Sie sind auf Seite 1von 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities

As Of 4/9/2012
The companies listed below were validated as being PCI DSS compliant by a QSA as of the "VALIDATION DATE". Service providers are required to revalidate their compliance to Visa on an annual basis, with the next annual Report on Compliance (ROC) due to Visa one year from the "VALIDATION DATE". ROCs that are from 160 days late are noted in yellow and ROCs that are from 60-90 days late are noted in red. Entities with ROCs over 90 days past due are removed from this list. Entities are listed in each Visa region where they have been registered by at least one client, including: AP - Asia Pacific, CEMEA - Central Europe / Middle East / Africa, LAC - Latin America / Caribbean, NA - North America - Canada / United States. Visa client's are responsible for and are required to use compliant service providers and to follow up with service providers directly if there are any questions about their compliance status.

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER 1 LINK (GUARANTEE) LIMITED VALIDATION DATE November 30, 2011 SERVICES COVERED BY REVIEW (1) Clearing & Settlement Process Magnetic-Stripe Transactions Switching 1ShoppingCart.com June 30, 2011 Other Payment Gateway Data Preparation Records Management 1stPayGateway, LLC May 31, 2011 Authorization Payment Gateway 2C Processor USA, LLC January 31, 2012 Authorization Clearing & Settlement Managed Services MOTO Payment Processing Payment Gateway Payment Gateway/Switch Payment Processing Internet Payment Processing - POS 2checkout.com February 28, 2012 Clearing & Settlement Payment Processing Internet 3dCart March 31, 2012 Hosting Provider Payment Gateway 3Delta Systems September 30, 2011 Authorization MOTO Payment Processing (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 1 of 80 Fortrex Technologies SecurityMetrics Arsenal Security Group Information Exchange Internet Security Systems (a wholly owned IBM company) Security Metrics ASSESSOR Trustwave AP CEMEA LAC NA

1st Americard

March 31, 2012

nGuard Inc.

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER 3Delta Systems VALIDATION DATE September 30, 2011 SERVICES COVERED BY REVIEW (1) Payment Gateway Process Magnetic-Stripe Transactions Switching 800 Call KC May 31, 2011 Payment Processing Internet Payment Processing MOTO Payment Gateway Authorization Clearing & Settlement Hosting Provider IPSP (E-commerce) MOTO Payment Processing Other Payment Gateway Process Magnetic-Stripe Transactions ABC Virtual Communications, Inc. Acadaca LLC Accel Networks Accelerated Payment Technologies Inc February 28, 2011 Hosting Provider - Web Payment Gateway/Switch April 30, 2011 January 31, 2012 July 31, 2011 Hosting Provider Other Authorization IPSP (E-commerce) Loyalty Programs MOTO Payment Processing Other Payment Gateway Process Magnetic-Stripe Transactions ACCENT Marketing Accertify May 31, 2011 February 28, 2012 MOTO Payment Processing Fraud and Chargeback Services Payment Gateway/Switch Clearing & Settlement Payment Gateway/Switch AccountNow Acculynk ACH Direct June 30, 2011 February 28, 2011 January 31, 2012 Payment Gateway Payment Gateway Clearing & Settlement Payment Gateway/Switch (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 2 of 80 Trustwave Trustwave Trustwave Crowe Horwath Halock Security Labs Fortrex Technologies Trustwave Trustwave Compass IT Compliance, LLC Accudata Systems ASSESSOR Fortrex Technologies AP CEMEA LAC NA

A3 IT Solutions ABC FINANCIAL SERVICES, INC

November 30, 2011 May 31, 2011

Trustwave Trustwave

Accesso, LLC

February 28, 2011

Trustwave

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER ACH Direct Achieve Financial Services, LLC VALIDATION DATE January 31, 2012 November 30, 2011 SERVICES COVERED BY REVIEW (1) Payment Processing Internet Clearing & Settlement Issuer Processing Loyalty Programs ACI Worldwide April 30, 2011 Payment Processing - ATM Payment Processing - POS ACI Worldwide - Winn-Dixie Environment ACS Transportation Solutions Group BATA Fastrak and MdTA E-Zpass September 30, 2011 Payment Gateway/Switch Payment Processing - POS August 31, 2011 Hosting Provider SecurityMetrics Solutionary Solutionary, Inc ASSESSOR Trustwave Information Exchange Inc. AP CEMEA LAC NA

MOTO Payment Processing Payment Gateway Active Network October 31, 2011 Back Office Services Payment Processing Internet Payment Processing - POS Adaptive Payments, Inc. Adeptra Advam Pty Ltd November 30, 2011 December 31, 2011 December 31, 2011 Payment Gateway Other Authorization IPSP (E-commerce) Payment Gateway Process Magnetic-Stripe Transactions Advantex Dining Corporation March 31, 2012 Adyen B.V. May 31, 2011 Loyalty Programs Clearing & Settlement IPSP (E-commerce) Other Payment Gateway Aegis Communications December 31, 2011 Other Payment Gateway AEGIS USA, INC. December 31, 2011 Other Payment Processing MOTO Aetna, Inc. May 31, 2011 Clearing & Settlement Other Affiliated Acceptance Corporation October 31, 2011 MOTO Payment Processing Payment Gateway (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 3 of 80 Trustwave Trustwave AT&T Consulting Solutions, Inc. K3DES Datassurant, Inc. Trustwave 403 Labs, LLC Protiviti CQR Consulting Pty Ltd Protiviti, Inc.

