

OtherNovember 30, 2011 Payment Software Company (PSC)

Fiserv OnCU OtherJuly 31, 2011 Payment Software Company (PSC)

Fiserv Output Solutions - Electronic Document Delivery

Records ManagementFebruary 28, 2012 Payment Software Company (PSC)

35 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 36: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Fiserv Solutions, Inc. (Maverick)

Clearing & SettlementJuly 31, 2011 Pointe Solutions

Issuing Processing

Prepaid Services

Fiserv, Inc., Virtual Branch OtherDecember 31, 2011 Payment Software Company (PSC)

Florists’ Transworld Delivery, Inc.

Payment Gateway/SwitchDecember 31, 2011 Halock Security Labs

Payment Processing - POS

Fore! Reservations Payment Gateway/SwitchSeptember 30, 2011 BrightLine CPAs and Associates, Inc.

Fosdick Fulfillment Clearing & SettlementJuly 31, 2011 Trustwave

MOTO Payment ProcessingOther

FreedomPay Inc. Clearing & SettlementJuly 31, 2011 CompliancePoint

Loyalty Programs

Payment Processing - Internet

Payment Processing - POS

Frontline Processing OtherJune 30, 2011 SecurityMetrics

Payment Gateway

FrontStream Payments, Inc. Payment Gateway/SwitchMay 31, 2011 ControlCase

Payment Processing - Internet

Payment Processing - MOTO

Fry Inc. Hosting ProviderMay 31, 2011 IBM Internet Security Systems

FSV Payment Systems AuthorizationMay 31, 2011 K3DES

Clearing & Settlement

Other

Fujitsu America Inc. Managed ServicesFebruary 28, 2012 Verizon Business

Fulfillment Technologies AuthorizationJune 30, 2011 SecureState

Clearing & Settlement

MOTO Payment Processing

Galileo Processing AuthorizationJuly 31, 2011 Trustwave

Clearing & Settlement

Issuing ProcessingProcess Magnetic-Stripe Transactions

Ganart Technologies, Inc. OtherFebruary 28, 2011 ControlCase

Gateway Ticketing Systems, Inc.

Hosting ProviderOctober 31, 2011 Fortrex Technologies

36 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 37: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Gateway Ticketing Systems, Inc.

IPSP (E-commerce)October 31, 2011 Fortrex Technologies

GE Capital Retail Bank - Retail Finance

AuthorizationAugust 31, 2011 Trustwave

Issuing Processing

GE Capital Retail Bank - Sales Finance

IPSP (E-commerce)December 31, 2011 Trustwave

Payment Gateway

GetNet Clearing & SettlementJuly 31, 2011 Cipher Informatica Ltda

Payment Gateway

Switching

Global Card Services AuthorizationMay 31, 2011 Trustwave

Clearing & Settlement

Other

Payment GatewayProcess Magnetic-Stripe Transactions

Global Cash Access Fraud and Chargeback Services

July 31, 2011 Trustwave

Other

Payment Processing - ATM

Payment Processing - MOTOPayment Processing - POS

Global Cash Card AuthorizationJanuary 31, 2012 Digital Resources Group (DRG)

Issuing Processing

Global Collect Services IPSP (E-commerce)July 31, 2011 Trustwave

Other

Global Debt Registry OtherSeptember 30, 2011 Solutionary, Inc.

Global Electronic Technology

Clearing & SettlementJanuary 31, 2012 403 Labs, LLC

Payment Gateway/Switch

Payment Processing - Internet

Payment Processing - MOTOPayment Processing - POS

Global Processing Centre Clearing & SettlementJune 30, 2011 Information Exchange Inc.

Issuing Processing

Payment Gateway/SwitchPayment Processing - ATM

Payment Processing - InternetPayment Processing - POS

37 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 38: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

GLOBAL REFUND HOLDINGS AB

Payment GatewayJanuary 31, 2011 Vectra Information Security Pte Ltd

Global Technology Partners LLC

OtherJune 30, 2011 Coalfire

Go Daddy OtherDecember 31, 2011 Protiviti

Goconcierge.net Back Office ServicesDecember 31, 2011 Accretive Solutions Operating Corp.

Merchant Services

Records Management

GoEmerchant AuthorizationMay 31, 2011 IBM Internet Security Systems

Payment Gateway

GolfSwitch IPSP (E-commerce)November 30, 2011 Chief Security Officers, LLC

MOTO Payment Processing

Google Payment GatewayJanuary 31, 2012 IOActive

Government Payment Services

Payment GatewayDecember 31, 2011 Trustwave

Government Payments LLC IPSP (E-commerce)October 31, 2011 Trustwave

Payment Gateway

Govolution, Inc. AuthorizationMay 31, 2011 IBM Internet Security Systems

Payment Gateway

GP Network Corporation Issuing ProcessingSeptember 30, 2011 BSI Japan

Payment Gateway/Switch

Grant Street Group Payment GatewayFebruary 28, 2012 SecurityMetrics, Inc.

Payment Gateway/Switch

Payment Processing - InternetPayment Processing - POS

Tax/Government Payments

Green Dot Issuing ProcessingOctober 31, 2011 Protiviti Inc.

GSI Commerce Solutions IPSP (E-commerce)September 30, 2011 Trustwave

Guthy Renker Fulfillment Services

AuthorizationOctober 31, 2011 Trustwave

Hosting Provider

Halyk Savings Bank of Kazakhstan

ATM ProcessingJanuary 31, 2011 FortConsult

Authorization

Clearing & Settlement

POS Payment ProcessingProcess Magnetic-Stripe Transactions

38 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 39: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Hamer Enterprises Payment Processing - Internet

December 31, 2011 SecurityMetrics

Hanover Direct Payment GatewaySeptember 30, 2011 Fortrex Technologies

Harland Clarke OtherJune 30, 2011 Verizon Business

Harland Financial Solutions AuthorizationAugust 31, 2011 Crowe Horwath

Clearing & Settlement

MOTO Payment Processing

Payment GatewayProcess Magnetic-Stripe Transactions

Switching

Harris Connect AuthorizationDecember 31, 2011 Trustwave

Payment Gateway

Harte-Hanks Merchant ServicesJune 30, 2011 CyberEnsure LLC

Hearst Communication Inc Merchant ServicesMay 31, 2011 Solutionary, Inc.

Payment Gateway/Switch

Heartland Payment Systems AuthorizationApril 30, 2011 Coalfire

Clearing & Settlement

MOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

Heartland Payment Systems – mySchoolBucks

IPSP (E-commerce)August 31, 2011 Tevora Business Solutions

Helcim Inc. Payment Gateway/SwitchJune 30, 2011 SPIguard Security Solutions Inc.

Payment Processing - InternetPayment Processing - MOTO

Hewlett-Packard (TD Bank Environment)

Clearing & SettlementJune 30, 2011 TELUS Security Solutions

Hosting Provider- Hardware

Managed ServicesPayment Processing - ATM

Payment Processing - POS

Higher One Payments Inc. (CASHNet)

Payment GatewayDecember 31, 2011 403 Labs, LLC

Payment Processing - Internet

Payment Processing - POS

Hinda, Inc. Loyalty ProgramsJanuary 31, 2012 Tech Lock Inc

39 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 40: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Hitachi Systems Ltd. AuthorizationJune 30, 2011 Internet Secuirty Services

Issuing ProcessingPayment Gateway

Host.net Hosting ProviderDecember 31, 2011 BrightLine CPAs and Associates, Inc.

Other

HostedPCI Hosting Provider - WebMarch 31, 2012 NCI Secured Intellgence

Payment Gateway/Switch

Hosting.com Hosting ProviderApril 30, 2011 Trustwave

Other

HP Commercial Card (EDS) AuthorizationMay 31, 2011 Trustwave

Issuing Processing

HP Consumer Direct Clearing & SettlementSeptember 30, 2011 Arsenal Security Group

Hosting ProviderIPSP (E-commerce)

Payment Gateway

HP EDS Merchant Acquirer AuthorizationOctober 31, 2011 Arsenal Security Group

Clearing & SettlementPayment Gateway

Switching

HP Guidance Authorization AuthorizationOctober 31, 2011 Arsenal Security Group

Issuing Processing

HP Oregon eGovernment (EDS)

Payment GatewayJune 30, 2011 Trustwave

HP Pay for Convenience (EDS)

Payment GatewayApril 30, 2011 Trustwave

HP Secure Payment Services - RCU America

Back Office ServicesJanuary 31, 2012 Arsenal Security Group

Merchant Services

HP Surveyor (EDS) OtherAugust 31, 2011 Trustwave

Hughes Network Systems Network Provider/Transmitter

September 30, 2011 IBM Internet Security Systems

Hyperativa Consultoria e Internet LTDA

Loyalty ProgramsJanuary 31, 2011 Cipher

HyperQuality, Inc. OtherApril 30, 2011 ControlCase

i2c Incorporated AuthorizationNovember 30, 2011 Trustwave

Issuing Processing

Payment Gateway

IATS Payment GatewayDecember 31, 2011 Internet Security Systems (ISS)

40 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 41: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

IC Systems Clearing & SettlementAugust 31, 2011 RSM McGladrey

iCongo Hosting ProviderJanuary 31, 2011 NetSPI

ID Analytics, Inc. OtherJune 30, 2011 Computer Task Group

iMax Bancard OtherDecember 31, 2011 SecurityMetrics

IModules Software, Inc Hosting Provider - WebAugust 31, 2011 FishNet Security

Network Provider/TransmitterPayment Processing - Internet

InComm AuthorizationSeptember 30, 2011 IBM Internet Security Systems

Issuing Processing

Other

Industry Retail Group OtherNovember 30, 2011 Trustwave

INetU, Inc. Hosting ProviderJanuary 31, 2012 Trustwave

Managed Services

Infinity Data Clearing & SettlementOctober 31, 2011 Information Exchange

Merchant Services

Infocision Payment Processing - MOTO

August 31, 2011 SecureState Consulting

InfoGroup OtherMarch 31, 2011 Solutionary, Inc.

