Global List of PCI DSS Validated Service Providers

As Of 11/3/2010
The companies listed below were validated as being PCI DSS compliant by a QSA as of the "VALIDATION DATE". Service providers are required to revalidate their compliance to Visa on an annual basis, with the next annual Report on Compliance (ROC) due to Visa one year from the "VALIDATION DATE". ROCs that are from 160 days late are noted in yellow and ROCs that are from 60-90 days late are noted in red. Entities with ROCs over 90 days past due are removed from this list. Entities are listed in each Visa region where they have been registered by at least one client, including: AP - Asia Pacific, CEMEA - Central Europe / Middle East / Africa, LAC - Latin America / Caribbean, NA - North America - Canada / United States. Visa client's are responsible for and are required to use compliant service providers and to follow up with service providers directly if there are any questions about their compliance status.

List of Compliant Service Providers - All

SERVICE PROVIDER 1ShoppingCart.com VALIDATION DATE June 30, 2010 SERVICES COVERED BY REVIEW (1) Other Payment Gateway 1st Americard 1stPayGateway, LLC March 31, 2010 May 31, 2010 Other Authorization Payment Gateway 3dCart March 31, 2010 Hosting Provider Payment Gateway 3Delta Systems September 30, 2010 Authorization MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching 800 Call KC May 31, 2010 MOTO Payment Processing Payment Gateway A3 IT Solutions AAFES November 30, 2009 July 31, 2010 Hosting Provider IPSP (E-commerce) Payment Gateway Process Magnetic-Stripe Transactions Switching Abanco, LLC February 28, 2010 Payment Gateway Trustwave Trustwave IBM Security Services Accudata Systems Fortrex Technologies SecurityMetrics Fortrex Technologies Internet Security Systems (a wholly owned IBM company) ASSESSOR Security Metrics AP CEMEA LAC NA

Process Magnetic-Stripe Transactions (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 1 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER ABC FINANCIAL SERVICES, INC VALIDATION DATE May 31, 2010 SERVICES COVERED BY REVIEW (1) Authorization Clearing & Settlement Hosting Provider IPSP (E-commerce) MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions ABC Virtual Communications, Inc. Accel Networks Accelerated Payment Technologies Inc November 30, 2009 Hosting Provider Payment Gateway January 31, 2010 July 31, 2010 Other Authorization IPSP (E-commerce) Loyalty Programs MOTO Payment Processing Other Payment Gateway Process Magnetic-Stripe Transactions ACCENT Marketing Accertify Accesso, LLC May 31, 2010 February 28, 2010 February 28, 2010 MOTO Payment Processing Other Clearing & Settlement Payment Gateway AccountNow ACH Direct ACI Worldwide ACI Worldwide - Winn-Dixie Environment June 30, 2010 November 30, 2009 April 30, 2010 September 30, 2010 Other Payment Gateway Other Payment Gateway Process Magnetic-Stripe Transactions Switching ACS Government and Community Solutions August 31, 2010 Hosting Provider Payment Gateway Process Magnetic-Stripe Transactions Adeptra December 31, 2009 Other Protiviti SecurityMetrics Trustwave RSM McGladrey Solutionary, Inc Solutionary Crowe Horwath Halock Security Labs Trustwave Trustwave Trustwave Lighthouse Computer Services ASSESSOR Trustwave AP CEMEA LAC NA

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 2 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER Advanced Network, Inc. VALIDATION DATE October 31, 2009 SERVICES COVERED BY REVIEW (1) Authorization Clearing & Settlement Payment Gateway Loyalty Programs ASSESSOR Information Exchange Inc. AP CEMEA LAC NA

Advantex Dining Corporation March 31, 2010 Adyen B.V. Aegis Communications Affinion Loyalty Group (formerly Trilegiant) Affinity Solutions Agilysys, Inc. Airlines Reporting Corporation Akamai Alacriti Alaska Option Services May 31, 2010 December 31, 2009 February 28, 2010 November 30, 2009 July 31, 2010 February 28, 2010 September 30, 2010 December 31, 2009 April 30, 2010

Datassurant, Inc.

Internet Payment Processing Trustwave Other Loyalty Programs Loyalty Programs Payment Gateway Clearing & Settlement Other Payment Gateway Authorization Clearing & Settlement Issuing Processing Switching K3DES Trustwave Solutionary Trustwave AT&T Consulting Solutions, Inc. Neohapsis Inc. IGX Global K3DES

Aliaswire

September 30, 2010

MOTO Payment Processing Payment Gateway

IGX Global

Alliance Data - Remittance Processing Alliance Data - Retail Services

May 31, 2010 January 31, 2010

Other Authorization Clearing & Settlement Issuing Processing Loyalty Programs

Verizon Business Network Services Inc. Verizon Business

Alliance Entertainment

August 31, 2010

Authorization IPSP (E-commerce) Payment Gateway

Solutionary Inc.

AllianceOne Inc. Alta Resources Amazon.com AmegyBank

May 31, 2010 April 30, 2010 October 31, 2010 December 31, 2009

Other Other Other Other Payment Gateway

Tevora Business Solutions IBM Internet Security Systems IOActive, Inc. Verizon Business

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 3 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER American Bancard Americaneagle.com VALIDATION DATE June 30, 2010 November 30, 2009 SERVICES COVERED BY REVIEW (1) Other Hosting Provider Other AOC Solutions, Inc AOL, Inc. October 31, 2009 September 30, 2010 Other Authorization Clearing & Settlement MOTO Payment Processing Payment Gateway Apriva, LLC July 31, 2010 Clearing & Settlement IPSP (E-commerce) Loyalty Programs Payment Gateway Process Magnetic-Stripe Transactions Switching Payment Processing 3-D Secure Access Control Server Other Trustwave Fortrex Technologies IOActive ASSESSOR Enterprise Risk Management, Inc. Fortrex Technologies AP CEMEA LAC NA

Arab Financial Services Company Arcot Systems Argenbright Skybridge Marketing Group Customer Service Aria Systems Ariba Inc Arise Virtual Solutions Armenian Card CJSC

July 31, 2010 December 31, 2009 August 31, 2010

SISA Payment Software company (PSC) Trustwave

December 31, 2009 May 31, 2010 May 31, 2010 December 31, 2009

Payment Gateway Other Other Authorization Clearing & Settlement Issuing Processing Switching

TrustWave Payment Software company (PSC) AT&T Consulting Solutions Informzaschita

Art Technology Group (ATG) November 30, 2009

Hosting Provider Payment Gateway

Payment Software company (PSC) Dyntek Acertigo AG - An EXCELSIS Company

Artez Interactive Inc Arvato Finance Services Limited

December 31, 2009 July 31, 2010

Payment Gateway Clearing & Settlement IPSP (E-commerce) Payment Gateway

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 4 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER ASIAPAY (HONG KONG) LTD Asociacion Cibao de Ahorros y Prestamos Assist ASUREPAY PTY LTD AT&T Managed Hosting and Application Services AT&T Managed Services AT&T Encryption Services AT&T Managed Services AT&T Enhanced VPN Services, AT&T VPN Services, AT&T Private Network Transport Services AT&T Managed Services AT&T Network Based IP VPN Remote Access Service / AT&T VPN Tunneling Service AT&T Managed Services Endpoint Security AT&T Managed Services Intrusion Detection Services/Intrusion Prevention Services AT&T Managed Services IP Telephony and LAN Services AT&T Managed Services Managed Router Services AT&T Managed Services Network Based Firewall AT&T Managed Services Premise Based Firewall VALIDATION DATE November 30, 2009 SERVICES COVERED BY REVIEW (1) IPSP (E-commerce) Payment Gateway September 30, 2009 Issuing Processing July 31, 2010 July 31, 2010 October 31, 2010 October 31, 2010 July 31, 2010 Payment Gateway IPSP (E-commerce) Hosting Provider Other Other IBM Internet Security Systems SRC Germany Bridgepoint Trustwave Trustwave Trustwave ASSESSOR Trustwave AP CEMEA LAC NA

May 31, 2010

Other

Trustwave

July 31, 2010 July 31, 2010

Other Other

Trustwave Trustwave

July 31, 2010

Other

Trustwave

July 31, 2010 July 31, 2010 July 31, 2010

Other Other Other Other Other Hosting Provider

Trustwave Trustwave Trustwave Trustwave Trustwave Trustwave

AT&T Managed Services July 31, 2010 Transaction Routing Service AT&T Managed Services VoiceTone AT&T Synaptic Hosting July 31, 2010 October 31, 2010

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 5 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER ATCO I-TEK INC. ATOS ORIGIN SERVICES (M) SDN BHD VALIDATION DATE August 31, 2010 April 30, 2010 SERVICES COVERED BY REVIEW (1) Other Authorization Clearing & Settlement Hosting Provider Issuing Processing AudienceView Ticketing Corporation Auric Systems International Authorize.NET Autoscribe Corporation August 31, 2010 October 31, 2010 November 30, 2010 June 30, 2010 Other Other Payment Gateway Other Payment Gateway AVF Consulting, Inc. B3 Corp Bankserv Bankserv Credit Card Services, Inc. Banque Misr July 31, 2010 February 28, 2010 September 30, 2010 October 31, 2010 July 31, 2010 Payment Gateway Payment Gateway Payment Gateway Payment Gateway Authorization Clearing & Settlement IPSP (E-commerce) Issuing Processing MOTO Payment Processing Payment Gateway Switching Beanstream September 30, 2010 IPSP (E-commerce) MOTO Payment Processing Payment Gateway Benson Records Management Center Bill 1st, LLC BillMatrix Billtrust Blackbaud - eTapestry Blackbaud - Internet Services November 30, 2009 July 31, 2010 February 28, 2010 October 31, 2010 September 30, 2010 September 30, 2010 Other Other Payment Gateway Payment Gateway Other Other FishNet Security Chief Security Officers, LLC Trustwave Chief Security Officers, LLC Trustwave Trustwave SPIGuard Security Solutions Inc igxglobal Digital Resources Group (DRG) RSM McGladrey Inc. Trustwave ControlCase LLC NCI (Net Cyclops Inc.) Payment Security Compliance Trustwave Fortrex Technologies ASSESSOR Control Gap TUV Rheinland AP CEMEA LAC NA

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 6 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER Blackbaud Payment Services Blackhawk Network VALIDATION DATE February 28, 2010 May 31, 2010 SERVICES COVERED BY REVIEW (1) Payment Gateway Authorization Clearing & Settlement Hosting Provider Issuing Processing Payment Gateway Switching Blue Bamboo, Inc October 31, 2009 Authorization Payment Gateway Bluefin Payment Systems BluePay October 31, 2009 May 31, 2010 Payment Gateway Other Payment Gateway Braintree Payment Solutions February 28, 2010 Brinkman Financial January 31, 2010 Other Authorization MOTO Payment Processing BSG Payments (formerly Billing Concepts) BTB Soft, Inc. DBA: B2B Soft Business Data Record Services Cale Access AB (Cale Systems) November 30, 2009 October 31, 2009 Payment Gateway Other Payment Gateway November 30, 2009 August 31, 2009 Other Payment Gateway Process Magnetic-Stripe Transactions Caledon Card Services May 31, 2010 Authorization Clearing & Settlement MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Calypso Canada Capital Bankcard January 31, 2010 October 31, 2009 Switching MOTO Payment Processing Payment Gateway MOTO Payment Processing Other (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 7 of 62 Trustwave Trustwave SPIguard Security Solutions Inc. RSM McGladrey Trustwave Trustwave IGX Global Trustwave K3DES 403 Labs Trustwave Digital Resources Group (DRG) ASSESSOR Trustwave Verizon Business AP CEMEA LAC NA

Capital Card Services

April 30, 2010

Trustwave

List of Compliant Service Providers - All

SERVICE PROVIDER Card Management Corp. Card Tranz, Inc. VALIDATION DATE August 31, 2010 SERVICES COVERED BY REVIEW (1) Other ASSESSOR Crowe Chizek Trustwave AP CEMEA LAC NA

September 30, 2009 Hosting Provider IPSP (E-commerce) November 30, 2009 Authorization Payment Gateway Authorization MOTO Payment Processing Other Payment Gateway

CardCana Corporation

IGX Global

CARDFLEX INC.