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER AFFINA LLC - Consumer's Union Affinion Benefits Group VALIDATION DATE June 30, 2011 December 31, 2011 SERVICES COVERED BY REVIEW (1) Other Authorization MOTO Payment Processing Payment Gateway Affinion Loyalty Group December 31, 2011 Authorization MOTO Payment Processing Payment Gateway Affinity Solutions Agilysys, Inc. November 30, 2011 July 31, 2011 Loyalty Programs Payment Gateway Process Magnetic-Stripe Transactions Airlines Reporting Corporation Akamai Alacriti Alaska Option Services Corporation February 28, 2012 September 30, 2011 December 31, 2011 April 30, 2011 Clearing & Settlement Other Payment Gateway/Switch Authorization Clearing & Settlement Issuing Processing Process Magnetic-Stripe Transactions Switching Aliaswire September 30, 2011 Payment Gateway/Switch Payment Processing MOTO 3-D Secure Access Control Server IPSP (E-commerce) Other Payment Gateway Authorization Clearing & Settlement Issuing Processing Other AllianceOne Inc. May 31, 2011 MOTO Payment Processing Other Allianz Global Assistance Allied Wallet February 28, 2012 March 31, 2012 Payment Gateway/Switch Other Payment Gateway/Switch (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 4 of 80 Trustwave Trustwave AT&T Consulting Solutions, Inc. IGX Global Protiviti Inc. Neohapsis Inc. IGX Global K3DES Coalfire Trustwave Trustwave Coalfire Trustwave ASSESSOR AP CEMEA LAC NA

Alignet, S.A.C

December 31, 2011

Xtrategies

Alliance Data - Retail Services

December 31, 2011

Verizon Business Network Services Inc.

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Allied Wallet Alpha Card Services, Inc. VALIDATION DATE March 31, 2012 November 30, 2011 SERVICES COVERED BY REVIEW (1) Payment Processing Internet Clearing & Settlement Merchant Services Alta Resources April 30, 2011 IPSP (E-commerce) Loyalty Programs Payment Gateway Amazon.com Amdocs Champaign, Inc. October 31, 2011 August 31, 2011 Merchant Services Billing Management Hosting Provider - Web Hosting Provider- Hardware Managed Services Network Provider/Transmitter American Bancard June 30, 2011 Merchant Services Other American Data Technology Americaneagle.com Angel.com AOC Solutions, Inc AOL, Inc. April 30, 2011 November 30, 2011 October 31, 2011 October 31, 2011 September 30, 2011 Hosting Provider Hosting Provider Other Other Payment Processing Internet Payment Processing MOTO Other Other Payment Gateway Switching Arab Financial Services Company July 31, 2011 Account Management Back Office Services Clearing & Settlement Fraud and Chargeback Services Issuer Processing Loyalty Programs Payment Gateway/Switch Payment Processing Payment Processing - ATM (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 5 of 80 SISA Information Security Pvt. Ltd. Specialized Security Services, Inc Fortrex Technologies Coalfire Systems, Inc. Fortrex Technologies IOActive Enterprise Risk Management, Inc. IOActive, Inc. FishNet Security IBM Internet Security Systems ASSESSOR Trustwave INFORMATION EXCHANGE, INC. AP CEMEA LAC NA

Aon Hewitt Aperia Solutions Apriva, LLC

August 31, 2011 July 31, 2011 July 31, 2011

Trustwave Coalfire Trustwave

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Arab Financial Services Company Arcot Systems Inc. Area 101, Inc Argus Payments Inc Aria Systems Ariba Inc Arise Virtual Solutions Artez Interactive Inc Arvato Finance Services Limited VALIDATION DATE July 31, 2011 December 31, 2011 July 31, 2011 December 31, 2011 December 31, 2011 May 31, 2011 May 31, 2011 December 31, 2011 July 31, 2011 SERVICES COVERED BY REVIEW (1) Payment Processing Internet 3-D Secure Access Control Server IPSP (E-commerce) Payment Gateway/Switch Payment Gateway Other Other Other Clearing & Settlement IPSP (E-commerce) Payment Gateway ASAP TRANSACTION PROCESSING CORPORATION LIMITED August 31, 2011 Loyalty Programs Evolution Ltd ASSESSOR SISA Information Security Pvt. Ltd. Payment Software Company (PSC) Coalfire Systems. Inc. 403 Labs TrustWave Payment Software Company (PSC) AT&T Consulting Solutions IBM Security Services Acertigo AG - An EXCELSIS Company AP CEMEA LAC NA