Infusion Software MOTO Payment ProcessingJuly 31, 2011 SecurityMetrics

Payment Gateway

Innotrac Corporation IPSP (E-commerce)August 31, 2011 Trustwave

MOTO Payment Processing

Payment Gateway

Innovis Data Solutions, Inc. OtherApril 30, 2011 Verizon Business

IN-SOLUTIONS GLOBAL PVT LIMITED

Back Office ServicesApril 30, 2011 SISA Information Security

Clearing & Settlement

Issuer Processing

Other

InstaMed Communications Payment Processing - Internet

February 28, 2012 Trustwave

Payment Processing - POS

Integrity Payment Systems Clearing & SettlementMarch 31, 2011 K3DES

Other

InteliSpend Prepaid Solutions

Issuing ProcessingSeptember 30, 2011 IBM Security Services

Loyalty Programs

41 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 42: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Intellipay Payment Gateway/SwitchFebruary 28, 2012 Trustwave

Payment Processing - Internet

InterceptEFT Payment GatewaySeptember 30, 2011 Coalfire

Interface Security Secure - Managed Broadband

Network Provider/Transmitter

June 30, 2011 SecurityMetrics

International Bancard Corporation

Clearing & SettlementNovember 30, 2011 Information Exchange Inc.

Merchant Services

INTERNATIONAL CARD PROCESSING SERVICES LTD

Issuer ProcessingJune 30, 2011 ControlCase

Payment Processing - ATM

Payment Processing - POS

INTERNATIONAL CARD SYSTEMS AD (CASYS AD)

Clearing & SettlementAugust 31, 2011 Acertigo AG

Payment Gateway/Switch

Payment Processing - ATMPayment Processing - InternetPayment Processing - POS

Internet Payment Exchange Network Provider/Transmitter

July 31, 2011 ANX

Payment Processing - Internet

Records Management

Internet Ticketing Systems, Inc

OtherJuly 31, 2011 SecurityMetrics

Payment Gateway/Switch

Payment Processing - InternetPayment Processing - POS

Intersections AuthorizationFebruary 28, 2011 Control Case

IPSP (E-commerce)

Interspire pty Ltd. Hosting ProviderNovember 30, 2011 Payment Software Company, LLC (PSC)

MOTO Payment Processing

Intrix Technology Inc. Payment Gateway/SwitchMarch 31, 2012 Trustwave

Payment Processing - InternetPayment Processing - POS

Intuit BackOffice Back Office ServicesNovember 30, 2011 Trustwave

Clearing & SettlementFraud and Chargeback Services

42 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 43: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Intuit BackOffice OtherNovember 30, 2011 Trustwave

Intuit Electronic Clearing House (ECHO, Inc.)

AuthorizationApril 30, 2011 Trustwave

Clearing & Settlement

Payment Gateway

Process Magnetic-Stripe Transactions

Switching

Intuit Merchant OtherOctober 31, 2011 Trustwave

Intuit Processor Account ManagementOctober 31, 2011 Trustwave

Clearing & SettlementMerchant ServicesOther

Payment Gateway/Switch

Payment Processing - InternetPrepaid Services

Intuition Systems, Inc. a.k.a Bill2Pay

Payment GatewayOctober 31, 2011 SecurityMetrics

IP Commerce OtherOctober 31, 2011 Coalfire

Payment Gateway

IP PAYMENTS PTY LTD Payment Gateway/SwitchAugust 31, 2011 Vectra Corporation

Payment Processing - Internet

iPass, Inc. OtherMarch 31, 2012 Digital Resources Group (DRG)

iPayment OtherJune 30, 2011 Trustwave

IPS Group Inc. Payment Gateway/SwitchOctober 31, 2011 Tevora Business Solutions

iQmetrix Payment Processing - Internet

August 31, 2011 Seccuris, Inc.

IRN Payment Systems Clearing & SettlementFebruary 28, 2011 Information Exchange

Merchant Services

Iron Mountain OtherMay 31, 2011 Neohapsis Inc.

iTransact MOTO Payment ProcessingMay 31, 2011 Specialized Security Services, Inc.

Payment Gateway

Process Magnetic-Stripe Transactions

ITS Inc./Shazam Inc. AuthorizationApril 30, 2012 Trustwave

Clearing & Settlement

Payment GatewayProcess Magnetic-Stripe Transactions

43 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 44: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

ITS Inc./Shazam Inc. SwitchingApril 30, 2012 Trustwave

Iveri Payment Technology AuthorizationMarch 31, 2011 Trustwave

IPSP (E-commerce)

MOTO Payment Processing

Switching

J.J. MacKay Canada Limited/MacKay Meters, Inc. (MacKay Meters)

Payment GatewayNovember 30, 2011 Trustwave

JetPay, LLC Clearing & SettlementApril 30, 2011 Trustwave

Payment Gateway

jha Payment Processing Solutions

Clearing & SettlementJune 30, 2011 Coalfire Systems Inc.

Issuing ProcessingLoyalty Programs

Payment Gateway

JP Morgan Chase Pay Connexion

Payment Processing - Internet

April 30, 2011 Jefferson Wells

JSC SMARTCARDLINK Payment Gateway/SwitchApril 30, 2011 Sysnet Global Solutions

Payment Processing - Internet

JSC United Financial Corporation

AuthorizationFebruary 28, 2011 Trustwave

Clearing & Settlement

Issuing Processing

OtherProcess Magnetic-Stripe Transactions

Switching

Kalio Payment Gateway/SwitchFebruary 28, 2012 SecurityMetrics

KeyBank Lockbox Payment Processing - MOTO

January 31, 2012 SecureState

Records Management

Kimbia, Inc. Hosting Provider - WebOctober 31, 2011 Compass IT Compliance, LLC

Payment Processing - Internet

Klik Technologies, Corp. OtherSeptember 30, 2011 Information Exchange

Payment Gateway/Switch

Kobie Marketing, Inc. Loyalty ProgramsDecember 31, 2011 BrightLine CPAs and Associates, Inc.

Kony Solutions, Inc Managed ServicesFebruary 28, 2012 403 Labs, LLC

Payment Gateway/Switch

44 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 45: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Kount, Inc (A Division of Keynetics, Inc)

Fraud and Chargeback Services

March 31, 2012 Trustwave

Kubra Data Transfer, Inc. Payment GatewayJuly 31, 2011 Trustwave

KUWAIT INTERNATIONAL BANK

AuthorizationNovember 30, 2011 SISA Information Security Pvt. Ltd.

Clearing & Settlement

Issuing Processing

Switching

Layered Tech, formerly GSI Hosting

Hosting ProviderMay 31, 2011 BrightLine CPAs and Associates, Inc.

LesConcierges Loyalty ProgramsMarch 31, 2011 Digital Resources Group (DRG)

Lethoff, Inc. AuthorizationJanuary 31, 2011 Trustwave

Payment Gateway

Lighthouse1 OtherFebruary 28, 2011 Jefferson Wells

Litle & Co Clearing & SettlementJanuary 31, 2012 Payment Software Company (PSC)

Payment Gateway/SwitchPayment Processing - Internet

Payment Processing - MOTO

LiveOps, Inc OtherJuly 31, 2011 Trustwave

LiveVox, Inc. Billing ManagementJanuary 31, 2012 Verizon Business

Other

LLC Multifunctional Processing Company

ATM ProcessingJanuary 31, 2011 FortConsult

AuthorizationClearing & Settlement

Internet Payment Processing

Merchant POS ProcessingMOTO Payment ProcessingProcess Magnetic-Stripe Transactions

LOTSolutions / Life of the South

MOTO Payment ProcessingJune 30, 2011 Trustwave

Other

Lundquist Consulting OtherFebruary 28, 2011 Trustwave

Maas Global Solutions Corporation

AuthorizationOctober 31, 2011 Digital Resources Group (DRG)

MOTO Payment Processing

Payment GatewayProcess Magnetic-Stripe Transactions

45 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 46: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Magensa Fraud and Chargeback Services

August 31, 2011 Coalfire

Payment Gateway/Switch

Payment Processing - Internet

Payment Processing - MOTOPayment Processing - POS

Magic-Wrighter, Inc. AuthorizationJuly 31, 2011 Trustwave

Payment Gateway

Maintech SwitchingNovember 30, 2011 IBM Internet Security Systems

MAKO NETWORKS LIMITED

OtherFebruary 28, 2011 Verizon Business

Maritz Loyalty Marketing Loyalty ProgramsDecember 31, 2011 IBM Internet Security Systems

Maritz Travel OtherAugust 31, 2011 IBM Internet Security Systems

MarketLive Hosting ProviderOctober 31, 2011 AT&T Consulting Solutions

MBS Insight, Inc OtherMay 31, 2011 K3DES

MBS Textbook Exchange, Inc. - inSite

Payment GatewaySeptember 30, 2011 Trustwave

MBU d.o.o. 3-D Secure Access Control Server

August 31, 2011 Trustwave

AuthorizationClearing & Settlement

IPSP (E-commerce)