September 30, 2010

K3DES LLC

Cardinal Commerce Corp. CARDLINK SERVICES LIMITED

December 31, 2009 June 30, 2010

Verified by Visa Merchant Services Clearing & Settlement MOTO Payment Processing Payment Gateway

Payment Software Company (PSC) Vectra

CardStandard

April 30, 2010

Authorization Clearing & Settlement Issuing Processing MOTO Payment Processing Process Magnetic-Stripe Transactions

IBM Internet Security Systems

Cardtronics EFT

May 31, 2010

Other Process Magnetic-Stripe Transactions Switching

K3DES

Cardworks Processing

August 31, 2010

Authorization Clearing & Settlement IPSP (E-commerce) MOTO Payment Processing Payment Gateway Other Loyalty Programs Loyalty Programs Hosting Provider IPSP (E-commerce) Payment Gateway

Trustwave

Cardworks Servicing LLC

February 28, 2010

Trustwave Trustwave Trustwave Payment Software company (PSC)

Carlson Marketing March 31, 2010 Worldwide (Visa Data Track) Carlson Marketing Worldwide (Visa Extras) Cart 32 June 30, 2010 August 31, 2009

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 8 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER Cart 32 CartManager VALIDATION DATE August 31, 2009 February 10, 2010 SERVICES COVERED BY REVIEW (1) Process Magnetic-Stripe Transactions IPSP (E-commerce) Payment Gateway Process Magnetic-Stripe Transactions CashLINQ Group, LLC August 31, 2010 MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Cash'N Go May 31, 2010 Payment Gateway Process Magnetic-Stripe Transactions IPSP (E-commerce) Process Magnetic-Stripe Transactions Other Other Payment Gateway Hosting Provider Authorization Clearing & Settlement IPSP (E-commerce) CDMS MERCHANT SERVICES, INC. CDS Global, Inc. December 31, 2009 August 31, 2009 Other IPSP (E-commerce) MOTO Payment Processing Hosting Provider Payment Gateway Other Other MOTO Payment Processing Payment Gateway Century Bankcard Services May 31, 2010 Clearing & Settlement Other (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 9 of 62 Information Exchange Enterprise Risk Management RSM McGladrey Trustwave SecurityMetrics ASSESSOR Payment Software company (PSC) Trustwave AP CEMEA LAC NA

CASHNet

December 31, 2009

Trustwave

CBC Companies, Inc CBCInnovis, Inc. CBORD Group Cboss CCBill

April 30, 2010 April 30, 2010 February 28, 2010 November 30, 2009 January 31, 2010

Verizon Business, Inc Verizon Trustwave SecurityMetrics Chief Security Officers

CDW Hosting and Managed October 31, 2009 Services CenPos Center Partners Central States Indemnity Centrix Bank LockBox Service January 31, 2010 October 31, 2009 October 31, 2010 May 31, 2010

Trustwave Enterprise Risk Management Coalfire Continuum Worldwide Corporation SecurityMetrics

List of Compliant Service Providers - All

SERVICE PROVIDER Certain Software CHARGE Anywhere Chase Loyalty Solutions VALIDATION DATE October 31, 2009 April 30, 2010 December 31, 2009 SERVICES COVERED BY REVIEW (1) Payment Gateway Payment Gateway Authorization Clearing & Settlement Loyalty Programs Payment Gateway Switching Authorization Clearing & Settlement Loyalty Programs Check21.com LLC Chip Card Ad Beograd May 31, 2010 April 30, 2010 Payment Gateway Authorization Clearing & Settlement Switching Other Other Authorization Clearing & Settlement Payment Gateway Switching ClearTran Client Services Cobre Bem January 31, 2010 January 31, 2010 June 30, 2010 Payment Gateway Other IPSP (E-commerce) MOTO Payment Processing Payment Gateway Collections Marketing Center, Inc. Columbus Data December 31, 2009 Other Payment Gateway January 31, 2010 Authorization Clearing & Settlement Other Payment Gateway Commerce V3 November 30, 2009 Hosting Provider Payment Gateway Fortrex Technologies Information Exchange 403 Labs SecurityMetrics Insight ecipher Enterprise Risk Management VOC - Consultancy ASSESSOR Payment Software Company (PSC) Trustwave Trustwave AP CEMEA LAC NA

Chase Paymentech Solutions, LLC.

January 31, 2010

Trustwave

Cintas Document Management Shredding Cintas Document Management Storage Clearent

June 30, 2010 June 30, 2010 April 30, 2010

SecureState Consulting SecureState Consulting Coalfire

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 10 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER Complianthost.com, a GSI Service Offering Computer Services, Inc. VALIDATION DATE May 31, 2010 September 30, 2010 SERVICES COVERED BY REVIEW (1) Hosting Provider Authorization Clearing & Settlement Issuing Processing Payment Gateway Process Magnetic-Stripe Transactions Switching Concur - Gelco Concur - Redmond Consumer Benefit Services Convergys CCMS Convergys Encore Convergys Home Agent Convergys Intervoice Convio, Inc. CO-OP Financial Services August 31, 2010 June 30, 2010 March 31, 2010 April 30, 2010 March 31, 2010 July 31, 2010 July 31, 2010 January 31, 2010 April 30, 2010 Other Other Loyalty Programs Other Payment Gateway Payment Transmission Service Other Payment Gateway Authorization Clearing & Settlement Loyalty Programs Other Payment Gateway Switching CORE Business Technologies July 31, 2010 Authorization Hosting Provider IPSP (E-commerce) MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions CoreCommerce CRE Secure Credibanco Visa Colombia December 31, 2009 July 31, 2010 April 30, 2010 Payment Gateway Payment Gateway Authorization Chief Security Officers Coalfire Systems, Inc. Xtrategies Trustwave Verizon Business Verizon Business Trustwave Fortrex Technologies Fortrex Technologies Fortrex Technologies Fortrex Technologies Trustwave Tevora Business Solutions Inc ASSESSOR SAS 70 Solutions Crowe Horwath AP CEMEA LAC NA

Clearing & Settlement IPSP (E-commerce) Issuing Processing MOTO Payment Processing (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 11 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER Credibanco Visa Colombia VALIDATION DATE April 30, 2010 SERVICES COVERED BY REVIEW (1) Payment Gateway Process Magnetic-Stripe Transactions Switching Clearing & Settlement Other CreditCall Communications Ltd. January 31, 2010 Authorization Clearing & Settlement MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Crescent Processing Company CROEM CSG Content Direct October 31, 2009 October 31, 2009 March 31, 2010 Other MOTO Payment Processing Authorization IPSP (E-commerce) Payment Gateway CSG Systems - Data Prose May 31, 2010 IPSP (E-commerce) Other CSG Systems, Inc. Interactive Messaging CSG Systems, Inc. Statement and Account Billing Services April 30, 2010 April 30, 2010 Payment Gateway Authorization Solutionary Solutionary Solutionary SecurityMetrics Trustwave Solutionary Foregenix ASSESSOR Xtrategies AP CEMEA LAC NA

Credit Discovery

December 31, 2009

Information Exchange

IPSP (E-commerce) Payment Gateway CSI Software October 31, 2009 September 30, 2010 Hosting Provider Payment Gateway CSU CardSystem S.A. Authorization Clearing & Settlement Hosting Provider Issuing Processing MOTO Payment Processing Other Payment Gateway Process Magnetic-Stripe Transactions Switching Cvent August 31, 2009 Switching FishNet Security Trustwave Trustwave

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 12 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER Cyber City Teleservices Cybera CyberSource (a Visa company) Cynergy Data VALIDATION DATE SERVICES COVERED BY REVIEW (1) ASSESSOR CrimsonSecurity FishNet Security Trustwave Coalfire Systems. Inc. AP CEMEA LAC NA

September 30, 2009 Other April 30, 2010 August 31, 2010 August 31, 2010 Switching Payment Gateway IPSP (E-commerce) MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions

D.M.inSite Data Delivery Services Data Paradigm Data Stream

July 31, 2010 July 31, 2010 July 31, 2010 February 28, 2010

Payment Gateway Other Other Authorization Clearing & Settlement Other Payment Gateway

SecurityMetrics Coalfire Crowe Horwath LLP Information Exchange

Dataline Systems Datapak Services Corporation

December 31, 2009 May 31, 2010

Other Authorization Hosting Provider Payment Gateway

Trustwave Trustwave

DataPipe DAXKO Debit Plus Technologies, LLC Debit Technologies, Inc

September 30, 2010 April 30, 2010 February 28, 2010 May 31, 2010

Hosting Provider IPSP (E-commerce) Other Clearing & Settlement Other

Trustwave IBM Security Services Specialized Security Services Information Exchange

Delphis Software

November 30, 2009

Authorization Payment Gateway

Digital Resources Group (DRG) SecurityMetrics

Demandware

June 30, 2010

Hosting Provider IPSP (E-commerce) Payment Gateway Authorization Clearing & Settlement IPSP (E-commerce) Issuing Processing Loyalty Programs

Denarii Systems

January 31, 2010

Security Works

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 13 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER Denarii Systems VALIDATION DATE January 31, 2010 SERVICES COVERED BY REVIEW (1) MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching Clearing & Settlement Payment Gateway Diamond Marketing Solutions September 30, 2010 Other Authorization Clearing & Settlement Payment Gateway Digital Payment Technologies Digital River May 31, 2010 July 31, 2010 Payment Gateway IPSP (E-commerce) Payment Gateway Direct Alliance Corp November 30, 2009 MOTO Payment Processing Other Direct Mail Processors Donor.com January 31, 2010 June 30, 2010 Payment Gateway Authorization Hosting Provider IPSP (E-commerce) MOTO Payment Processing Other Duncan Professional Account Management (PAM) Duncan Technologies Dydacomp Complete Commerce Ebocom, LLC EC Suite October 31, 2010 Payment Gateway SecurityMetrics, Inc. Fortrex Technologies Coalfire AT&T Consulting Solutions, Inc. Payment Software company (PSC) NetSPI Halock Security Labs Information Exchange ASSESSOR Security Works AP CEMEA LAC NA

DHD Media

June 30, 2010

Trustwave

Digital Network Solutions April 30, 2010 (DNS) DBA Moneytree ATM

June 30, 2010 May 31, 2010 April 30, 2010 August 31, 2009

Payment Gateway IPSP (E-commerce) Clearing & Settlement Authorization Clearing & Settlement Hosting Provider IPSP (E-commerce) Payment Gateway

SecurityMetrics Coalfire Systems, Inc. CyberTrust Chief Security Officers

EchoSat Communications

September 30, 2009 Other

Security Innovation

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 14 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER eCommLink VALIDATION DATE November 30, 2009 SERVICES COVERED BY REVIEW (1) Authorization Hosting Provider IPSP (E-commerce) Issuing Processing Loyalty Programs Loyalty Programs Authorization Clearing & Settlement Issuing Processing Payment Gateway Switching Authorization Clearing & Settlement Issuing Processing Switching Elan Financial Services Credit Card Issuing Elavon (formerly NOVA) December 31, 2009 May 31, 2010 Issuing Processing Authorization Clearing & Settlement Other Payment Gateway Process Magnetic-Stripe Transactions Elavon (formerly Southern Datacomm) September 30, 2010 Authorization IPSP (E-commerce) Process Magnetic-Stripe Transactions Switching Elavon Canada (formerly Internet Secure) ELECTRA CARD SERVICES PVT. LTD. July 31, 2010 May 31, 2010 Payment Gateway Authorization Clearing & Settlement Issuing Processing Loyalty Programs Process Magnetic-Stripe Transactions Electronic Merchant Systems Electronic Payments Inc April 30, 2010 July 31, 2010 Other Authorization Clearing & Settlement (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 15 of 62 Trustwave Information Exchange Trustwave ControlCase Trustwave Trustwave TrustWave ASSESSOR RSM McGladrey AP CEMEA LAC NA