Issuing ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Switching

McKesson - RelayHealth IPSP (E-commerce)April 30, 2011 Trustwave

MOTO Payment ProcessingPayment Gateway

MegaPath Managed ServicesJanuary 31, 2012 Trustwave

Network Provider/Transmitter

Member Solutions, Inc. AuthorizationSeptember 30, 2011 Trustwave

Clearing & Settlement

MOTO Payment Processing

Payment Gateway

46 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 47: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Mercadotécnia, Ideas y Tecnología

IPSP (E-commerce)November 30, 2011 Xtrategies, LLC

Issuing Processing

MOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

Merchant e-Solutions AuthorizationJuly 31, 2011 Digital Resources Group (DRG)

Clearing & Settlement

MOTO Payment Processing

Payment GatewayProcess Magnetic-Stripe Transactions

Merchant Link, LLC Clearing & SettlementJanuary 31, 2012 Trustwave

Payment Gateway/SwitchPayment Processing - Internet

Merchant One, Inc. Clearing & SettlementMarch 31, 2011 Information Exchange

Merchant Services

Merchant Partners Clearing & SettlementJuly 31, 2011 Information Exchange

Merchant ServicesPayment Gateway/Switch

Payment Processing - Internet

Payment Processing - MOTOPayment Processing - POS

Merchant Processing International

Fraud and Chargeback Services

May 31, 2011 Intersec Worldwide

Prepaid Services

Merchant Services LTD OtherApril 30, 2011 The Compliance and Audit Group

Merchant Services Processing at Bank of America, NA

Clearing & SettlementMarch 31, 2011 Trustwave

Payment GatewaySwitching

Merchant Warehouse Payment GatewayMarch 31, 2011 Trustwave

Merchants Billing Services Clearing & SettlementNovember 30, 2011 Information Exchange Inc.

IPSP (E-commerce)

Merchant ServicesMOTO Payment ProcessingPayment Gateway

47 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 48: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Merchants Billing Services Payment Processing - Internet

November 30, 2011 Information Exchange Inc.

Merchants’ Choice Payment Solutions

OtherSeptember 30, 2011 K3DES LLC

Mercury Payment Systems Payment GatewayNovember 30, 2011 Coalfire

Meritus Payment Solutions Merchant ServicesOctober 31, 2011 403 Labs

Payment Gateway/Switch

Payment Processing - InternetPayment Processing - POS

Meta Payment Systems Clearing & SettlementApril 30, 2011 Trustwave

MetaSource OtherMarch 31, 2011 Compass IT

Metavante Biller Solution Product (BSP)

Billing ManagementSeptember 30, 2011 Trustwave

Metavante Healthcare Payment Solutions Group, Benefits Payment Systems

Account ManagementFebruary 28, 2011 TrustWave

Billing and Customer SupportEmployee Benefits Programs

Health Savings Account ServicesPrepaid Employee Benefits Programs

MetraTech Corp. Hosting Provider - WebFebruary 28, 2011 Kirkpatrick Price LLC

Network Provider/Transmitter

Payment Processing - Internet

MHM Resources, LLC Clearing & SettlementJanuary 31, 2012 RSM McGladrey

Loyalty Programs

MICROPAGOS S.A. Network Provider/Transmitter

February 28, 2012 CYBSEC SA

Payment Processing - Internet

Micros Systems, Inc. Payment GatewayMay 31, 2011 Trustwave

Microsoft Dynamics Online AuthorizationMay 31, 2011 Trustwave

IPSP (E-commerce)MOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Microsoft Tellme MOTO Payment ProcessingSeptember 30, 2011 Trustwave

48 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 49: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Microsoft Tellme OtherSeptember 30, 2011 Trustwave

Minacs Worldwide Inc. Account ManagementApril 30, 2011 Trustwave

Loyalty Programs

MOTO Payment Processing

OtherPrepaid Services

Mindbody Hosting ProviderSeptember 30, 2011 Payment Software Company (PSC)

Payment Gateway

Moneris Solutions Corp - Shared Cash Dispensing Royal Bank of Canada

AuthorizationJuly 31, 2011 Control Gap

Clearing & Settlement

Process Magnetic-Stripe Transactions

Switching

Moneris Solutions Inc. 3-D Secure Access Control Server

July 31, 2011 Control Gap

Clearing & Settlement

MOTO Payment ProcessingProcess Magnetic-Stripe Transactions

Monexa Solutions, Inc. OtherJanuary 31, 2011 Payment Software company (PSC)

Money Movers, Inc Clearing & SettlementFebruary 28, 2012 Digital Resources Group (DRG)

Payment Gateway/Switch

MoneyGram Payment Systems / Property Bridge

IPSP (E-commerce)May 31, 2011 Payment Software Company (PSC)

Other

Moneytree ATM Digital Network Solutions LLC

Clearing & SettlementApril 30, 2011 Information Exchange

Merchant ServicesPayment Gateway/Switch

Payment Processing - ATM

Monitise Americas Account ManagementSeptember 30, 2011 Trustwave

Moore Wallace OtherFebruary 28, 2011 Solutionary, Inc

Motionsoft Hosting Provider - WebMarch 31, 2012 Trustwave

OtherPayment Gateway/Switch

Payment Processing - Internet

Payment Processing - MOTOPayment Processing - POS

49 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 50: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Motivational Fulfillment & Logistics Services

Payment Processing - MOTO

February 28, 2011 Tevora Business Solutions

mPay Gateway Billing ManagementDecember 31, 2011 SecurityMetrics

Payment Gateway/Switch

Prepaid Services

MPOS Australia Pty Ltd Payment Gateway/SwitchOctober 31, 2011 Vectra Corporation Limited

Payment Processing - MOTOPayment Processing - POS

MSI - Merchant Services, Inc. NJ

Clearing & SettlementMarch 31, 2011 Information Exchange

Merchant Services

Mtrex (Vision Bankcard, Inc.)

IPSP (E-commerce)February 28, 2011 Trustwave

Payment GatewayProcess Magnetic-Stripe Transactions

MTXEPS Payment GatewayOctober 31, 2011 Trustwave

Process Magnetic-Stripe Transactions

Switching

Multi Service Corporation Clearing & SettlementFebruary 28, 2012 Trustwave

Payment Gateway/Switch

Payment Processing - Internet

Payment Processing - POS

National Bankcard Services Clearing & SettlementOctober 31, 2011 RSM McGladrey

Loyalty Programs

Payment Gateway/SwitchPayment Processing - POS

National Credit Cards Clearing & SettlementJuly 31, 2011 NVision Group

Issuer ProcessingOther

Payment Gateway/Switch

Payment Processing - ATM

National Fulfillment Services (NFS)

AuthorizationOctober 31, 2011 SecurityMetrics

Clearing & SettlementHosting ProviderMOTO Payment Processing

Payment Gateway

National Information Solutions Cooperative

Payment GatewayMay 31, 2011 Trustwave

50 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 51: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

National Merchant Center AuthorizationDecember 31, 2011 Digital Resources Group (DRG)

IPSP (E-commerce)

MOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe Transactions

National Processing Company

OtherSeptember 30, 2011 Trustwave

National Records Management

OtherAugust 31, 2011 403 Labs

National Systems Corporation / QuikOrder, Inc.

AuthorizationJuly 31, 2011 Trustwave

Hosting Provider

Nationwide Payment Solutions, LLC

AuthorizationJanuary 31, 2012 ControlCase LLC

Clearing & SettlementPayment Gateway

NBX Merchant Services, Inc. DBA Optimal Payments

Clearing & SettlementDecember 31, 2011 Trustwave

Payment Gateway

NCMIC Finance Corporation OtherOctober 31, 2011 SecurityMetrics

NCO Group OtherNovember 30, 2011 Payment Software Company (PSC)

NCR Corporation OtherNovember 30, 2011 ControlCase LLC

NCR eCommerce - TD Bank Environment

Hosting Provider - WebSeptember 30, 2011 Arsenal Security Group

Hosting Provider- HardwareManaged Services

Nebraska Electronic Transfer System, Inc.

Clearing & SettlementNovember 30, 2011 Trustwave

Payment Gateway/Switch

Payment Processing - ATM

Nelnet Business Solutions, Inc

AuthorizationApril 30, 2011 Trustwave

Payment Gateway

NeoSpire, Inc. Hosting ProviderApril 30, 2011 Trustwave

NETBilling Billing ManagementFebruary 28, 2012 SecurityMetrics

Payment Gateway/Switch

Payment Processing - Internet

NetCentrix Billing ManagementApril 30, 2011 INFORMATION EXCHANGE, INC

51 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 52: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

NetCentrix Clearing & SettlementApril 30, 2011 INFORMATION EXCHANGE, INC

Loyalty Programs

Merchant Services

Payment Gateway/Switch

Payment Processing - InternetPayment Processing - MOTO

Payment Processing - POS

netSpend Corporation Clearing & SettlementJune 30, 2011 Coalfire Systems. Inc.

Issuer Processing

Payment Gateway/SwitchPayment Processing - ATM

Payment Processing - Internet

Prepaid Services

NetSuite Hosting ProviderJanuary 31, 2012 Trustwave

Payment Gateway

Network Merchants Payment GatewayMarch 31, 2011 Trustwave

NETWORK PROCESSING COMPANY S.A.E. (NPC)

AuthorizationJune 30, 2011 Trustwave

Clearing & SettlementIssuing Processing

MOTO Payment Processing

Payment Gateway

Switching

Network Solutions Hosting Provider - WebNovember 30, 2011 Payment Software Company (PSC)

Newtek Merchant Solutions Clearing & SettlementOctober 31, 2011 SecurityMetrics

Loyalty Programs

NEXTAG, INC. Hosting ProviderJune 30, 2011 Trustwave

IPSP (E-commerce)

NEXUS, S.A. AuthorizationAugust 31, 2011 403 Labs, LLC

Clearing & Settlement

Issuing Processing

nFinanSe Inc Account ManagementJune 30, 2011 Security Horizon, Inc.