Edhance Inc. EFX

July 31, 2010 March 31, 2010

PSC LLC T3i

Elan Financial Services

April 30, 2010

TrustWave

List of Compliant Service Providers - All

SERVICE PROVIDER Electronic Payments Inc VALIDATION DATE July 31, 2010 SERVICES COVERED BY REVIEW (1) Loyalty Programs Other Clearing & Settlement Other Electronic Transaction Systems Corporation (ETS Corp.) September 30, 2009 Authorization Fortrex Technologies ASSESSOR Information Exchange AP CEMEA LAC NA

Electronic Processing Services

January 31, 2010

Information Exchange

Clearing & Settlement IPSP (E-commerce) Loyalty Programs MOTO Payment Processing Other Payment Gateway Payment Processing Process Magnetic-Stripe Transactions Switching Element Payment Services November 30, 2009 Clearing & Settlement Other Payment Gateway IPSP (E-commerce) Process Magnetic-Stripe Transactions EMN8 POS Managed Services Enacomm, Inc. Encircle ENETS PTE LTD ePayData November 30, 2009 Other Payment Gateway March 31, 2010 December 31, 2009 November 30, 2009 October 31, 2009 Hosting Provider Other Payment Gateway Clearing & Settlement Payment Gateway Epicor March 31, 2010 Authorization Payment Gateway IPSP (E-commerce) Payment Gateway Loyalty Programs E-Commerce Order Fulfillment Trustwave True Digital Security Enterprise Risk mangement Vectra Information Exchange Tevora Business Solutions Information Exchange

Emdeon

March 31, 2010

Lattimore Black Morgan and Cain

Epoch eProcessing Network Epsilon Data Management

November 30, 2009 April 30, 2010 August 31, 2010

Protiviti Trustwave Verizon Business Trustwave

Escalate Retail Incorporated October 31, 2009

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 16 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER EURONET SERVICES INDIA PVT. LTD. VALIDATION DATE April 30, 2010 SERVICES COVERED BY REVIEW (1) Issuing Processing Process Magnetic-Stripe Transactions EuroPlanet April 30, 2010 Authorization MOTO Payment Processing Process Magnetic-Stripe Transactions EVERTEC Latinoamerica / ATH Costa Rica October 31, 2009 Authorization Clearing & Settlement Issuing Processing Loyalty Programs MOTO Payment Processing Process Magnetic-Stripe Transactions Switching EVO Merchant Services Evolution Benefits E-xact Transactions Excellence in Motivation October 31, 2010 December 31, 2009 May 31, 2010 November 30, 2009 Clearing & Settlement Other Payment Gateway Authorization Clearing & Settlement Issuing Processing Payment Gateway Experian Information Solutions ExtraMeasures EZFacility.com Ezic, Inc. September 30, 2009 IPSP (E-commerce) Other May 31, 2010 August 31, 2010 July 31, 2010 Other Payment Gateway Authorization Clearing & Settlement MOTO Payment Processing Other Payment Gateway Process Magnetic-Stripe Transactions ezRez Software Fair Isaac - Card Alert October 31, 2009 Hosting Provider Payment Software company (PSC) Trustwave Coalfire Trustwave Information Exchange Verizon Business Trustwave Lighthouse Computer Services Trustwave Information Exchange Xtrategies Trustwave ASSESSOR ControlCase AP CEMEA LAC NA

September 30, 2009 Other

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 17 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER Faith Direct Fdration des caisses Desjardins du Qubec VALIDATION DATE July 31, 2010 August 31, 2010 SERVICES COVERED BY REVIEW (1) Other Authorization Issuing Processing Process Magnetic-Stripe Transactions Fidelity Information Services - Australasia November 30, 2009 Authorization Clearing & Settlement Payment Gateway Switching Fidelity Information Services - Card Services UK (Certegy) November 30, 2009 Authorization IBM Internet Security Systems (ISS) IBM Internet Security Systems (ISS ASSESSOR CrimsonSecurity Trustwave AP CEMEA LAC NA

Clearing & Settlement Payment Gateway Switching Fidelity Information Services - Certegy UK, Birmingham September 30, 2009 Authorization IBM Internet Security Systems

Clearing & Settlement Payment Gateway Switching Fidelity Information Services - Chicago Authnet December 31, 2009 Authorization Clearing & Settlement Issuing Processing Payment Gateway Switching Fidelity Information Services - Clear Commerce Fidelity Information Services - eFunds Prepaid Solutions May 31, 2010 April 30, 2010 Payment Gateway Issuing Processing IBM Internet Security Systems Trustwave IBM Internet Security Systems

Loyalty Programs MOTO Payment Processing Process Magnetic-Stripe Transactions Fidelity Information Services - eZCard Charlotte Fidelity Information Services - GBS India March 31, 2010 Other IBM Internet Security Systems IBM Internet Security Systems

September 30, 2009 Other

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 18 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER Fidelity Information Services - Lisle Remittance Processing Fidelity Information Services - Loyalty Card Processing Fidelity Information Services - Norcross Debit Card Processing VALIDATION DATE January 31, 2010 SERVICES COVERED BY REVIEW (1) Other ASSESSOR IBM Internet Security Systems Trustwave AP CEMEA LAC NA

June 30, 2010

Loyalty Programs

April 30, 2010

Authorization

Trustwave

Clearing & Settlement Process Magnetic-Stripe Transactions Fidelity Information Services - Output Solutions San Antonio Fidelity Information Services - Payment Processing and Data Center Little Rock, AR February 28, 2010 Other IBM Internet Security Systems Trustwave

May 31, 2010

MOTO Payment Processing

Process Magnetic-Stripe Transactions Fidelity Information Services - Plainview Fidelity Information Services - Processadora e Servicos S.A. Brazil September 30, 2010 April 30, 2010 Other Authorization IBM Internet Security Systems Trustwave

Issuing Processing MOTO Payment Processing Process Magnetic-Stripe Transactions Fidelity Information Services - PSS India January 31, 2010 Authorization Clearing & Settlement Switching Fidelity Information Services - St. Petersburg Fidelity Information Services - St. Petersburg Check Fidelity Information Services - Web Vault Fidelity Information Services (FIS) Electronic Payments, New Berlin WI September 30, 2009 Remittance Processing March 31, 2010 Authorization IBM Internet Security Systems IBM Internet Security Systems (ISS) IBM Internet Security Systems

Clearing & Settlement January 31, 2010 Other IBM Internet Security Systems (ISS) IBM Internet Security Systems

September 30, 2009 Authorization

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 19 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER Fidelity Information Services (FIS) Electronic Payments, New Berlin WI VALIDATION DATE SERVICES COVERED BY REVIEW (1) ASSESSOR IBM Internet Security Systems AP CEMEA LAC NA

September 30, 2009 Clearing & Settlement

Payment Gateway Switching Fifth Third Processing Solutions - Issuing and Switch-Providing Systems June 30, 2010 3-D Secure Access Control Server Authorization Clearing & Settlement Issuing Processing Process Magnetic-Stripe Transactions Switching Fifth Third Processing June 30, 2010 Solutions-Acquiring Systems Authorization Clearing & Settlement Process Magnetic-Stripe Transactions Financial Transmission Network Inc Finexus International Sdn Bhd January 31, 2010 July 31, 2010 Payment Gateway Authorization Clearing & Settlement Hosting Provider Issuing Processing MOTO Payment Processing Process Magnetic-Stripe Transactions Switching First American Payment Systems First Atlantic Commerce, LTD. June 30, 2010 Clearing & Settlement Payment Gateway March 31, 2010 Clearing & Settlement MOTO Payment Processing Payment Gateway Switching First Data - Cono Sur S.R.L. March 31, 2010 Authorization Clearing & Settlement IPSP (E-commerce) Issuing Processing Loyalty Programs MOTO Payment Processing Other (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 20 of 62 Trustwave Coalfire IBM Internet Security Systems Trustwave Truswave Trustwave Trustwave

List of Compliant Service Providers - All

SERVICE PROVIDER VALIDATION DATE SERVICES COVERED BY REVIEW (1) Payment Gateway Process Magnetic-Stripe Transactions Switching Other ASSESSOR Trustwave AP CEMEA LAC NA

First Data - Cono Sur S.R.L. March 31, 2010

First Data - Integrated Payment Systems (IPS) Denver First Data - Integrated Payment Systems (IPS) Westerville First Data - Secure Transport (Datawire)

February 28, 2010

Trustwave

May 31, 2010

Other

Trustwave

December 31, 2009

Authorization IPSP (E-commerce) Payment Gateway Process Magnetic-Stripe Transactions Switching

Trustwave

First Data Buypass (First Data Concord Payment Services)

September 30, 2010

Authorization

Trustwave

Clearing & Settlement IPSP (E-commerce) Issuing Processing MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching First Data CAC (Processing Center, S.A.) March 31, 2010 Authorization Clearing & Settlement IPSP (E-commerce) Issuing Processing MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching First Data Card Services International September 30, 2010 Authorization Clearing & Settlement IPSP (E-commerce) Issuing Processing MOTO Payment Processing Payment Gateway (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 21 of 62 Trustwave TrustWave

List of Compliant Service Providers - All

SERVICE PROVIDER First Data Card Services International First Data Clientline Reporting (First Data Concord Electronic Financial Systems) First Data EFS Transportation Services VALIDATION DATE September 30, 2010 SERVICES COVERED BY REVIEW (1) Process Magnetic-Stripe Transactions Switching Clearing & Settlement ASSESSOR Trustwave AP CEMEA LAC NA

September 30, 2010

Trustwave

September 30, 2010

Authorization Clearing & Settlement IPSP (E-commerce) Issuing Processing MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching

Trustwave

First Data Global Gateway (First Data LinkPoint/First Data YourPay)

September 30, 2010

Authorization

Trustwave

Clearing & Settlement IPSP (E-commerce) Issuing Processing MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching First Data Government Solutions First Data Integrated Payment Systems First Data International ANZSA December 31, 2010 IPSP (E-commerce) Payment Gateway October 31, 2010 September 30, 2010 Other Authorization Clearing & Settlement Issuing Processing Loyalty Programs MOTO Payment Processing Process Magnetic-Stripe Transactions Switching First Data International China September 30, 2010 Authorization Clearing & Settlement (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 22 of 62 Trustwave Trustwave Trustwave Trustwave

List of Compliant Service Providers - All

SERVICE PROVIDER First Data International China VALIDATION DATE September 30, 2010 SERVICES COVERED BY REVIEW (1) Issuing Processing Loyalty Programs Process Magnetic-Stripe Transactions First Data InternationalOmniPay Limited November 30, 2009 Authorization Clearing & Settlement IPSP (E-commerce) Issuing Processing MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching First Data Money Network September 30, 2010 Authorization Clearing & Settlement IPSP (E-commerce) Issuing Processing MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching Clearing & Settlement IPSP (E-commerce) MOTO Payment Processing Process Magnetic-Stripe Transactions First Data Prepaid Services (First Data Concord Financial Technologies) September 30, 2010 Authorization Trustwave Trustwave Trustwave ASSESSOR Trustwave AP CEMEA LAC NA

First Data PayPoint

September 30, 2010

Trustwave

Clearing & Settlement IPSP (E-commerce) Issuing Processing MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching First Data RemitCo September 30, 2010 Other Remittance Processing Authorization Clearing & Settlement IPSP (E-commerce) (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 23 of 62 Trustwave

First Data Resources

January 31, 2010

Trustwave

List of Compliant Service Providers - All

SERVICE PROVIDER First Data Resources VALIDATION DATE January 31, 2010 SERVICES COVERED BY REVIEW (1) Issuing Processing Loyalty Programs MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching Authorization Clearing & Settlement IPSP (E-commerce) Issuing Processing MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching Authorization Clearing & Settlement Issuing Processing Loyalty Programs MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching First Data STAR (Networks, Processing and Systems Inc.) September 30, 2010 Authorization Trustwave ASSESSOR Trustwave AP CEMEA LAC NA

First Data Retail ATM

September 30, 2010

Trustwave

First Data Slovakia and Serbia

October 31, 2010

Trustwave

Clearing & Settlement IPSP (E-commerce) Issuing Processing MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching First Data TeleCheck September 30, 2010 Authorization Clearing & Settlement Issuing Processing Loyalty Programs MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching Trustwave

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 24 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER First Hawaiian Bank VALIDATION DATE June 30, 2010 SERVICES COVERED BY REVIEW (1) Authorization Payment Gateway Authorization Clearing & Settlement Issuing Processing MOTO Payment Processing Process Magnetic-Stripe Transactions Switching First National Merchant Solutions January 31, 2010 Authorization Clearing & Settlement Issuing Processing MOTO Payment Processing Process Magnetic-Stripe Transactions Switching First National Technology Solutions FirstView Financial, LLC March 31, 2010 August 31, 2010 Hosting Provider Authorization Clearing & Settlement Issuing Processing Payment Gateway Fiserv - ACCEL/Exchange Fiserv Bank Solutions Lincoln Fiserv - CBS Lake Mary Fiserv - CheckFreePay Fiserv - Club Solutions April 30, 2010 July 31, 2010 August 31, 2010 June 30, 2010 July 31, 2010 Issuing Processing Other Other Other Hosting Provider Other Fiserv - CUSA Fiserv - E Banking October 31, 2010 September 30, 2010 Other Hosting Provider Other Fiserv - Electronic February 28, 2010 Document Delivery (EPSIIA) Fiserv - Northeast Region Data Center June 30, 2010 Other Issuing Processing Payment Software company (PSC) Payment Software Company (PSC) PSC PSC Payment Software company (PSC) PSC PSC Payment Software company (PSC) Payment Software company (PSC) Trustwave Trustwave Trustwave ASSESSOR Trustwave AP CEMEA LAC NA

First National Bank of Omaha

January 31, 2010

Trustwave

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 25 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER Fiserv - OnCU Fiserv - SourceOne Fiserv - Southeastern Region Data Center: Bowling Green FISERV Advantage VALIDATION DATE July 31, 2010 July 31, 2010 October 31, 2010 SERVICES COVERED BY REVIEW (1) Other Other Issuing Processing ASSESSOR Payment Software company (PSC) Payment Software company (PSC) PSC AP CEMEA LAC NA

September 30, 2010

Authorization Hosting Provider Other Switching

PSC

Fiserv Bank Solutions (LBD) EMEA FISERV Credit Processing Services Fiserv EFT

August 31, 2010 October 31, 2009 March 31, 2010

Other Other Issuing Processing Billing Management Other Payment Gateway

PSC Payment Software Company (PSC) Payment Software Company (PSC) PSC

FISERV Electronic Banking, October 31, 2010 Biller Solutions & Itech

FISERV Enterprise Technology - Johns Creek FISERV FET Irving Fiserv Xroads

September 30, 2009 Other November 30, 2009 February 28, 2010 Hosting Provider Hosting Provider Other

PSC Payment Software company (PSC) Payment Software company (PSC) HALOCK Security Labs Trustwave Fortrex Technologies Trustwave

Florists Transworld Delivery Inc. Focus Payment Solutions Fore! Reservations Forward Information Technologies

March 31, 2010 January 31, 2010

Payment Gateway Other

September 30, 2009 Payment Gateway June 30, 2010 Authorization Hosting Provider Payment Gateway

Fosdick Fulfillment FreedomPay Inc.

July 31, 2010 July 31, 2010

Clearing & Settlement Authorization

Trustwave T3i

Clearing & Settlement Loyalty Programs (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 26 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER FreedomPay Inc. Frontline Processing VALIDATION DATE July 31, 2010 June 30, 2010 SERVICES COVERED BY REVIEW (1) Payment Gateway Other Payment Gateway FrontStream Fast Transact, LLC Fry Inc. FSV Payment Systems May 31, 2010 May 31, 2010 May 31, 2010 Authorization Hosting Provider Issuing Processing Other Fujitsu America Inc. Fulfillment Technologies February 28, 2010 September 30, 2010 Hosting Provider Authorization Clearing & Settlement MOTO Payment Processing Galileo Processing GC Services July 31, 2010 October 31, 2009 Issuing Processing MOTO Payment Processing Process Magnetic-Stripe Transactions Authorization IPSP (E-commerce) Payment Gateway GE Money - Retail Consumer Finance August 31, 2010 Authorization Clearing & Settlement IPSP (E-commerce) Issuing Processing Loyalty Programs Other Payment Gateway Process Magnetic-Stripe Transactions GetNet July 31, 2010 Clearing & Settlement Payment Gateway Switching Global Card Services (Elavon) May 31, 2010 Authorization Clearing & Settlement Other Payment Gateway Process Magnetic-Stripe Transactions (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 27 of 62 CyberTrust Cipher Informatica Ltda Symantec Trustwave K3DES Verizon Business SecureState ControlCase IBM Internet Security Systems K3DES T3i SecurityMetrics ASSESSOR AP CEMEA LAC NA

GE Money - Americas, Retail Sales Finance

December 31, 2009

Symantec

List of Compliant Service Providers - All

SERVICE PROVIDER Global Cash Access VALIDATION DATE July 31, 2010 SERVICES COVERED BY REVIEW (1) Authorization Clearing & Settlement IPSP (E-commerce) MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Authorization Issuing Processing Global Collect Services B.V. July 31, 2010 Clearing & Settlement IPSP (E-commerce) Global Electronic Technology January 31, 2010 Payment Gateway Payment Gateway Switching Global Processing Centre June 30, 2010 Authorization Clearing & Settlement Issuing Processing Payment Gateway Payment Gateway Information Exchange 403 Labs Trustwave Trustwave ASSESSOR Trustwave AP CEMEA LAC NA

Global Cash Card

January 31, 2010

Digital Resources Group (DRG)

Global Payments Direct, Inc. July 31, 2010

GLOBAL REFUND HOLDINGS AB Global Technology Partners LLC Go Daddy GoEmerchant

January 31, 2010

Vectra Information Security Pte Ltd (branch office of Vectra Corp) Coalfire Trustwave IBM Internet Security Systems Core Security IBM Internet Security Systems BSI Japan

June 30, 2010 October 31, 2009 May 31, 2010

Other IPSP (E-commerce) Authorization Payment Gateway

Google Govolution, Inc.

January 31, 2010 May 31, 2010

Payment Gateway Authorization Payment Gateway

GP Network Corporation

September 30, 2010

Authorization Clearing & Settlement

Green Dot Greenwise Bankcard, LLC

October 31, 2010 January 31, 2010

Issuing Processing IPSP (E-commerce) MOTO Payment Processing Payment Gateway

Protiviti Inc. Chief Security Officers, LLC

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 28 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER Greenwise Bankcard, LLC GSI Commerce Solutions Hamer Enterprises Hanover Direct Harland Financial Solutions VALIDATION DATE January 31, 2010 September 30, 2010 December 31, 2009 SERVICES COVERED BY REVIEW (1) Process Magnetic-Stripe Transactions IPSP (E-commerce) Payment Gateway ASSESSOR Chief Security Officers, LLC Trustwave SecurityMetrics Fortrex Technologies Crowe Horwath AP CEMEA LAC NA

September 30, 2009 Payment Gateway August 31, 2010 Authorization MOTO Payment Processing Payment Gateway Switching Payment Gateway Authorization Clearing & Settlement MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching

Harris Connect

December 31, 2009

Trustwave Coalfire

Heartland Payment Systems April 30, 2010

Helcim Inc.

June 30, 2010

Authorization IPSP (E-commerce) MOTO Payment Processing Payment Gateway

SPIguard Security Solutions Inc.

Hewitt Associates LLC Hewlett-Packard (TD Bank Environment) Hinda, Inc.

August 31, 2010 June 30, 2010 January 31, 2010

Other Hosting Provider Loyalty Programs Authorization Hosting Provider Switching Hosting Provider Other

Trustwave Telus Tech Lock Inc Internet Secuirty Services Net Cyclops Inc.

Hitachi Information Systems February 28, 2010 HostedPCI March 31, 2010

Hosting.com

April 30, 2010

Trustwave

HP Commercial Card (EDS) May 31, 2010 HP Consumer Card Services (EDS) October 31, 2009

Payment Processing Authorization Issuing Processing Loyalty Programs

Trustwave Trustwave

HP Consumer Direct (EDS)

September 30, 2010

Authorization E-Commerce

Trustwave

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 29 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER HP Consumer Direct (EDS) VALIDATION DATE September 30, 2010 SERVICES COVERED BY REVIEW (1) Merchant Support MOTO Payment Processing Order Fulfillment Payment Gateway Clearing & Settlement Hosting Provider Payment Gateway HP Guidance Authorization HP Merchant Acquirer Services HP Oregon eGovernment (EDS) HP Pay for Convenience (EDS) HP Surveyor (EDS) Hughes Network Systems Hypertec Availability Services i2c Incorporated October 31, 2009 October 31, 2009 June 30, 2010 April 30, 2010 August 31, 2010 Issuing Processing Clearing & Settlement Managed Merchant Hosting Payment Gateway New Accounts Online Trustwave Trustwave Trustwave Trustwave Trustwave IBM Internet Security Systems Net Cyclops Inc. Trustwave ASSESSOR Trustwave AP CEMEA LAC NA

HP Deposit Systems

October 31, 2009

Trustwave

September 30, 2009 Switching July 30, 2010 Hosting Provider

September 30, 2009 Authorization IPSP (E-commerce) Issuing Processing Process Magnetic-Stripe Transactions December 31, 2010 Other Payment Gateway Process Magnetic-Stripe Transactions

IATS Ticketmaster

Trustwave

IC Systems iCongo ICT Group ID Analytics, Inc. iMax Bancard InComm

August 31, 2010 January 31, 2010 October 31, 2009 June 30, 2010 December 31, 2009 September 30, 2010

Clearing & Settlement IPSP (E-commerce) Other Other Other Authorization Issuing Processing Other

RSM McGladrey NetSPI TruArx Computer Task Group SecurityMetrics IBM Internet Security Systems

Industry Retail Group

December 31, 2009

Other

Trustwave

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 30 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER INetU, Inc. Infinity Data VALIDATION DATE January 31, 2010 October 31, 2009 SERVICES COVERED BY REVIEW (1) Hosting Provider Clearing & Settlement Other InfoGroup Infonox March 31, 2010 December 31, 2009 Other Authorization Payment Gateway Innotrac Corporation Innovative Gateway Solutions (IGS) Innovative Merchant Solutions (IMS) August 31, 2010 October 31, 2009 October 31, 2009 Payment Gateway Authorization Clearing & Settlement IPSP (E-commerce) Process Magnetic-Stripe Transactions Innovis Data Solutions, Inc IN-SOLUTIONS GLOBAL PVT LIMITED InstaMed Communications January 31, 2010 April 30, 2010 Other Clearing & Settlement Hosting Provider February 28, 2010 Authorization Clearing & Settlement Payment Gateway Integrated Printing Solutions October 31, 2009 Integrity Payment Systems Intellipay March 31, 2010 February 28, 2010 Other Other Clearing & Settlement Payment Gateway Process Magnetic-Stripe Transactions Switching Intercept Interface Security Secure Managed Broadband September 30, 2010 June 30, 2010 Payment Gateway Other Clearing & Settlement Coalfire SecurityMetrics Acertigo Raven Eye K3DES Trustwave Trustwave Verizon Business SISA Information Security Trustwave Trustwave Trustwave Solutionary, Inc. Digital Resources Group (DRG) ASSESSOR Trustwave Information Exchange AP CEMEA LAC NA

INTERNATIONAL CARD August 31, 2010 SYSTEMS AD (CASYS AD)