Issuer Processing

Prepaid Services

NIC Services, LLC Payment GatewayJune 30, 2011 Trustwave

North American Bancard Clearing & SettlementOctober 31, 2011 Information Exchange

Merchant ServicesPayment Gateway/Switch

52 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 53: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

North American Bancard Payment Processing - Internet

October 31, 2011 Information Exchange

Payment Processing - POS

NPC Secure AuthorizationMarch 31, 2011 Trustwave

Payment Gateway

Process Magnetic-Stripe Transactions

NRT Technologies, Inc. AuthorizationFebruary 28, 2011 Trustwave

Clearing & SettlementProcess Magnetic-Stripe Transactions

Switching

Nuance Communications, Inc.

OtherJuly 31, 2011 Trustwave

NYCE Payments Network, LLC

AuthorizationApril 30, 2011 Trustwave

Oak Leaf Systems, Inc. Hosting ProviderFebruary 28, 2011 Raven Eye

Obopay Clearing & SettlementAugust 31, 2011 Digital Resources Group, LLC

MOTO Payment Processing

Other

OCA S.A. Issuer ProcessingJuly 31, 2011 Cybsec S.A.

Payment Gateway/Switch

Payment Processing - POS

Official Payments Corporation

Clearing & SettlementFebruary 28, 2012 Trustwave

Payment Gateway/Switch

Payment Processing - Internet

Ogone Account ManagementFebruary 28, 2012 NTT Security Limited

Back Office ServicesClearing & SettlementData Preparation

Fraud and Chargeback Services

Merchant ServicesPayment Gateway/Switch

Payment Processing - Internet

Payment Processing - POS

OneBridge, Inc. Clearing & SettlementOctober 31, 2011 Crowe Horwath LLP

Fraud and Chargeback ServicesIssuer ProcessingPayment Gateway/Switch

53 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 54: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Onestop Internet, Inc. Merchant ServicesOctober 31, 2011 Neohapsis, Inc.

Open Solutions Issuing ProcessingApril 30, 2011 K3DES

Other

Open Solutions Canada Payment GatewayJuly 31, 2011 K3DES

Switching

OpSource Hosting Provider- HardwareFebruary 28, 2012 Brightline CPAs & Associates

Managed Services

Payment Gateway/Switch

Opticard Payment Services Inc.

Clearing & SettlementApril 30, 2011 Information Exchange

Issuer ProcessingMerchant Services

Payment Gateway/Switch

Payment Processing - InternetPayment Processing - MOTO

Payment Processing - POS

Optimal Payments Clearing & SettlementJune 30, 2011 Trustwave

Payment Gateway

Oracle ATG Web Commerce On Demand

IPSP (E-commerce)October 31, 2011 Coalfire

Oracle EasyPay Hosting ProviderAugust 31, 2011 Coalfire

IPSP (E-commerce)

Oracle E-Billing Hosting ProviderAugust 31, 2011 Coalfire Systems

IPSP (E-commerce)

Oracle On Demand Service Hosting ProviderAugust 31, 2011 Coalfire

IPSP (E-commerce)

ORBIT Systems Inc. Hosting ProviderFebruary 28, 2011 Raven Eye

ORBITALL SERVICOS E PROCESSAMENTO DE INFORMACOES COMERCIAIS LTDA.

AuthorizationOctober 31, 2011 CPqD

Hosting ProviderIssuing Processing

MOTO Payment Processing

Process Magnetic-Stripe TransactionsSwitching

ORCC - eCommerce Division: Columbus

OtherNovember 30, 2011 Trustwave

ORCC - eCommerce Division: Parsippany

OtherOctober 31, 2011 Trustwave

54 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 55: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

ORCC - eCommerce Division: Princeton

Payment GatewayMay 31, 2011 Trustwave

ORCS Web, Inc. Hosting Provider - WebMay 31, 2011 igxglobal, Inc.

OrderMotion Payment Processing - Internet

May 31, 2011 Trustwave

OrderTalk IPSP (E-commerce)September 30, 2011 Trustwave

MOTO Payment Processing

Payment Gateway

OverDrive, Inc Clearing & SettlementDecember 31, 2011 NetWorks Group

Payment Gateway/Switch

Payment Processing - Internet

PACIFICARD S.A., COMPAÑIA EMISORA Y ADMINISTRADORA DE TARJETAS DE CREDITO

Issuer ProcessingMarch 31, 2012 Trustwave

Payment Processing - ATM

Payment Processing - InternetPayment Processing - POS

Paciolan, Inc. Hosting ProviderOctober 31, 2011 Trustwave

Payment GatewayProcess Magnetic-Stripe Transactions

Pago Mobile Inc. AuthorizationNovember 30, 2011 Integral Business Solutions

Payment Gateway

Palm Coast Data IPSP (E-commerce)December 31, 2011 K3DES

MOTO Payment Processing

Payment Gateway

PAMS Lunchroom LLC IPSP (E-commerce)August 31, 2011 Trustwave

MOTO Payment Processing

Panasonic Avionics Corporation

Payment Gateway/SwitchApril 30, 2011 Tevora Business Solutions

Paramount Acceptance OtherJune 30, 2011 SecurityMetrics, Inc.

Payment Gateway

Parkeon Payment GatewayMay 31, 2011 Trustwave

Parkmobile USA, Inc. OtherDecember 31, 2011 Coalfire Systems, Inc.

Passkey International, Inc. OtherJuly 31, 2011 IOActive Inc.

Passport EFT Solutions Payment GatewayDecember 31, 2011 Coalfire

Passport Health Communications, Inc.

Payment Processing - Internet

February 28, 2012 Trustwave

55 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 56: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Patronpath, LLC IPSP (E-commerce)December 31, 2011 Crowe Horwath LLP

PAY.ON Payment Gateway/SwitchJuly 31, 2011 Acertigo AG

Payment Processing - Internet

PayCommerce Inc. IPSP (E-commerce)October 31, 2011 Trustwave

MOTO Payment Processing

Payment Gateway

Paydiant Inc. Hosting Provider - WebDecember 31, 2011 Secure Technology Group LLC

Payment Gateway/Switch

PayJunction OtherApril 30, 2011 Payment Software Company (PSC)

Payment Gateway

PayLeap LLC Clearing & SettlementFebruary 28, 2011 Information Exchange

Payment Gateway/Switch

Payment Data Systems Clearing & SettlementMay 31, 2011 Information Exchange Inc.

Issuer Processing

Merchant ServicesPayment Gateway/Switch

Payment Processing - POS

Payment Processing, Inc. IPSP (E-commerce)April 30, 2011 Trustwave

MOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Payment Service Network, Inc.

Account ManagementDecember 31, 2012 Digital Resources Group (DRG)

Billing ManagementManaged Services

Payment Gateway

Payment Gateway/Switch

Payment Processing - MOTO

Paymentus Corporation OtherOctober 31, 2011 SPIguard

Payment Gateway/SwitchPayment Processing - POS

Paymetric AuthorizationAugust 31, 2011 Trustwave

Clearing & Settlement

OtherPayment Gateway

Pay-O-Matic Corp OtherMarch 31, 2011 Jefferson Wells, Inc.

PayPal IPSP (E-commerce)December 31, 2011 K3DES

MOTO Payment Processing

56 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 57: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

PayPal Payment GatewayDecember 31, 2011 K3DES

PaySentinel Payment Gateway/SwitchFebruary 28, 2012 Trustwave

Payment Processing - Internet

PaySimple Payment GatewaySeptember 30, 2011 Coalfire

PayTrace Clearing & SettlementAugust 31, 2011 Information Exchange

Merchant Services

Payment Gateway/SwitchPayment Processing - Internet

Payment Processing - MOTOPayment Processing - POS

Payvision BV AuthorizationAugust 31, 2011 Trustwave

IPSP (E-commerce)Loyalty Programs

MOTO Payment Processing

Other

Payment Gateway

PBD Worldwide Fulfillment Services

Clearing & SettlementJuly 31, 2011 Trustwave

Hosting ProviderIPSP (E-commerce)Payment Gateway

Peak 10, Inc. Hosting Provider- HardwareDecember 31, 2011 BrightLine CPAs and Associates, Inc.

PFSweb, Inc. AuthorizationApril 30, 2011 Trustwave

Clearing & Settlement

IPSP (E-commerce)MOTO Payment Processing

Phoenix Managed Networks, LLC

OtherAugust 31, 2011 igxglobal, Inc.

Payment Gateway/Switch

PhoenixNap, LLC Hosting ProviderJanuary 31, 2012 Coalfire

Phreesia Payment GatewayJanuary 31, 2012 Trustwave

Pipeline Data Payment Gateway/SwitchNovember 30, 2011 Coalfire Systems. Inc.

Payment Processing - InternetPayment Processing - MOTO

Payment Processing - POS

Pitney Bowes OtherMarch 31, 2012 IBM Internet Security Systems

57 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 58: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Pivotal Payments Clearing & SettlementFebruary 28, 2011 SecurityMetrics

Loyalty ProgramsPayment Gateway

Planet Payment, Inc. AuthorizationMarch 31, 2012 Trustwave

Clearing & SettlementMOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Plug & Pay Technologies, Inc.