IPSP (E-commerce) Payment Gateway Process Magnetic-Stripe Transactions Switching (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 31 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER International Industrial Bank VALIDATION DATE October 31, 2010 SERVICES COVERED BY REVIEW (1) Authorization Clearing & Settlement IPSP (E-commerce) MOTO Payment Processing Process Magnetic-Stripe Transactions Switching Authorization Process Magnetic-Stripe Transactions MOTO Payment Processing Other Payment Gateway Process Magnetic-Stripe Transactions Interpro Group, Inc. October 31, 2009 Other Payment Gateway Intersections Intrix Technology Inc. February 28, 2010 March 31, 2010 Authorization IPSP (E-commerce) Payment Gateway Process Magnetic-Stripe Transactions Intuit Electronic Clearing House (ECHO, Inc.) April 30, 2010 Authorization Clearing & Settlement IPSP (E-commerce) Payment Gateway Process Magnetic-Stripe Transactions Intuit QuickBooks Online Processor Intuition Systems IP Commerce February 28, 2010 October 31, 2009 October 31, 2010 IPSP (E-commerce) Payment Gateway Other Payment Gateway Authorization Payment Gateway Switching iPayment IPS Group Inc. June 30, 2010 October 31, 2010 Other Payment Gateway Trustwave Tevora Business Solutions Trustwave SecurityMetrics Coalfire Trustwave Control Case Trustwave K3DES ASSESSOR Jet Inforsystems AP CEMEA LAC NA

Internet Payment Exchange

July 31, 2010

TruArx

Internet Ticketing Systems, Inc

July 31, 2010

SecurityMetrics

IP PAYMENTS PTY LTD

August 31, 2010

Vectra Corporation

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 32 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER iQor IRN Payment Systems VALIDATION DATE August 31, 2009 February 28, 2010 SERVICES COVERED BY REVIEW (1) Other Clearing & Settlement Other Iron Mountain iTransact May 31, 2010 May 31, 2010 Other MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions ITS Inc. / Shazam Inc. April 30, 2010 Authorization Clearing & Settlement Issuing Processing Payment Gateway Process Magnetic-Stripe Transactions Switching Authorization Clearing & Settlement IPSP (E-commerce) Switching Payment Gateway Trustwave Neohapsis Inc. Specialized Security Services, Inc. ASSESSOR CrimsonSecurity Information Exchange AP CEMEA LAC NA

Iveri Payment Technology

March 31, 2010

Trustwave

J.J. MacKay Canada Limited/MacKay Meters, Inc. (MacKay Meters) JetPay, LLC

November 30, 2009

Trustwave

April 30, 2010

Clearing & Settlement Payment Gateway Clearing & Settlement Issuing Processing Loyalty Programs Payment Gateway

Trustwave

jha Payment Processing Solutions

June 30, 2010

Coalfire

JSA Technologies JSC Chronopay JSC GE MoneyBank

September 30, 2009 Clearing & Settlement August 31, 2009 October 31, 2010 IPSP (E-commerce) Authorization Issuing Processing Payment Gateway Process Magnetic-Stripe Transactions

Trustwave SRC Security Research & Consulting GmbH (SRC) Sysnet

JSC Georgian Card

October 31, 2010

Authorization Clearing & Settlement IPSP (E-commerce)

Trustwave

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 33 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER JSC Georgian Card VALIDATION DATE October 31, 2010 SERVICES COVERED BY REVIEW (1) Issuing Processing MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching Authorization Clearing & Settlement JSC TRANSCREDITCARD October 31, 2010 Authorization E-Commerce Issuing Processing Payment Gateway Process Magnetic-Stripe Transactions Kount, Inc (A Division of Keynetics, Inc) Kubra Data Transfer, Inc. Kudzu Interactive, Inc. March 31, 2010 July 31, 2010 September 30, 2010 Other Payment Gateway Authorization Payment Gateway LesConcierges Lethoff, Inc. March 31, 2010 November 30, 2009 Loyalty Programs Authorization Clearing & Settlement IPSP (E-commerce) Loyalty Programs MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Lighthouse1 Link2Gov Litle & Co LiveOps, Inc LOTSolutions / Life of the South Lundquist Consulting M & T Bank February 28, 2010 February 28, 2010 January 31, 2010 July 31, 2010 June 30, 2010 Other Payment Gateway Payment Gateway Other Other Payment Gateway December 31, 2009 July 31, 2010 Other Issuing Processing Trustwave SecureState LLC Jefferson Wells Trustwave Payment Software Company (PSC) Trustwave Trustwave Digital Resources Group (DRG) Trustwave Trustwave Trustwave ControlCase Evraas.I.T ASSESSOR Trustwave AP CEMEA LAC NA

JSC RUSSIAN STANDARD BANK

August 31, 2010

Self-Assessment

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 34 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER Maas Global Solutions Corporation VALIDATION DATE October 31, 2010 SERVICES COVERED BY REVIEW (1) Authorization Payment Gateway Process Magnetic-Stripe Transactions Magensa Magic Wrighter Maintech Maritz Loyalty Marketing Maritz Travel MarketLive August 31, 2010 July 31, 2010 November 30, 2009 December 31, 2010 August 31, 2010 October 31, 2009 Other Payment Gateway Switching Loyalty Programs Other Hosting Provider IPSP (E-commerce) Maverick Network Solutions, Inc July 31, 2010 Authorization Clearing & Settlement Issuing Processing MBS Insight, Inc MBS Textbook Exchange, Inc. - inSite MBU d.o.o. May 31, 2010 September 30, 2010 August 31, 2010 Other Payment Gateway 3-D Secure Access Control Server Authorization Clearing & Settlement IPSP (E-commerce) Issuing Processing MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching Payment Gateway 3-D Secure Access Control Server Authorization Clearing & Settlement Issuing Processing Payment Gateway K3DES Trustwave Trustwave Pointe Solutions 403 Labs Trustwave IBM Internet Security Systems IBM Internet Security Systems IBM Internet Security Systems AT&T Consulting Solutions ASSESSOR Digital Resources Group (DRG) AP CEMEA LAC NA

McKesson Patient Compass April 30, 2010 Mediterranean Smart Cards Company December 31, 2009

Trustwave Trustwave

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 35 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER Mediterranean Smart Cards Company MegaPath Mellon Transaction Solutions VALIDATION DATE December 31, 2009 SERVICES COVERED BY REVIEW (1) Process Magnetic-Stripe Transactions Switching Other Authorization Clearing & Settlement Issuing Processing Process Magnetic-Stripe Transactions Switching Member Solutions, Inc. Merchant e-Solutions September 30, 2010 January 31, 2010 Payment Gateway Authorization Clearing & Settlement MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Merchant Link, LLC Merchant One, Inc. January 31, 2010 March 31, 2010 Payment Gateway Clearing & Settlement Other Authorization Clearing & Settlement Payment Gateway Merchant Plus Merchant Service Center July 31, 2010 November 30, 2009 Payment Gateway Clearing & Settlement Other Payment Gateway Other Other Clearing & Settlement Trustwave Information Exchange Trustwave Information Exchange Trustwave Digital Resources Group (DRG) ASSESSOR Trustwave AP CEMEA LAC NA

January 31, 2010 October 31, 2009

Trustwave Trustwave

Merchant Partners

July 31, 2010

Information Exchange

MERCHANT SERVICES DE MEXICO S.A DE C.V Merchant Services LTD Merchant Services Processing at Bank of America, NA

December 31, 2009 April 30, 2010 March 31, 2010

Trustwave The Compliance and Audit Group Trustwave

Payment Gateway Switching Merchant Warehouse October 31, 2009 MOTO Payment Processing Payment Gateway (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 36 of 62 Trustwave

List of Compliant Service Providers - All

SERVICE PROVIDER Merchants Billing Services VALIDATION DATE November 30, 2009 SERVICES COVERED BY REVIEW (1) Authorization Clearing & Settlement IPSP (E-commerce) MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions ASSESSOR Information Exchange AP CEMEA LAC NA

Merchants Choice Payment Solutions Mercury Payment Systems Meridian Enterprises, Inc.

September 30, 2009 Other March 31, 2010 December 31, 2009 Payment Gateway Authorization Issuing Processing Payment Gateway Other Clearing & Settlement Authorization Payment Gateway Authorization

K3DES Coalfire Protiviti Inc.

Meritus Payment Solutions Merkle Response Group Meta Payment Systems Metavante - Electronic Payment Presentment Metavante Biller Solution Product (BSP) Metavante CorporationAcquiring Solutions, ATM Driving & Gateway Services

August 31, 2009 November 30, 2009 April 30, 2010 July 31, 2010 September 30, 2010 April 30, 2010

403 Labs Verizon Trustwave Trustwave Trustwave Trustwave

Clearing & Settlement Process Magnetic-Stripe Transactions Switching Metavante CorporationIssuing Solutions, Debit Account, Healthcare Payment Card, and Prepaid Card Solutions April 30, 2010 Authorization Trustwave

Clearing & Settlement Issuing Processing Process Magnetic-Stripe Transactions Switching Metavante Healthcare Payment Solutions Group, Benefits Payment Systems Metavante-Merchant Acquiring and Credit Card Account Processing Services February 28, 2010 Other TrustWave

April 30, 2010

Other

Trustwave

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 37 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER MHM Resources, LLC Micros Systems, Inc. Microsoft Dynamics Online VALIDATION DATE July 31, 2010 January 31, 2010 May 31, 2010 SERVICES COVERED BY REVIEW (1) Issuing Processing Other Authorization IPSP (E-commerce) MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions MOTO Payment Processing Other Mindbody September 30, 2009 Hosting Provider Payment Gateway Mobile Bytes, LLC MOBIPLAS LLC January 31, 2010 October 31, 2009 Other Authorization MOTO Payment Processing Modern Payment Solutions April 30, 2010 IPSP (E-commerce) MOTO Payment Processing Moneris July 31, 2010 Clearing & Settlement Other Monexa Solutions, Inc. January 31, 2010 IPSP (E-commerce) Payment Gateway IPSP (E-commerce) Issuing Processing Other Monitise Americas Motionsoft September 30, 2010 December 31, 2009 Other Hosting Provider IPSP (E-commerce) MOTO Payment Processing Motivational Fulfillment & Logistics Services mPay Gateway MPOWER Labs Msi - Merchant Services, Inc. NJ February 28, 2010 MOTO Payment Processing Tevora Business Solutions SecurityMetrics 403 Labs Information Exchange Trustwave Trustwave Verizon Business Control Gap SRC Security Research & Consulting GmbH Chief Security Officers EVRAAS.IT Payment Software company (PSC) ASSESSOR RSM McGladrey Trustwave Trustwave AP CEMEA LAC NA

Minacs Worldwide Inc.