Clearing & SettlementJune 30, 2011 SecurityMetrics

MOTO Payment Processing

Payment GatewayProcess Magnetic-Stripe Transactions

POS Portal OtherAugust 31, 2011 Coalfire Systems. Inc.

POST Integrations, Inc. (Ebocom, LLC)

Clearing & SettlementApril 30, 2011 Verizon Business Network Services Inc.

Powa Technologies Payment Processing - Internet

October 31, 2011 SecurityMetrics

PowerPay, LLC OtherOctober 31, 2011 Payment Software Company (PSC)

Preferred Health Technology Payment GatewayAugust 31, 2011 Trustwave

PREMIER TECHNOLOGIES PTY LTD

IPSP (E-commerce)March 31, 2011 Witham Laboratories

Payment Gateway

Presto - Publix Super Markets

OtherOctober 31, 2011 Solutionary

Switching

Primoris Services LLC Clearing & SettlementJuly 31, 2011 SecurityMetrics

IPSP (E-commerce)MOTO Payment ProcessingPayment Gateway

Princeton Payment Solutions, LLC

Payment Gateway/SwitchOctober 31, 2011 SecurityMetrics

Priority Payment Systems OtherApril 30, 2011 SecurityMetrics

Payment Gateway

PROCARD SERVICES FZ LLC

AuthorizationJuly 31, 2011 Trustwave

Clearing & Settlement

Issuing Processing

MOTO Payment ProcessingSwitching

58 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 59: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Procecard, S.A. Billing ManagementMay 31, 2011 Internet Security Systems

Payment Gateway/SwitchPayment Processing

Payment Processing - ATM

Process America Clearing & SettlementSeptember 30, 2011 Information Exchange

Merchant ServicesPayment Gateway/Switch

Payment Processing - Internet

ProfitStars Payment GatewaySeptember 30, 2011 Coalfire Systems

Promoción y Operación S.A. de C.V. (PROSA)

Clearing & SettlementNovember 30, 2011 403 Labs

Issuer Processing

Payment Gateway/Switch

Payment Processing - ATM

Payment Processing - POS

ProPay USA, Inc. AuthorizationJune 30, 2011 SecurityMetrics

Issuing ProcessingPayment GatewayProcess Magnetic-Stripe Transactions

Propco Marketing Loyalty ProgramsApril 30, 2011 Neohapsis, Inc.

PSCU Financial Services, Inc.

Account ManagementFebruary 28, 2012 Tevora Business Solutions

Fraud and Chargeback ServicesPayment Gateway/Switch

PSiGate Payment GatewayJune 30, 2011 Trustwave

PSOnline, LLC OtherAugust 31, 2011 ControlCase

PSP Card Services Inc. Issuing ProcessingFebruary 28, 2011 Control Gap Inc.

Process Magnetic-Stripe Transactions

Pulse Network LLC SwitchingJuly 31, 2011 K3DES

PURE COMMERCE PTY LTD

Account ManagementNovember 30, 2011 Vectra Corporation

Back Office Services

Clearing & Settlement

Data PreparationFraud and Chargeback Services

Managed ServicesOtherPayment Gateway/Switch

Payment Processing - ATM

59 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 60: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

PURE COMMERCE PTY LTD

Payment Processing - Internet

November 30, 2011 Vectra Corporation

Payment Processing - MOTO

Payment Processing - POS

Records Management

Qgiv Payment GatewayMay 31, 2011 SecurityMetrics

QS/1 AuthorizationJune 30, 2011 Trustwave

Payment Gateway

Quality Technology Services Hosting ProviderApril 30, 2011 NDB Advisory

Other

QuanComm, Inc. Payment GatewayJuly 31, 2011 Trustwave

Quantum Services Payment Gateway/SwitchSeptember 30, 2011 Raven Eye

Payment Processing - InternetPayment Processing - MOTO

Payment Processing - POS

Qwest Communications Hosting ProviderMay 31, 2011 Trustwave

Other

Rackspace Hosting Hosting ProviderJuly 31, 2011 Trustwave

Radiant Systems - ALOHA COMMAND CENTER

OtherJanuary 31, 2012 Coalfire Systems, Inc.

Radiant Systems - Aloha Takeout and Aloha Ordering Online

Hosting ProviderNovember 30, 2011 Coalfire

Radiant Systems - CP GATEWAY

Payment GatewayOctober 31, 2011 Coalfire

Radiant Systems - CPOnline IPSP (E-commerce)November 30, 2011 Coalfire Systems. Inc.

Radiant Systems - PCI Data Centers

Hosting ProviderOctober 31, 2011 Coalfire

Rainbow Rewards Loyalty ProgramsFebruary 28, 2012 Coalfire Systems. Inc.

Rapid Investments, Inc. Issuer ProcessingSeptember 30, 2011 ControlCase LLC

Ready Financial Group OtherJuly 31, 2011 Trustwave

RealPage, Inc. Payment GatewayJune 30, 2011 Trustwave

Rearden Commerce IPSP (E-commerce)April 30, 2011 IBM Internet Security Systems

Other

Recurly, Inc. Hosting Provider - WebJanuary 31, 2012 Trustwave

Payment Gateway/Switch

60 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 61: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Recurly, Inc. Payment Processing - Internet

January 31, 2012 Trustwave

Redbanc, S.A. Clearing & SettlementJune 30, 2011 Xtrategies, LLC

Process Magnetic-Stripe Transactions

Switching

Redcats USA IPSP (E-commerce)March 31, 2011 Trustwave

Redfin Network, Inc. Payment GatewayOctober 31, 2011 Trustwave

RegOnline AuthorizationApril 30, 2011 Coalfire

Clearing & Settlement

Payment Gateway

Resurgent Capital Services OtherAugust 31, 2011 Protiviti

Retail Decisions 3-D Secure Hosting ProviderOctober 31, 2011 Trustwave

Clearing & SettlementFraud and Chargeback Services

Hosting Provider - Web

Payment Gateway/SwitchPayment Processing - Internet

Payment Processing - POS

Retail Point, LLC AuthorizationJuly 31, 2011 Trustwave

Payment Gateway

Rev Worldwide, Inc. AuthorizationMay 31, 2011 403 Labs

Issuing Processing

Revelex Corporation OtherSeptember 30, 2011 Trustwave

RevTrak, Inc AuthorizationMay 31, 2011 Coalfire Systems. Inc.

Payment Gateway

Rewards Network Loyalty ProgramsJuly 31, 2011 Sunera

RewardsNow Loyalty ProgramsMarch 31, 2011 AT&T Consulting Solutions, Inc.

RideCharge Inc. Payment Processing - Internet

June 30, 2011 ControlCase LLC

RightNow Technologies, Inc. Hosting ProviderApril 30, 2011 FishNet Security

Other

ROAM Data, Inc. Payment Gateway/SwitchMarch 31, 2012 igxglobal, Inc.

RocketGate Payment Gateway/SwitchOctober 31, 2011 IGX Global

RSI International IPSP (E-commerce)January 31, 2011 Coalfire

Payment Gateway

61 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 62: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

RT Lawrence Payment GatewayApril 30, 2011 Trustwave

Rycom Inc Network Provider/Transmitter

November 30, 2011 NCI (Net Cyclops Inc.)

S1 Corp. - Postilion Retail POS Environment

Hosting ProviderOctober 31, 2011 Trustwave

Payment Gateway

Process Magnetic-Stripe Transactions

Sabre GetThere OtherNovember 30, 2011 Verizon Business

Payment Gateway/Switch

Sabre Hospitality Solutions (SynXis)

SwitchingOctober 31, 2011 Fortrex Technologies

Sabre, Inc. Global Distribution SystemJuly 31, 2011 Verizon Business

Hosting Provider - Web

OtherPayment Gateway/Switch

Sage Payment Solutions (formerly Verus Card Services)

Payment Processing - Internet

July 31, 2011 Verizon Business Network Services Inc.

Salesforce.com OtherNovember 30, 2011 FishNet Security

Sallie Mae Payment Gateway/SwitchApril 30, 2011 Specialized Security Services

Satellite Receivers, Ltd. (Cash Depot)

OtherDecember 31, 2011 K3DES

Switching

Savvis, Inc. OtherAugust 31, 2011 COALFIRE SYSTEMS

SBI VERITRANS CO., LTD Clearing & SettlementDecember 31, 2011 ICMS

Payment Gateway/Switch

SBW.com LLC Payment Processing - Internet

July 31, 2011 Neohapsis

ScholarChip Card Company, LLC

Payment Gateway/SwitchAugust 31, 2011 SecurityMetrics, Inc.

Prepaid Services

School-Link Technologies OtherApril 30, 2011 Coalfire

Payment Processing - Internet

SecureNet AuthorizationJune 30, 2011 RSM McGladrey Inc.

Clearing & SettlementHosting Provider

IPSP (E-commerce)Loyalty ProgramsMOTO Payment Processing

Payment Gateway

62 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 63: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

SecureNet Process Magnetic-Stripe Transactions

June 30, 2011 RSM McGladrey Inc.

Switching

SecureTrading Limited Clearing & SettlementJune 30, 2011 Trustwave

Fraud and Chargeback ServicesPayment Gateway/Switch

Payment Processing - ATM

Payment Processing - InternetPayment Processing - MOTO

SegPay Clearing & SettlementAugust 31, 2011 Trustwave

Payment Processing - Internet

Sequoia Retail Systems Hosting ProviderJuly 31, 2011 Digital Resources Group (DRG)

Payment Gateway

Serve Virtual Enterprises, Inc.