April 30, 2010

Trustwave

MoneyGram Payment Systems / Property Bridge

May 31, 2010

Verizon Business:

September 30, 2009 Payment Gateway November 30, 2009 March 31, 2010 Authorization Clearing & Settlement

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 38 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER Mtrex (Vision Bankcard, Inc.) VALIDATION DATE February 28, 2010 SERVICES COVERED BY REVIEW (1) IPSP (E-commerce) Payment Gateway Process Magnetic-Stripe Transactions MTXEPS October 31, 2010 MOTO Payment Processing Payment Gateway Switching Multi Service Corp MWEB BUSINESS February 28, 2010 March 31, 2010 Payment Gateway Authorization Clearing & Settlement IPSP (E-commerce) Other Switching MySchoolBucks, LLC National Bankcard Services July 31, 2010 October 31, 2010 IPSP (E-commerce) Authorization Clearing & Settlement Loyalty Programs Payment Gateway National Card Services September 30, 2009 Authorization Clearing & Settlement Issuing Processing Other July 31, 2010 Authorization Issuing Processing Payment Gateway Switching Authorization Clearing & Settlement Hosting Provider MOTO Payment Processing Payment Gateway National Information Solutions Cooperative National Merchant Center May 31, 2010 December 31, 2009 Payment Gateway Authorization Payment Gateway National Processing Company September 30, 2010 Other Trustwave Trustwave Digital Resources Group (DRG) K3DES Tevora Business Solutions RSM McGladrey Trustwave Trustwave Trustwave ASSESSOR Trustwave AP CEMEA LAC NA

National Credit Cards

Nvision Group

National Fulfillment Services (NFS)

October 31, 2009

SecurityMetrics

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 39 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER National Records Management National Systems Corporation / QuikOrder, Inc. Nationwide Payment Solutions VALIDATION DATE August 31, 2009 July 31, 2010 SERVICES COVERED BY REVIEW (1) Other Hosting Provider ASSESSOR 403 Labs Trustwave AP CEMEA LAC NA

November 30, 2009

Authorization Clearing & Settlement Payment Gateway

Information Exchange

NBS Payment Solutions

September 30, 2010

IPSP (E-commerce) MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions

Control Gap

NCMIC Finance Corporation October 31, 2009 NCO Group Nebraska Electronic Transfer System, Inc. November 30, 2009 November 30, 2009

Clearing & Settlement Loyalty Programs Other Authorization Clearing & Settlement Switching

SecurityMetrics

Verizon Business Security Trustwave

Nelnet Business Solutions, Inc NETBilling NetDeposit LLC

April 30, 2010

Authorization Payment Gateway

Trustwave

November 30, 2009 December 31, 2009

Payment Gateway Authorization Other Payment Gateway

SecurityMetrics Verizon Business

Netspend

June 30, 2010

Authorization Clearing & Settlement Issuing Processing Payment Gateway

Coalfire Systems. Inc.

NetSpend Corporation

December 31, 2009

Authorization Clearing & Settlement Issuing Processing Payment Gateway Hosting Provider Payment Gateway Authorization Clearing & Settlement

AT&T Consulting Solutions

NetSuite

January 31, 2010

Trustwave

Network Merchants

March 31, 2010

Trustwave

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 40 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER Network Merchants VALIDATION DATE March 31, 2010 SERVICES COVERED BY REVIEW (1) MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Other Payment Gateway New Edge Networks Newegg, Inc. Newtek Merchant Services July 31, 2010 November 30, 2009 October 31, 2009 Other Payment Gateway Clearing & Settlement Loyalty Programs Authorization Clearing & Settlement Issuing Processing North American Bancard NPC Secure NRT TECHNOLOGIES, INC. October 31, 2009 March 31, 2010 February 28, 2010 Clearing & Settlement Payment Gateway Authorization Clearing & Settlement Process Magnetic-Stripe Transactions Switching Nuance Communications, Inc. Nurbank July 31, 2010 March 31, 2010 Other Authorization Clearing & Settlement Issuing Processing MOTO Payment Processing Process Magnetic-Stripe Transactions NYCE Payments Network, LLC Oak Leaf Systems, Inc. dba Data Hosting Solutions Obopay April 30, 2010 Authorization Clearing & Settlement February 28, 2010 May 31, 2010 Hosting Provider Clearing & Settlement MOTO Payment Processing Other (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 41 of 62 Raven Eye Digital Resources Group, LLC Trustwave Trustwave IBM Internet Security Systems Information Exchange Trustwave Trustwave Neohapsis Inc. Trustwave SecurityMetrics ASSESSOR Trustwave AP CEMEA LAC NA

Network Solutions

November 30, 2009

Payment Software Company (PSC)

NEXUS, S.A.

February 28, 2010

403labs

List of Compliant Service Providers - All

SERVICE PROVIDER Official Payments Corporation VALIDATION DATE February 28, 2010 SERVICES COVERED BY REVIEW (1) Clearing & Settlement IPSP (E-commerce) MOTO Payment Processing Payment Gateway Switching OMS Online, LLC August 31, 2010 Hosting Provider IPSP (E-commerce) MOTO Payment Processing Other Payment Gateway OneBridge, Inc. October 31, 2010 Issuing Processing Switching Open Solutions April 30, 2010 Issuing Processing Other Payment Gateway Switching OpSource February 28, 2010 MOTO Payment Processing Payment Gateway Opticard Payment Services Inc. April 30, 2010 Authorization Clearing & Settlement Issuing Processing Loyalty Programs MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Optimal Payments June 30, 2010 Clearing & Settlement Payment Gateway Oracle EasyPay August 31, 2011 Hosting Provider IPSP (E-commerce) Hosting Provider IPSP (E-commerce) Oracle On Demand August 31, 2010 Hosting Provider IPSP (E-commerce) ORBIT Systems Inc. - PCI Hosted Services ORCC - eCommerce Division: Columbus February 28, 2010 November 30, 2009 Hosting Provider Other Raven Eye Trustwave Coalfire Coalfire Trustwave Information Exchange Trustwave K3DES Crowe Horwath LLP ControlCase ASSESSOR Trustwave AP CEMEA LAC NA

Open Solutions Canada

July 31, 2010

K3DES

Oracle E-Billing

August 31, 2010

Coalfire Systems

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 42 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER ORCC - eCommerce Division: Parsippany ORCC - eCommerce Division: Princeton OrderMotion OrderTalk VALIDATION DATE October 31, 2009 May 31, 2010 May 31, 2010 September 30, 2010 SERVICES COVERED BY REVIEW (1) Other Payment Gateway Payment Gateway IPSP (E-commerce) MOTO Payment Processing Payment Gateway OverDrive Inc December 31, 2009 Clearing & Settlement IPSP (E-commerce) Payment Gateway Paciolan, Inc. October 31, 2009 Hosting Provider Payment Gateway Process Magnetic-Stripe Transactions Palm Coast Data January 31, 2010 MOTO Payment Processing Payment Gateway PAMS Lunchroom LLC August 31, 2010 IPSP (E-commerce) MOTO Payment Processing Panasonic Avionics Corporation Parkeon Parkmobile US Passkey International, Inc. PassPort EFT Solutions April 30, 2010 December 31, 2009 December 31, 2009 July 31, 2010 December 31, 2009 Payment Gateway Payment Gateway Other Payment Gateway Authorization Switching Payment Gateway Payment Gateway IPSP (E-commerce) Payment Gateway Paycom.net PayConnexion PAYjr November 30, 2009 April 30, 2010 October 31, 2009 IPSP (E-commerce) Payment Gateway Clearing & Settlement Issuing Processing Other (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 43 of 62 Protiviti Jefferson Wells Information Exchange Arsenal Security Group Trustwave Coalfire IOActive Inc. Trustwave Trustwave K3DES Trustwave NetWorks Group ASSESSOR Trustwave Trustwave Trustwave Trustwave AP CEMEA LAC NA

Passport Health Communications, Inc. Pay DQ PAY.ON

February 28, 2010 November 30, 2009 December 31, 2009

Trustwave Solutionary Acertigo AG

List of Compliant Service Providers - All

SERVICE PROVIDER PayJunction VALIDATION DATE April 30, 2010 SERVICES COVERED BY REVIEW (1) IPSP (E-commerce) MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions PayLeap LLC February 28, 2010 Clearing & Settlement Payment Gateway PayM8 Pty Ltd January 31, 2010 IPSP (E-commerce) Payment Gateway Payment Data Systems May 31, 2010 Authorization Clearing & Settlement Issuing Processing Payment Gateway Payment Gateway Process Magnetic-Stripe Transactions Payment Service Network Paymentus Corporation December 31, 2010 October 31, 2009 Payment Gateway Other Payment Gateway Paymetric August 31, 2010 Authorization Clearing & Settlement Other Payment Gateway PayOnline System LLC PayPal July 31, 2010 December 31, 2009 Payment Gateway IPSP (E-commerce) MOTO Payment Processing Payment Gateway PaySentinel September 30, 2009 Clearing & Settlement IPSP (E-commerce) Payment Gateway Switching September 30, 2010 August 31, 2010 Payment Gateway Authorization Clearing & Settlement IPSP (E-commerce) MOTO Payment Processing Payment Gateway Trustwave Digital Security IBM Internet Security Systems Trustwave Digital Resources Group (DRG) SPIguard Information Exchange Inc. Trustwave Information Exchange ASSESSOR Payment Software Company (PSC) AP CEMEA LAC NA

Payment Processing, Inc.

April 30, 2010

Trustwave

PaySimple PayTrace

Coalfire Information Exchange

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 44 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER PayTrace Payvision BV VALIDATION DATE August 31, 2010 August 31, 2010 SERVICES COVERED BY REVIEW (1) Process Magnetic-Stripe Transactions Authorization Clearing & Settlement MOTO Payment Processing Payment Gateway PBD Worldwide Fulfillment Services PE Systems July 31, 2010 August 31, 2009 Other Authorization Payment Gateway Switching PeopleSupport-Costa Rica PETROCARD LTD May 31, 2010 August 31, 2010 Other Authorization Clearing & Settlement Issuing Processing Process Magnetic-Stripe Transactions Switching PFSweb, Inc. April 30, 2010 IPSP (E-commerce) MOTO Payment Processing Phoenix Management Networks PhoenixNap, LLC Pipeline Data August 31, 2010 January 31, 2010 November 30, 2010 Other Hosting Provider IPSP (E-commerce) MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Pitney Bowes Pivotal Payments March 31, 2010 February 28, 2010 Payment Gateway Clearing & Settlement Loyalty Programs Payment Gateway Planet eShop October 31, 2009 Clearing & Settlement MOTO Payment Processing Payment Gateway Planet Payment March 31, 2010 Authorization Clearing & Settlement MOTO Payment Processing Payment Gateway (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 45 of 62 Trustwave Information Exchange IBM Internet Security Systems SecurityMetrics igxglobal, Inc. Coalfire Coalfire Systems. Inc. Trustwave Verisign Inforzaschita Trustwave Trustwave ASSESSOR Information Exchange BT INS AP CEMEA LAC NA

List of Compliant Service Providers - All

SERVICE PROVIDER Planet Payment Plug & Pay Technologies, Inc. VALIDATION DATE March 31, 2010 June 30, 2010 SERVICES COVERED BY REVIEW (1) Process Magnetic-Stripe Transactions Clearing & Settlement Payment Gateway Process Magnetic-Stripe Transactions Portmone POS Portal Posatel Inc. December 31, 2009 August 31, 2010 March 31, 2010 IPSP (E-commerce) Other Authorization Clearing & Settlement Issuing Processing Process Magnetic-Stripe Transactions Switching POST Integrations, Inc. (Ebocom) PowerPay, LLC April 30, 2010 October 31, 2009 Clearing & Settlement Other Payment Gateway IPSP (E-commerce) Payment Gateway Presto - Publix Super Markets Primoris Services LLC October 31, 2009 Other Switching July 31, 2010 Clearing & Settlement IPSP (E-commerce) MOTO Payment Processing Payment Gateway Priority Payment Systems Procecard, a wholly owned BHD company April 30, 2010 April 30, 2010 Other Authorization Payment Gateway Switching Process America September 30, 2010 Clearing & Settlement Payment Gateway Payment Gateway Information Exchange SecurityMetrics Internet Security Systems, SecurityMetrics Solutionary CyberTrust Payment Software company (PSC) Trustwave Witham Laboratories SRC Germany Coalfire Systems. Inc. SPIguard Security Solutions Inc. ASSESSOR Trustwave SecurityMetrics AP CEMEA LAC NA

Preferred Health Technology August 31, 2010 PREMIER TECHNOLOGIES PTY LTD March 31, 2010