Account ManagementMay 31, 2011 Trustwave

Back Office Services

Billing Management

Clearing & Settlement

Fraud and Chargeback Services

Issuer Processing

Loyalty Programs

Merchant ServicesNetwork Provider/Transmitter

Payment Processing - ATM

Payment Processing - Internet

Payment Processing - POS

Prepaid ServicesRecords Management

Servebase 3-D Secure Access Control Server

January 31, 2011 Foregenix

AuthorizationClearing & SettlementIPSP (E-commerce)

MOTO Payment Processing

Payment GatewayProcess Magnetic-Stripe Transactions

ServiceU Corporation Hosting ProviderApril 30, 2011 K3DES

MOTO Payment Processing

Payment Gateway

63 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 64: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Servicios Electrónicos Globales S.A. de C.V. (E-Global)

Clearing & SettlementOctober 31, 2011 403 Labs, LLC

Issuer Processing

Payment Gateway/Switch

Payment ProcessingPayment Processing - ATM

SHC Direct Loyalty ProgramsApril 30, 2011 Trustwave

Shift4 DOLLARS ON THE NET

Payment Gateway/SwitchMay 31, 2011 Verizon Business

Shopify Hosting Provider - WebJuly 31, 2011 IOActive, Inc.

Managed Services

Sigma Micro IPSP (E-commerce)August 31, 2011 Trustwave

MOTO Payment Processing

Payment Gateway

Signature Card Services Loyalty ProgramsMarch 31, 2012 SecurityMetrics

Other

Simmons First National Corporation

Clearing & SettlementSeptember 30, 2011 Trustwave

Simply Easier Payments IPSP (E-commerce)October 31, 2011 Trustwave

Payment Gateway

SITA - AirportConnect PCI Common Use Platform (2 airports)

Managed ServicesJuly 31, 2011 IBM Security Services

Other

SITA Information Networking Computing, USA Inc.

AuthorizationApril 30, 2011 IBM Internet Security Systems

Global Distribution System

IPSP (E-commerce)

OtherSwitching

Six Card Solutions Luxembourg S.A.

AuthorizationApril 30, 2011 NTT Security Limited

IPSP (E-commerce)Payment Gateway

Process Magnetic-Stripe Transactions

Skipjack Financial Services AuthorizationJanuary 31, 2012 Trustwave

Payment Gateway

Process Magnetic-Stripe Transactions

SlimCD Merchant ServicesSeptember 30, 2011 Enterprise Risk Management

Payment Gateway/Switch

64 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 65: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Smart Business Technology, Inc

AuthorizationMarch 31, 2011 T3i

Clearing & Settlement

Loyalty Programs

Payment Gateway

Switching

SmartEtailing, Inc Hosting ProviderSeptember 30, 2011 Digital Resources Group (DRG)

Payment Gateway

Snapfinger Inc. Payment Processing - Internet

September 30, 2011 ControlCase

SOCIEDADE INTERBANCARIA E SISTEMA DE PAGAMENTOS SARL

SwitchingJanuary 31, 2012 Trustwave

Softvoyage Inc Payment Processing - Internet

November 30, 2011 Ubitrak

SoundBite Communications OtherSeptember 30, 2011 K3DES

Spacenet OtherMay 31, 2011 Trustwave

SpeedFC, Inc. Hosting ProviderNovember 30, 2011 Payment Software Company (PSC)

Payment Gateway

Speedpay (Western Union Payment Services)

MOTO Payment ProcessingAugust 31, 2011 Trustwave

Payment Gateway

Spendvision OtherApril 30, 2011 Integralis Ltd

Square, Inc. Payment Gateway/SwitchMay 31, 2011 Coalfire

Payment Processing - Internet

Stafford Associates Managed ServicesOctober 31, 2011 CrimsonSecurity

Stamps.com IPSP (E-commerce)August 31, 2011 Trustwave

MOTO Payment Processing

Payment Gateway

StarCite, Inc. Payment Processing - Internet

February 28, 2012 RSM McGladrey, Inc.

Sterling Payment Technologies

Clearing & SettlementAugust 31, 2011 Trustwave

IPSP (E-commerce)

Loyalty Programs

MOTO Payment ProcessingPayment GatewayProcess Magnetic-Stripe Transactions

65 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 66: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Sterling Valley Systems, Inc.- Inntopia

AuthorizationJuly 31, 2011 Trustwave

MOTO Payment Processing

Payment Gateway

STI PROCESSING LTD. AuthorizationApril 30, 2011 K3DES LLC

Clearing & Settlement

Issuing ProcessingMOTO Payment Processing

Process Magnetic-Stripe TransactionsSwitching

StoneEagle Services, Inc. Clearing & SettlementOctober 31, 2011 Information Exchange Inc.

Issuer Processing

Merchant Services

Payment Gateway/Switch

Payment Processing - Internet

Stored Value Solutions Hosting ProviderSeptember 30, 2011 K3DES LLC

IPSP (E-commerce)Payment Gateway

StoreFinancial Services, LLC

Issuer ProcessingDecember 31, 2011 403 Labs

Payment Gateway/Switch

StoresOnline, Inc. / iMergent, Inc

Hosting ProviderJanuary 31, 2011 SecurityMetrics

Payment Gateway

Strategic Fulfillment Group / Dynamic Resource Group (SFG/DRG)

IPSP (E-commerce)August 31, 2011 Trustwave

MOTO Payment Processing

Payment Gateway

STRATEGIC PAYMENTS SERVICES PTY LTD

Issuing ProcessingApril 30, 2011 Verizon Business

Payment Gateway/Switch

Payment Processing - ATMPayment Processing - MOTOPayment Processing - POS

Strategic Profits Hosting Provider - WebApril 30, 2011 SPIguard Security Solutions Inc.

Managed Services

Payment Gateway/Switch

Payment Processing - InternetPayment Processing - MOTO

66 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 67: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Stripe, Inc Payment GatewayMarch 31, 2011 Payment Software Company (PSC)

Sunburst Innovations, Inc. OtherDecember 31, 2011 Professional Computer Center

SunGard Availability Services

Hosting Provider- HardwareFebruary 28, 2012 Fortrex Technologies

Managed Services

Superior Financial Systems, LLC

OtherSeptember 30, 2011 Trustwave

Switch Commerce LLC Clearing & SettlementJuly 31, 2011 INFORMATION EXCHANGE, INC.,

Merchant ServicesPayment Gateway/Switch

Payment Processing - ATM

Synapse Group, Inc. OtherOctober 31, 2011 Neohapsis Inc.

T.K. Keith Company, Inc. (dba Primax)

OtherJuly 31, 2011 Verizon Business Network Services Inc.

T2 Systems, Inc. MOTO Payment ProcessingNovember 30, 2011 Trustwave

Other

Process Magnetic-Stripe Transactions

TalentBeat, Inc Payment GatewaySeptember 30, 2011 K3DES

Switching

TD Merchant Services AuthorizationMarch 31, 2011 Telus Security Solutions

Tecnicard Inc AuthorizationMay 31, 2011 Xtrategies

Clearing & Settlement

Issuing Processing

MOTO Payment ProcessingProcess Magnetic-Stripe Transactions

Switching

Teleflora Fraud and Chargeback Services

February 28, 2012 Trustwave

Payment Processing - InternetPayment Processing - MOTO

Payment Processing - POS

Teleformix, LLC Clearing & SettlementSeptember 30, 2011 RSM McGladrey

Loyalty Programs

Telekenex, Inc. OtherOctober 31, 2011 Trustwave

Teleperformance Brazil Hosting ProviderApril 30, 2011 British Telecom

67 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 68: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Teleperformance USA MOTO Payment ProcessingFebruary 28, 2012 AT&T Consulting Solutions, Inc.

Other

Telered S.A. ATM ProcessingFebruary 28, 2011 Trustwave

Debit Card Processing

POS Payment Processing

TeleTech Holdings MOTO Payment ProcessingAugust 31, 2011 AT&T Consulting

Other

Telvista - Grupo Tecnico de Servicios

Account ManagementJanuary 31, 2012 Trustwave

Other

Payment Processing - MOTO

Teranet Enterprises Inc. IPSP (E-commerce)April 30, 2011 Trustwave

Terremark North America, Inc.

Hosting Provider - WebDecember 31, 2011 BrightLine CPAa & Associates, Inc.

Hosting Provider- Hardware

Tessitura Network, Inc. AuthorizationMay 31, 2011 Trustwave

MOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe Transactions

T-Gate LLC Payment GatewayNovember 30, 2011 Trustwave

The Bancorp Bank Issuing ProcessingSeptember 30, 2011 FishNet Security

The DataBase Group Loyalty ProgramsSeptember 30, 2011 Specialized Security Services

Payment Gateway

The Members Group OtherJanuary 31, 2012 RSM McGladrey

The Results Companies LLC OtherFebruary 28, 2012 Coalfire Systems

The Shubert Organization AuthorizationFebruary 28, 2012 Trustwave

MOTO Payment ProcessingProcess Magnetic-Stripe Transactions

Thermeon Hosting Provider - WebMay 31, 2011 Tevora Business Solutions

Managed Services

Payment Processing - POS

Threshold Financial Technologies

SwitchingJune 30, 2011 Control Gap Inc.

Ticketmaster, LLC MOTO Payment ProcessingJune 30, 2011 Trustwave

Other

Payment GatewayProcess Magnetic-Stripe Transactions

68 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 69: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

TicketNetwork, Inc. Hosting ProviderNovember 30, 2011 Trustwave

Payment Gateway

Tickets.com Advantix Payment Gateway/SwitchFebruary 28, 2012 Trustwave

Payment Processing - InternetPayment Processing - MOTO

Payment Processing - POS

Tickets.com ProVenue Clearing & SettlementJanuary 31, 2012 Trustwave

Payment Gateway/Switch

Payment Processing - InternetPayment Processing - MOTO

Payment Processing - POS

Tickets.com ProVenue Elite AuthorizationDecember 31, 2011 Trustwave

MOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe Transactions

Tickets.com ProVenue Online

Clearing & SettlementJanuary 31, 2012 Trustwave

Payment Gateway/SwitchPayment Processing - MOTO

Payment Processing - POS

TIES Payment Gateway/SwitchJanuary 31, 2012 Trustwave

Payment Processing - Internet

Time Customer Service OtherJuly 31, 2011 Neohapsis, Inc

Payment Gateway/Switch

Payment Processing - Internet

Tix, Inc. OtherJuly 31, 2011 Compass IT Compliance, LLC

Total Card, Inc. OtherMay 31, 2011 SecurityMetrics, Inc.

Payment Gateway

Total Merchant Services Clearing & SettlementFebruary 28, 2011 Information Exchange

Merchant Services

TouchNet Payment Gateway/SwitchApril 30, 2011 Trustwave

Town North Bank Credit Card Services

OtherFebruary 28, 2011 Trustwave

Transaction Network Services (TNS)

OtherJune 30, 2011 Trustwave

69 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 70: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Transaction Network Services (TNS)

Payment GatewayJune 30, 2011 Trustwave

Switching

Transaction Network Services (TNS) – TNSPay CNP Gateway

Payment GatewayJune 30, 2011 Trustwave

Transaction Processing Partners

Clearing & SettlementMay 31, 2011 Information Exchange

Merchant ServicesPayment Gateway/Switch

Payment Processing - Internet

Payment Processing - POS

Transactis Clearing & SettlementJune 30, 2011 INFORMATION EXCHANGE, INC

Merchant ServicesPayment Gateway/SwitchPayment Processing - Internet

Transbank, S.A. AuthorizationDecember 31, 2011 Xtrategies

Clearing & Settlement

IPSP (E-commerce)

MOTO Payment Processing

Payment GatewayProcess Magnetic-Stripe Transactions

Switching

Transcom North America/Asia

MOTO Payment ProcessingJanuary 31, 2011 Sunera LLC

Other

TransCore Hosting ProviderApril 30, 2011 Trustwave

MOTO Payment Processing

Payment Gateway

TransFirst Back Office ServicesMay 31, 2011 Solutionary, Inc.

Clearing & Settlement

Fraud and Chargeback Services

Merchant ServicesOtherPayment Gateway/Switch

Payment Processing - InternetPayment Processing - MOTO

Payment Processing - POS

Transnational Bankcard, Inc. OtherOctober 31, 2011 Valcom

70 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 71: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

TransPerfect Translations Inc.

OtherDecember 31, 2011 403 Labs

TransUnion Interactive, Inc. OtherNovember 30, 2011 SecurityMetrics, Inc.

Tranzact Payment GatewayOctober 31, 2011 Trustwave

Travelport GDS Hosting Provider- HardwareFebruary 28, 2012 Jefferson Wells Inc.

Payment Gateway/Switch

Payment Processing - Internet

Tridata, Inc. - Datalink Bankcard Services

Fraud and Chargeback Services

December 31, 2011 Trustwave

Loyalty Programs

OtherRecords Management

Trilegiant AuthorizationDecember 31, 2011 Trustwave

MOTO Payment ProcessingPayment Gateway

Triplefin OtherJuly 31, 2011 Trustwave

TriSource Solutions, LLC (formerly Nobel EFT)

Clearing & SettlementSeptember 30, 2011 COALFIRE SYSTEMS, INC.

Tropical Productions Clearing & SettlementJune 30, 2011 Information Exchange

Merchant ServicesPayment Gateway/Switch

Payment Processing - Internet

TrustCommerce Payment GatewayApril 30, 2011 403 Labs

Process Magnetic-Stripe Transactions

TRXSERVICES LLC Payment GatewayOctober 31, 2011 Coalfire Systems. Inc.

TSD Rental Payment Gateway/SwitchJanuary 31, 2011 Coalfire Systems, Inc

TSYS (Issuing Processing) AuthorizationJanuary 31, 2012 Trustwave

Issuing Processing

Process Magnetic-Stripe Transactions

TSYS Acquiring Solutions (formerly Vital Processing Services)

AuthorizationApril 30, 2011 Trustwave

Clearing & SettlementLoyalty Programs

TSYS Customer Insight OtherJanuary 31, 2012 TrustWave

TSYS Digital Document System

OtherFebruary 28, 2012 Trustwave

71 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 72: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

TSYS iSolutions OtherJanuary 31, 2012 Trustwave

TSYS Loyalty Loyalty ProgramsJuly 31, 2011 Trustwave

TSYS Managed Services - Myersville (Merlin Solutions)

OtherApril 30, 2011 Trustwave

TSYS Merchant Solutions OtherJanuary 31, 2012 Trustwave

TSYS Prepaid AuthorizationJuly 31, 2011 Trustwave

Issuing ProcessingMOTO Payment Processing

TSYS SERVICOS DE TRANSACOES ELETRONICAS LTDA. (TSYS TS Prime Latin America)

AuthorizationNovember 30, 2011 Trustwave

Clearing & Settlement

Issuing ProcessingLoyalty Programs

MOTO Payment Processing

Process Magnetic-Stripe Transactions

Twin Oaks Software Development, Inc.

Billing ManagementFebruary 28, 2012 403 Labs

Payment Processing - MOTO

TxVia AuthorizationJanuary 31, 2011 403 Labs

Clearing & SettlementIssuing ProcessingPayment Gateway

Switching

U.S. Bank Access Online OtherJuly 31, 2011 TrustWave

U.S. Payments Merchant ServicesDecember 31, 2011 403 Labs, LLC

Payment Gateway/Switch

Payment Processing - MOTO

UltraCart Merchant ServicesSeptember 30, 2011 Compliance Point

Payment Processing - Internet

UMS Banking OtherNovember 30, 2011 SecurityMetrics

Unirush, LLC (Rush Card) Payment GatewayDecember 31, 2011 Fortrex Technologies

United Bank Card Clearing & SettlementJuly 31, 2011 Information Exchange

Merchant Services

UNITED CARD SERVICE Back Office ServicesJanuary 31, 2011 Jet Infosystems

Billing ManagementClearing & Settlement

72 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 73: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

UNITED CARD SERVICE Data PreparationJanuary 31, 2011 Jet Infosystems

Fraud and Chargeback ServicesIssuing Processing

Loyalty Programs

Merchant ServicesPayment Processing - ATMPayment Processing - Internet

Payment Processing - MOTOPayment Processing - POS

Records Management

United Merchant Services, Inc. (UMSI)

Fraud and Chargeback Services

April 30, 2011 Arsenal Security Group

Merchant Services

Payment Gateway/SwitchPayment Processing - Internet

Payment Processing - POS

United Payment Services AuthorizationJanuary 31, 2012 Accudata Systems

Merchant ServicesMOTO Payment Processing

Payment GatewayPayment Processing - Internet

United States Department of The Treasury, Financial Management Service

Payment Processing - Internet

March 31, 2012 SecureState

Tax/Government Payments

UniteU Technologies, Inc Hosting ProviderAugust 31, 2011 SecurityMetrics

Payment Gateway

Universal Money Centers Inc.

Clearing & SettlementSeptember 30, 2011 Information Exchange

Merchant ServicesPayment Gateway/Switch

Payment Processing - ATM

UrbanStyle, Inc. Hosting ProviderDecember 31, 2011 Compass IT Compliance, LLC

US ALLIANCE GROUP, INC OtherNovember 30, 2011 SecurityMetrics

Payment Gateway

US Bank - ATM Banking AuthorizationApril 30, 2011 TrustWave

Clearing & Settlement

OtherProcess Magnetic-Stripe Transactions

73 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 74: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

US Bank - ATM Banking SwitchingApril 30, 2011 TrustWave

US Bank - Gaming Services AuthorizationApril 30, 2011 TrustWave

Clearing & Settlement

Other

Process Magnetic-Stripe TransactionsSwitching

US Bank - Voyager OtherJuly 31, 2011 TrustWave

US Bank E-Payment/E-Disbursement Services

OtherJanuary 31, 2012 Trustwave

Payment Gateway/Switch

US Bank Multiservice Aviation

Payment Gateway/SwitchDecember 31, 2011 Trustwave

US Bank/Elan Financial Services Credit Card Issuing - Integrated Card Systems (ICS)

Account ManagementDecember 31, 2011 TrustWave

Clearing & Settlement

Fraud and Chargeback ServicesIssuing ProcessingOther

USA ePay AuthorizationApril 30, 2012 Trustwave

Payment Gateway

USA Fulfillment, Inc. AuthorizationNovember 30, 2011 AT&T Consulting

Clearing & SettlementHosting Provider

USA Payment Systems, Inc. Clearing & SettlementDecember 31, 2011 K3DES

Issuer ProcessingPayment Gateway/SwitchPayment Processing - ATM

USA Technologies Payment Gateway/SwitchJanuary 31, 2012 Trustwave

USA800 MOTO Payment ProcessingSeptember 30, 2011 IOActive, Inc.

Payment Gateway

VALUE PAY SERVICES LLC, AN IPC COMPANY

Payment Gateway/SwitchNovember 30, 2011 IBM Security Services

Payment Processing - Internet

Value Payment Systems, LLC.