ProfitStars

September 30, 2010

Trustwave

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 46 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER Promocin y Operacin S.A. de C.V. (PROSA) VALIDATION DATE July 31, 2010 SERVICES COVERED BY REVIEW (1) Authorization Clearing & Settlement Issuing Processing Switching ProPay USA, Inc. June 30, 2010 Authorization Issuing Processing Payment Gateway Process Magnetic-Stripe Transactions Propco Marketing Protocol Global Solutions PSCU Financial Services, Inc. April 30, 2010 September 30, 2010 February 28, 2010 Loyalty Programs Other Clearing & Settlement Loyalty Programs Other Payment Gateway Switching PSI Gate PSOnline, LLC Pulse Network LLC April 30, 2010 August 31, 2010 July 31, 2010 Payment Gateway Other Authorization Clearing & Settlement MOTO Payment Processing Process Magnetic-Stripe Transactions Switching PURE COMMERCE PTY LTD March 31, 2010 Authorization Clearing & Settlement Hosting Provider IPSP (E-commerce) Other Payment Gateway Qgiv QS/1 May 31, 2010 June 30, 2010 Payment Gateway Authorization Payment Gateway QuanComm, Inc. Quantum Services July 31, 2010 September 30, 2010 Payment Gateway Payment Gateway Trustwave Raven Eye SecurityMetrics Trustwave IBM Internet Security Systems Trustwave ControlCase K3DES Neohapsis, Inc. Verizon Business Security Solutions Verizon Business SecurityMetrics ASSESSOR 403 Labs AP CEMEA LAC NA

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 47 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER Quickbooks Merchant Services VALIDATION DATE October 31, 2009 SERVICES COVERED BY REVIEW (1) IPSP (E-commerce) Process Magnetic-Stripe Transactions Rackspace Hosting Radiant Systems - ALOHA TAKEOUT RADIANT SYSTEMS CPGATEWAY July 31, 2010 October 31, 2009 October 31, 2009 Hosting Provider Payment Gateway Payment Gateway IPSP (E-commerce) Hosting Provider Loyalty Programs Payment Gateway Authorization Clearing & Settlement IPSP (E-commerce) Issuing Processing Payment Gateway Process Magnetic-Stripe Transactions Ready Financial Group RealPage, Inc. Rearden Commerce July 31, 2010 June 30, 2010 April 30, 2010 Other Payment Gateway IPSP (E-commerce) Other Receivable Management Services Redbanc, S.A. September 30, 2010 June 30, 2010 Other Clearing & Settlement Process Magnetic-Stripe Transactions Switching Regions Bank RegOnline February 28, 2010 April 30, 2010 Issuing Processing Authorization Clearing & Settlement Payment Gateway Jefferson Wells Coalfire Trustwave Xtrategies, LLC Trustwave Trustwave IBM Internet Security Systems Trustwave Coalfire Coalfire Coalfire Systems. Inc. Coalfire Coalfire Arsenal Secuirty Group Verizon Business ASSESSOR Trustwave AP CEMEA LAC NA

Radiant Systems - CPOnline August 31, 2010 RADIANT SYSTEMS - PCI DATA CENTERS Rainbow Rewards RBS WorldPay - High Capacity Gateway RBS WorldPay Inc. Acquiring October 31, 2009 February 28, 2010 March 31, 2010 May 31, 2010

Results Technologies, Inc

September 30, 2009 Other

SecureWorks, Inc

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 48 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER Resurgent Capital Services Retail Decisions VALIDATION DATE August 31, 2010 October 31, 2010 SERVICES COVERED BY REVIEW (1) Other IPSP (E-commerce) Payment Gateway Revelex Corporation RevTrak, Inc September 30, 2010 May 31, 2010 Other Authorization Payment Gateway Rewards Network RewardsNow ROAM Data, Inc. RocketGate July 31, 2010 March 31, 2010 December 31, 2009 October 31, 2009 Loyalty Programs Loyalty Programs Payment Gateway Authorization Clearing & Settlement Payment Gateway IPSP (E-commerce) Payment Gateway Payment Gateway Clearing & Settlement Payment Gateway Process Magnetic-Stripe Transactions Switching Sage Payment Solutions (formerly Verus Card Services) Sallie Mae July 31, 2010 Payment Gateway Verizon Business Network Services Inc. Specialized Security Services Sunera AT&T Consulting Solutions, Inc. igxglobal, Inc. 403 Labs Trustwave Coalfire Systems. Inc. Protiviti Payment Software Company, LLC (PSC) ASSESSOR AP CEMEA LAC NA

RSI International

January 31, 2010

Coalfire

RT Lawrence S1 Corp. - Postilion Retail POS Environment

April 30, 2010 October 31, 2009

Trustwave Trustwave

April 30, 2010

Issuing Processing Payment Gateway

SATELLITE RECEIVERS, LTD. (Cash Depot) Savvis Communications Corporation SBI VERITRANS CO., LTD School-Link Technologies

December 31, 2009

Other Switching

K3DES

August 31, 2010 December 31, 2009 April 30, 2010

Hosting Provider Payment Gateway Authorization IPSP (E-commerce) Other

COALFIRE SYSTEMS ICMS Coalfire

SecureNet

June 30, 2010

Authorization

Arsenal Security Group

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 49 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER SecureNet VALIDATION DATE June 30, 2010 SERVICES COVERED BY REVIEW (1) Clearing & Settlement Hosting Provider IPSP (E-commerce) Loyalty Programs MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching Clearing & Settlement Payment Gateway Semtek Innovative Solutions July 31, 2010 Other Payment Gateway Sequoia Retail Systems July 31, 2010 Authorization Hosting Provider Servebase January 31, 2010 3-D Secure Access Control Server Authorization Clearing & Settlement IPSP (E-commerce) MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Hosting Provider MOTO Payment Processing Payment Gateway Servicios Electrnicos Globales S.A. de C.V. (EGlobal) October 31, 2009 Authorization 403 Labs Foregenix Digital Resources Group (DRG) SecurityMetrics ASSESSOR Arsenal Security Group AP CEMEA LAC NA

SegPay

April 30, 2010

Trustwave

ServiceU Corporation

April 30, 2010

K3DES

Clearing & Settlement Issuing Processing Process Magnetic-Stripe Transactions Switching SHC Direct Shift4 April 30, 2010 May 31, 2010 Loyalty Programs Clearing & Settlement Loyalty Programs Payment Gateway Switching Signature Card Services October 31, 2009 Loyalty Programs Other SecurityMetrics Trustwave Verizon Business

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 50 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER Simmons First National Corp. Simply Easier Payments SITA Information Networking Computing, USA Inc. Six Card Solutions Luxembourg S.A. VALIDATION DATE September 30, 2010 SERVICES COVERED BY REVIEW (1) Clearing & Settlement Issuing Processing October 31, 2009 April 30, 2010 Payment Gateway Authorization Trustwave IBM Internet Security Systems ASSESSOR Trustwave AP CEMEA LAC NA

Switching April 30, 2010 Authorization Clearing & Settlement IPSP (E-commerce) Payment Gateway Process Magnetic-Stripe Transactions Skipjack Financial Services February 28, 2010 Authorization Clearing & Settlement Process Magnetic-Stripe Transactions SlimCD Smart Business Technology, Inc September 30, 2009 Payment Gateway March 31, 2010 Authorization Clearing & Settlement Loyalty Programs Payment Gateway Switching SmartEtailing, Inc September 30, 2010 Hosting Provider Payment Gateway SOCIETE GENERALE SPLITSKA BANKA D.D. SoftHotel SoundBite Communications May 31, 2010 Clearing & Settlement Payment Processing October 31, 2009 Payment Gateway Trustwave K3DES Acertigo Digital Resources Group (DRG) Enterprise Risk Management T3i Trustwave VOC - Consultancy B.V.

September 30, 2009 Hosting Provider Other May 31, 2010 December 31, 2009 April 30, 2010 Other Other Other

Spacenet Speedpay (AKA Western Union Payment Services) Spendvision Springbok

Trustwave Trustwave Symantec K3DES

September 30, 2009 Issuing Processing

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 51 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER Square, Inc. VALIDATION DATE May 31, 2010 SERVICES COVERED BY REVIEW (1) IPSP (E-commerce) Payment Gateway Process Magnetic-Stripe Transactions Hosting Provider IPSP (E-commerce) MOTO Payment Processing Payment Gateway StarCite, Inc. Sterling Payment Technologies February 28, 2010 August 31, 2010 Payment Gateway Authorization Clearing & Settlement IPSP (E-commerce) Loyalty Programs MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Sterling Valley Systems, Inc.- Inntopia StoneEagle Services, Inc. July 31, 2010 October 31, 2009 Payment Gateway Authorization Clearing & Settlement Payment Gateway StoresOnline, Inc. / iMergent, Inc Strategic Fulfillment Group / Dynamic Resource Group (SFG/DRG) January 31, 2010 Hosting Provider Payment Gateway August 31, 2010 IPSP (E-commerce) Trustwave SecurityMetrics Trustwave Information Exchange Inc. RSM McGladrey Trustwave Coalfire ASSESSOR AP CEMEA LAC NA

Stafford Associates Stamps.com

October 31, 2009 August 31, 2010

CrimsonSecurity Trustwave

MOTO Payment Processing Payment Gateway Strategic Profits April 30, 2010 Authorization Clearing & Settlement MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions SunGard Availability Services SunGard Public Sector February 28, 2010 October 31, 2009 Hosting Provider Hosting Provider Payment Gateway Fortrex Technologies SecurityMetrics SPIguard Security Solutions Inc.

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 52 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER VALIDATION DATE SERVICES COVERED BY REVIEW (1) ASSESSOR Trustwave Neohapsis Inc. Digital Resources Group (DRG) AP CEMEA LAC NA

Superior Financial Systems, September 30, 2009 Other LLC Synapse Group, Inc. SystemPay, LLC October 31, 2010 April 30, 2010 Other Authorization IPSP (E-commerce) Payment Gateway T.K. Keith Company, Inc. (dba Primax) TalentBeat, Inc July 31, 2010 Other

Verizon Business Network Services Inc. K3DES

September 30, 2009 Payment Gateway Switching February 28, 2010 March 31, 2010 May 31, 2010 Payment Gateway Authorization Authorization Clearing & Settlement Issuing Processing MOTO Payment Processing Process Magnetic-Stripe Transactions Switching

Tangible Software TD Merchant Services Tecnicard Inc

Arsenal Security Group Telus Security Solutions Xtrategies

Teleflora

February 28, 2010

Hosting Provider Payment Gateway

Trustwave

Telekenex, Inc. Teleperformance Mexico

June 30, 2010 March 31, 2010

Other Loyalty Programs MOTO Payment Processing

Trustwave Tevora Business Solutions

Teleperformance USA

February 28, 2010

Hosting Provider MOTO Payment Processing

Tevora Business Solutions

Tellme, A Microsoft Subsidiary

September 30, 2010

MOTO Payment Processing Other

Trustwave

Telus Health and Financial June 30, 2010 Service Solutions (Emergis) Telvista - Grupo Tecnico de Servicios Tempus Technologies Teranet Enterprises Inc. January 31, 2010 May 31, 2010 April 30, 2010

Authorization Payment Gateway MOTO Payment Processing Payment Gateway IPSP (E-commerce)

Trustwave

Trustwave Fortrex Technologies Trustwave

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 53 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER VALIDATION DATE SERVICES COVERED BY REVIEW (1) Other Hosting Provider Payment Gateway IPSP (E-commerce) Loyalty Programs Payment Gateway The Jay Group September 30, 2009 IPSP (E-commerce) Payment Gateway January 31, 2010 June 30, 2010 Other Other Payment Gateway Process Magnetic-Stripe Transactions TicketNetwork, Inc. Tickets.com November 30, 2009 November 30, 2010 Payment Gateway Authorization Payment Gateway Process Magnetic-Stripe Transactions TIES January 31, 2010 Authorization IPSP (E-commerce) MOTO Payment Processing Payment Gateway Time Customer Service July 31, 2010 Authorization Other Payment Gateway TIO Networks Corp Total Card, Inc. Total Merchant Services October 31, 2010 May 31, 2010 February 28, 2010 Payment Gateway Other Clearing & Settlement Other TouchNet April 30, 2010 Clearing & Settlement Payment Gateway Process Magnetic-Stripe Transactions Town North Bank Credit Card Services TranLogix, Inc February 28, 2010 April 30, 2010 Other IPSP (E-commerce) Trustwave Trustwave Trustwave SPIguard Security Solutions Inc. SecurityMetrics, Inc. Information Exchange Neohapsis, Inc Trustwave 403 Labs Trustwave K3DES ASSESSOR Trustwave AT&T Consulting Solutions Trustwave FishNet Security AP CEMEA LAC NA

TermNet Merchant Services June 30, 2010 Terremark North America, Inc. T-Gate LLC The Bancorp Bank October 31, 2009 April 30, 2010 April 30, 2010

The Members Group Ticketmaster, LLC

RSM McGladrey Trustwave

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 54 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER TranLogix, Inc TRANSACT24 LIMITED Transaction Network Services (TNS) VALIDATION DATE April 30, 2010 December 31, 2009 June 30, 2010 SERVICES COVERED BY REVIEW (1) Payment Gateway Payment Gateway Other Payment Gateway Switching Transaction Network Services (TNS) TNSPay Gateway Transaction Payment Systems (TPS NJ) Transaction Processing Partners June 30, 2010 Payment Gateway Trustwave ASSESSOR Trustwave Evolution Security Systems Trustwave AP CEMEA LAC NA

September 30, 2010 May 31, 2010

Process Magnetic-Stripe Transactions Authorization Clearing & Settlement Payment Gateway

Trustwave Information Exchange

Transactis

June 30, 2010

Clearing & Settlement Other Payment Gateway

INFORMATION EXCHANGE, INC

Transbank, S.A.