Payment Gateway/SwitchDecember 31, 2011 SAIC

Payment Processing - InternetPayment Processing - MOTO

74 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 75: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Value Payment Systems, LLC.

Tax/Government PaymentsDecember 31, 2011 SAIC

Vanco Services Fraud and Chargeback Services

January 31, 2012 SecurityMetrics

Merchant Services

Payment Gateway/SwitchPayment Processing - Internet

Process Magnetic-Stripe Transactions

Vantiv (a.k.a. Fifth Third Processing Solutions) – Acquiring Systems

AuthorizationJune 30, 2011 Trustwave

Clearing & Settlement

MOTO Payment Processing

Vantiv (a.k.a. Fifth Third Processing Solutions) – Issuing and Switch Providing Systems

AuthorizationJune 30, 2011 Trustwave

Clearing & Settlement

Issuing ProcessingProcess Magnetic-Stripe Transactions

Switching

Varolii Corporation OtherMarch 31, 2012 Brightline CPAs & Associates, Inc.

Payment Gateway/Switch

VEGAS.COM Loyalty ProgramsJuly 31, 2011 Trustwave

MOTO Payment Processing

Payment Gateway

Vendini, Inc. Payment Gateway/SwitchMay 31, 2011 igxglobal, Inc.

VenTek International Payment GatewayNovember 30, 2011 Digital Resources Group (DRG)

Ventus Networks Network Provider/Transmitter

January 31, 2012 UHY Advisors TX, LLC

VERePAY (formerly VEReFIED)

Billing ManagementJanuary 31, 2012 SecurityMetrics

Fraud and Chargeback Services

Payment Gateway/Switch

Payment Processing - Internet

Verifi Hosting ProviderJune 30, 2011 Trustwave

Payment Processing - Internet

75 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 76: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

VeriFone - PAYware Connect

AuthorizationJune 30, 2011 Trustwave

Payment Gateway

Process Magnetic-Stripe Transactions

Verifone – WAY Payment Gateway

Payment Gateway/SwitchOctober 31, 2011 Network Security Professionals, Incorporated (NetSPI)

Verifone Transportation Systems

AuthorizationApril 30, 2011 Fortrex Technologies

Clearing & Settlement

Payment Gateway

Process Magnetic-Stripe Transactions

VeriFone VeriShield Protect OtherJuly 31, 2011 SecurityMetrics

Payment Gateway

Verizon Business Global Services System Integration (VB-GSSI)

Payment Gateway/SwitchJanuary 31, 2012 Trustwave

Payment Processing - InternetPayment Processing - MOTO

Verizon Business Remote Application Management

OtherFebruary 28, 2011 Trustwave

Verizon Computing as a Service

Hosting ProviderJune 30, 2011 Trustwave

Verrus Mobile Technologies AuthorizationNovember 30, 2011 Trustwave

MOTO Payment Processing

VERSATILE TECHNOLOGY INC.

AuthorizationJune 30, 2011 Xtrategies, LLC

Clearing & SettlementIPSP (E-commerce)

MOTO Payment ProcessingOther

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

Vesdia Loyalty ProgramsApril 30, 2011 Coalfire Systems. Inc.

Vesta Corporation MOTO Payment ProcessingJune 30, 2011 AT&T Consulting, Inc.

OtherPayment Gateway

VetCentric, Inc. IPSP (E-commerce)April 30, 2011 Coalfire

Payment Gateway

76 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 77: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

VICTORIABANK AuthorizationDecember 31, 2011 Trustwave

Clearing & SettlementIPSP (E-commerce)

Issuing Processing

OtherPayment GatewayProcess Magnetic-Stripe Transactions

Switching

Vindicia OtherMarch 31, 2011 Payment Software Company (PSC)

Payment Gateway

Virtual Piggy, Inc. Payment Gateway/SwitchDecember 31, 2011 Self-Assessment

Visa Argentina S A (VASA) 3-D Secure Access Control Server

August 31, 2011 Xtrategies, LLC

AuthorizationClearing & Settlement

IPSP (E-commerce)Issuing Processing

Loyalty ProgramsMOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

Visa Inc. (including Visa Debit Processing)

3-D Secure Hosting ProviderJune 30, 2011 Trustwave

Account ManagementBack Office Services

Billing Management

Clearing & SettlementData Preparation

Fraud and Chargeback Services

Hosting Provider - WebHosting Provider- HardwareIssuer Processing

Loyalty Programs

Managed ServicesMerchant Services

Network Provider/TransmitterPayment Gateway/Switch

Payment Processing - ATMPayment Processing - InternetPayment Processing - MOTO

Payment Processing - POS

77 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 78: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

Visa Inc. (including Visa Debit Processing)

Prepaid ServicesJune 30, 2011 Trustwave

Records Management

Tax/Government Payments

Visa Intellilink OtherDecember 31, 2011 Trustwave

Visa Processing Services Pte Ltd

AuthorizationJanuary 31, 2011 SISA Information Security Pvt Ltd.,

Clearing & Settlement

Hosting ProviderIssuing Processing

MOTO Payment Processing

Prepaid Services

Process Magnetic-Stripe Transactions

Switching

VisionOne IPSP (E-commerce)September 30, 2011 IBM Security Services

Payment Gateway

VitalChek IPSP (E-commerce)October 31, 2011 Trustwave

MOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Voice Data Solutions OtherOctober 31, 2011 SecurityMetrics

Volusion Hosting ProviderJanuary 31, 2011 Payment Software Company (PSC)

Voxeo Corporation OtherDecember 31, 2011 Sunera LLC

VXI Global Solutions, Inc MOTO Payment ProcessingFebruary 28, 2012 Trustwave

WageWorks Clearing & SettlementSeptember 30, 2011 RSM McGladrey

Loyalty Programs

WEB ACTIVE CORPORATION PTY LTD (eWay)

Payment Gateway/SwitchAugust 31, 2011 Stratsec

Payment Processing - Internet

West - Managed Call Center Services

Account ManagementSeptember 30, 2011 Continuum Worldwide Corporation

Billing Management

West Business Services MOTO Payment ProcessingApril 30, 2011 Trustwave

West Customer Management Group - Work At Home (WCMG - WAH)

Account ManagementSeptember 30, 2011 Continuum Worldwide

Billing Management

78 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 79: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

West Direct - Direct Response

MOTO Payment ProcessingApril 30, 2011 Trustwave

West Direct - Smartsell OtherOctober 31, 2011 Trustwave

West Interactive DataGuard MOTO Payment ProcessingApril 30, 2011 Trustwave

Wipro Limited OtherSeptember 30, 2011 SISA Information Security Pvt Ltd

Wirecard Payment Processing - Internet

August 31, 2011 IPS

Wiretrust Payment GatewayJuly 31, 2011 Coalfire Systems. Inc.

WorkflowOne, Inc. OtherDecember 31, 2011 Protiviti, Inc.

WorldPay (UK) Limited - PaymentTrust (High Capacity Gateway)

3-D Secure Access Control Server

March 31, 2011 Arsenal Secuirty Group

Account ManagementClearing & Settlement

Fraud and Chargeback Services

Loyalty ProgramsPayment Gateway/Switch

Payment Processing - Internet

Payment Processing - MOTOPayment Processing - POSPrepaid Services

WorldPay US, Inc. AuthorizationMay 31, 2011 Verizon Business

Clearing & Settlement

IPSP (E-commerce)

Loyalty ProgramsPayment Gateway

Process Magnetic-Stripe Transactions

Switching

Wyndham Hotel & Resorts AuthorizationFebruary 28, 2012 Verizon Business

IPSP (E-commerce)

Loyalty ProgramsOther

Xtec Clearing & SettlementApril 30, 2011 Information Exchange

Payment Gateway/Switch

Yahoo! Stores IPSP (E-commerce)March 31, 2011 Accuvant, Inc.

YALAMANCHILI SOFTWARE EXPORTS (P) LTD

AuthorizationJanuary 31, 2011 SISA Information Security (P) Ltd

Clearing & Settlement

79 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

Page 80: Cisp List of Pcidss Compliant Service Providers

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR AP CEMEA LAC NA

Visa’s Global Registry of Service Providers - PCI DSS Validated Entities

YALAMANCHILI SOFTWARE EXPORTS (P) LTD

Hosting ProviderJanuary 31, 2011 SISA Information Security (P) Ltd

Issuing Processing

MOTO Payment Processing

Process Magnetic-Stripe TransactionsSwitching

Yapstone Inc. Payment Gateway/SwitchApril 30, 2011 BrightLine

Payment Processing - Internet

Payment Processing - MOTO

Yes-Pay International Ltd. Issuer ProcessingJuly 31, 2011 Fortconsult

Payment Gateway/Switch

Payment Processing - InternetPayment Processing - MOTO

Payment Processing - POS

Yodlee Hosting ProviderDecember 31, 2011 AT&T Consulting

IPSP (E-commerce)

Zagrebačka banka d.d. Clearing & SettlementJanuary 31, 2012 IBM

Fraud and Chargeback Services

Issuer Processing

Payment Processing - ATMPayment Processing - Internet

Payment Processing - POS

ZEUS Corporation 3-D Secure Hosting ProviderOctober 31, 2011 NTT Data Security Corporation

Account Management

Billing ManagementClearing & SettlementPayment Gateway/Switch

Payment Processing - Internet

Payment Processing - POS

ZirMed, Inc. Payment GatewayApril 30, 2011 403 Labs

Zuora, Inc. AuthorizationJune 30, 2011 Digital Resources Group (DRG)

Payment Gateway

80 of 80

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2012 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.