December 31, 2009

Authorization Clearing & Settlement IPSP (E-commerce) MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching

Xtrategies

TransCore

April 30, 2010

Hosting Provider Payment Gateway Other Payment Gateway

Trustwave

TransFirst

May 31, 2010

Solutionary, Inc.

TransVerse Systems

April 30, 2010

Authorization Clearing & Settlement Loyalty Programs MOTO Payment Processing Other Payment Gateway Process Magnetic-Stripe Transactions

INFORMATION EXCHANGE, INC

Tranzact

May 31, 2010

Payment Gateway

Trustwave

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 55 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER Travelport GDS Tridata - DATALINK BANKCARD SERVICES CO. TriSource Solutions, LLC (formerly Nobel EFT) Tropical Productions VALIDATION DATE February 28, 2010 December 31, 2009 SERVICES COVERED BY REVIEW (1) IPSP (E-commerce) Other ASSESSOR Trustwave Trustwave AP CEMEA LAC NA

September 30, 2010 June 30, 2010

Clearing & Settlement Clearing & Settlement Other Payment Gateway Payment Gateway Process Magnetic-Stripe Transactions Switching

COALFIRE SYSTEMS, INC. Information Exchange

TrustCommerce

April 30, 2010

403 Labs

TRXSERVICES LLC TSD Rental TSYS (Issuing Processing) TSYS Acquiring Solutions (formerly Vital Processing Services)

October 31, 2010 January 31, 2010 January 31, 2010 April 30, 2010

Payment Gateway Payment Gateway Issuing Processing Authorization

Coalfire Systems. Inc. Coalfire Trustwave Trustwave

Clearing & Settlement Loyalty Programs TSYS Customer Insight (ProphIT) TSYS Loyalty (IM Platform/TLP Platform) January 31, 2010 Loyalty Programs MOTO Payment Processing July 31, 2010 Loyalty Programs Other Authorization Issuing Processing MOTO Payment Processing Prepaid Card Processing TSYS Procard Twin Oaks TxVia January 31, 2010 February 28, 2010 January 31, 2010 Other MOTO Payment Processing Trustwave Janus Associates Trustwave Trustwave Trustwave TrustWave

TSYS Managed Services April 30, 2010 Myersville (Merlin Solutions) TSYS Prepaid July 31, 2010

Authorization 403 Labs Clearing & Settlement Issuing Processing Other Payment Gateway Switching (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 56 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER U.S. Bank - ATM Banking VALIDATION DATE April 30, 2010 SERVICES COVERED BY REVIEW (1) Authorization Clearing & Settlement Issuing Processing Switching Authorization Clearing & Settlement Issuing Processing Switching Ukrainian Processing Center (UPC) March 31, 2010 Authorization Clearing & Settlement IPSP (E-commerce) Issuing Processing MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Ukranian Financial Network August 31, 2009 Authorization Clearing & Settlement Issuing Processing Process Magnetic-Stripe Transactions Unirush, LLC (Rush Card) UNITED CARD SERVICE December 31, 2009 January 31, 2010 Payment Gateway Authorization Clearing & Settlement Issuing Processing Payment Gateway Switching Authorization Payment Gateway United Payment Services January 31, 2010 Authorization Clearing & Settlement MOTO Payment Processing Payment Gateway United States Department of The Treasury, Financial Management Service UniteU Technologies, Inc March 31, 2010 Payment Gateway SecureState Accudata Systems Fortrex Technologies Jet Infosystems Security Innovation SRC Germany ASSESSOR TrustWave AP CEMEA LAC NA

U.S. Bank - Gaming Services

April 30, 2010

TrustWave

United Merchant Services, Inc. (UMSI)

April 30, 2010

Arsenal Security Group

August 31, 2010

Hosting Provider Payment Gateway

SecurityMetrics

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 57 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER Universal Money Centers Inc. VALIDATION DATE September 30, 2010 SERVICES COVERED BY REVIEW (1) Authorization Clearing & Settlement Payment Gateway US Bancorp - Retail Payment Solutions Integrated Card Systems (ICS) US Bank - Access Online US Bank - Voyager US Bank E-Payment Service US Bank Multiservice Aviation December 31, 2009 Issuing Processing TrustWave ASSESSOR Information Exchange AP CEMEA LAC NA

July 31, 2010 July 31, 2010 January 31, 2010 December 31, 2009

Other Other

TrustWave TrustWave

Internet Payment Processing Trustwave Authorization Payment Gateway Switching Trustwave

USA ePay

April 30, 2010

Authorization Clearing & Settlement Payment Gateway Authorization Clearing & Settlement Hosting Provider MOTO Payment Processing Payment Gateway

Trustwave

USA Fulfillment, Inc.

November 30, 2009

AT&T Consulting

USA Payment Systems

December 31, 2009

Authorization Clearing & Settlement Other Process Magnetic-Stripe Transactions Switching

K3DES

USA Technologies V.A.S.A.

January 31, 2010 August 31, 2010

Payment Gateway

Trustwave

3-D Secure Access Control Xtrategies Server Authorization Clearing & Settlement IPSP (E-commerce) Issuing Processing Loyalty Programs MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 58 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER ValuCard Nigeria Plc VALIDATION DATE October 31, 2010 SERVICES COVERED BY REVIEW (1) 3-D Secure Access Control Server Authorization Issuing Processing Payment Gateway Process Magnetic-Stripe Transactions Switching Clearing & Settlement Payment Gateway Vanco Services January 31, 2010 Payment Gateway Process Magnetic-Stripe Transactions Varolii Corporation March 31, 2010 Other Payment Gateway Other Payment Gateway Ventanex VenTek International April 30, 2010 November 30, 2009 Payment Gateway Authorization Payment Gateway VENTURE INFOTEK GLOBAL PVT LTD December 31, 2009 Authorization Clearing & Settlement Issuing Processing Loyalty Programs MOTO Payment Processing Process Magnetic-Stripe Transactions Switching Ventus Networks Veracity Payment Solutions VERePAY (formerly VEReFIED) October 31, 2009 December 31, 2009 October 31, 2009 ATM Processing Other Authorization MOTO Payment Processing Payment Gateway Verifi June 30, 2010 Clearing & Settlement Hosting Provider Payment Gateway Verifone June 30, 2010 Payment Gateway Trustwave Trustwave Janus Associates Trustwave Solutionary ControlCase Chief Security Officers Digital Resources Group (DRG) AT&T Consulting, Inc. SecurityMetrics ASSESSOR Trustwave AP CEMEA LAC NA

VALUE PAY SERVICES LLC, AN IPC COMPANY

November 30, 2009

Trustwave

Vcommerce

October 31, 2009

403 Labs

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 59 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER Verifone Transportation Systems Verizon Business (formerly MCI) VALIDATION DATE April 30, 2010 November 30, 2009 SERVICES COVERED BY REVIEW (1) Payment Gateway Payment Gateway Switching Verizon Business Global January 31, 2010 Services System Integration (VB-GSSI) Verizon Computing as a Service Verrus Mobile Technologies June 30, 2010 November 30, 2009 Payment Gateway Trustwave ASSESSOR Fortrex Technologies TrustWave AP CEMEA LAC NA

Hosting Provider Authorization MOTO Payment Processing Loyalty Programs IPSP (E-commerce) Other Payment Gateway

Trustwave Trustwave

Vesdia Vesta Corporation Vindicia

April 30, 2010 June 30, 2010 March 31, 2010

Coalfire Systems. Inc. AT&T Consulting, Inc. Payment Software Company (PSC) Xtrategies, LLC

Visa Argentina S A

August 31, 2010

3-D Secure Access Control Server Authorization Clearing & Settlement IPSP (E-commerce) Issuing Processing Loyalty Programs MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching 3-D Secure Access Control Server Authorization Clearing & Settlement Hosting Provider IPSP (E-commerce) Issuing Processing Loyalty Programs MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching

Visa Inc. (including Visa Debit Processing)

June 30, 2010

Trustwave

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 60 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER Visa Intellilink Voice Data Solutions Volusion VXI Global Solutions, Inc VALIDATION DATE December 31, 2009 October 31, 2009 January 31, 2010 October 31, 2009 SERVICES COVERED BY REVIEW (1) Other Payment Gateway Hosting Provider MOTO Payment Processing Other Washington Metropolitan Area Transit Authority Way Systems WEB ACTIVE CORPORATION PTY LTD (eWay) West - Managed Call Center Services West at Home West Business Services: WBS Data Vault West Direct - Direct Response West Direct - Smartsell West Interactive DataGuard Wipro Limited - Best Buy Wiretrust Xtec December 31, 2009 Authorization Payment Gateway October 31, 2009 August 31, 2010 Payment Gateway Payment Gateway Jefferson Wells Securus Global ControlCase ASSESSOR Trustwave Trustwave Payment Software Company (PSC) Trustwave AP CEMEA LAC NA

December 31, 2009

Other

Continuum Worldwide Corporation Verizon Business Trustwave Trustwave Trustwave Trustwave SISA Information Security Pvt Ltd Coalfire Systems. Inc. Information Exchange

September 30, 2009 MOTO Payment Processing April 30, 2010 April 30, 2010 October 31, 2009 April 30, 2010 MOTO Payment Processing MOTO Payment Processing Other MOTO Payment Processing

September 30, 2009 Other July 31, 2010 April 30, 2010 Payment Gateway Authorization Clearing & Settlement Payment Gateway

Yahoo! Stores Yapstone Inc.

November 30, 2009 April 30, 2010

IPSP (E-commerce) MOTO Payment Processing Payment Gateway Payment Gateway IPSP (E-commerce) Loyalty Programs MOTO Payment Processing

Accuvant SecurityMetrics

Yes Group Limited Yes-Pay International Ltd. Young America

February 28, 2010 July 31, 2010 January 31, 2010

Evolution Security System Fortconsult Trustwave

Zagrebaka banka d.d.

November 30, 2009

Authorization

Internet Security Systems

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 61 of 62

List of Compliant Service Providers - All

SERVICE PROVIDER Zagrebaka banka d.d. ZEUS Corporation VALIDATION DATE November 30, 2009 October 31, 2010 SERVICES COVERED BY REVIEW (1) Clearing & Settlement Authorization Clearing & Settlement IPSP (E-commerce) Payment Gateway ZirMed, Inc. April 30, 2010 Other Payment Gateway Zuora, Inc. June 30, 2010 Authorization Payment Gateway Digital Resources Group (DRG) 403 Labs ASSESSOR Internet Security Systems NTT Data Security Corporation AP CEMEA LAC NA

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. * Current PCI DSS status is under review. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2010 Visa Inc. 62 of 62