Merchant Services Payment Gateway/Switch Payment Processing Internet Payment Processing MOTO Payment Processing - POS ASF International August 31, 2011 IPSP (E-commerce) MOTO Payment Processing Payment Gateway ASIAPAY (HONG KONG) LTD November 30, 2011 Payment Gateway/Switch Payment Processing Internet Asociacion Cibao de Ahorros y Prestamos AT&T Managed Hosting and Application Services AT&T Managed Services AT&T Encryption Services AT&T Managed Services AT&T Enhanced VPN Services, AT&T VPN Services, AT&T Private Network Transport Services September 30, 2011 Authorization Issuing Processing October 31, 2011 October 31, 2011 July 31, 2011 Hosting Provider Managed Services Managed Services Trustwave Trustwave Trustwave Trustwave Trustwave Trustwave

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 6 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER AT&T Managed Services AT&T Network Based IP VPN Remote Access Service / AT&T VPN Tunneling Service VALIDATION DATE May 31, 2011 SERVICES COVERED BY REVIEW (1) Managed Services ASSESSOR Trustwave AP CEMEA LAC NA

Network Provider/Transmitter AT&T Managed Services Endpoint Security AT&T Managed Services Intrusion Detection Services/Intrusion Prevention Services AT&T Managed Services IP Telephony and LAN Services AT&T Managed Services Managed Router Services AT&T Managed Services Network Based Firewall AT&T Managed Services Premise Based Firewall July 31, 2011 July 31, 2011 Managed Services Managed Services Trustwave Trustwave

July 31, 2011

Managed Services

Trustwave

July 31, 2011 July 31, 2011 July 31, 2011

Managed Services Managed Services Managed Services Managed Services Hosting Provider Other

Trustwave Trustwave Trustwave Trustwave Trustwave

AT&T Managed Services July 31, 2011 Transaction Routing Service AT&T Synaptic Compute as a Service (CaaS) AT&T Synaptic Hosting AT&T Synaptic Platform as a Service (PaaS) AT&T Synaptic Storage as a Service (SaaS) AT&T VoiceTone & Interactive Voice Services Advanced Plus AT&T WiFi Services Athenahealth, Inc. January 31, 2012

October 31, 2011 January 31, 2012

Hosting Provider Hosting Provider Other

Trustwave Trustwave

January 31, 2012

Hosting Provider Other

Trustwave

July 31, 2011

Data Preparation

Trustwave

Managed Services January 31, 2012 October 31, 2011 Payment Processing Internet MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 7 of 80 TrustWave Trustwave

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Atos Services (M) Sdn Bhd Atos Worldline India Private Limited VALIDATION DATE April 30, 2011 December 31, 2011 SERVICES COVERED BY REVIEW (1) Managed Services Back Office Services Billing Management Clearing & Settlement Data Preparation Fraud and Chargeback Services Issuer Processing Loyalty Programs Managed Services Merchant Services Payment Gateway/Switch Payment Processing - ATM Payment Processing Internet Payment Processing MOTO Payment Processing - POS AudienceView Ticketing Corporation Auric Systems International Aurora Financial Systems, Inc. August 31, 2011 December 31, 2011 April 30, 2011 Other Other Payment Gateway Other Records Management Autonomy LiveVault November 30, 2011 Other Records Management Autoscribe Corporation B3 Corp June 30, 2011 December 31, 2011 Payment Gateway Hosting Provider Payment Gateway BANCO DE GUAYAQUIL S.A. December 31, 2011 Authorization Back Office Services Clearing & Settlement Debit Card Processing Fraud and Risk Analysis Issuer Other Payment Processing - ATM Switching BancTec, Inc. January 31, 2012 MOTO Payment Processing Trustwave IQ Information Quality SAS Fortrex Technologies Digital Resources Group (DRG) Neohapsis NCI (Net Cyclops Inc.) Payment Software Company (PSC) 403 Labs, LLC Neohapsis ASSESSOR TUV Rheinland Secure iT GmbH ControlCase AP CEMEA LAC NA

Autonomy Connected Back- November 30, 2011 Up

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 8 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER BANK AL JAZIRA Acquiring VALIDATION DATE January 31, 2012 SERVICES COVERED BY REVIEW (1) Clearing & Settlement Payment Gateway/Switch Payment Processing - ATM Payment Processing - POS BankCard Services, Inc May 31, 2011 Account Management Back Office Services Fraud and Chargeback Services Merchant Services Bankserv December 31, 2011 Payment Gateway/Switch Payment Processing Internet Payment Processing - POS Beanstream Internet Commerce Inc. September 30, 2011 Payment Gateway/Switch Payment Processing Internet Payment Processing MOTO Best Practice Systems, Inc. Bill 1st, LLC August 31, 2011 July 31, 2011 Payment Processing Internet Billing Management Fraud and Chargeback Services Payment Gateway/Switch Payment Processing Internet Payment Gateway Payment Gateway IPSP (E-commerce) Payment Gateway Process Magnetic-Stripe Transactions Blackbaud Payment Services Blackboard Blackhawk Network February 28, 2012 March 31, 2012 November 30, 2011 Payment Gateway/Switch Payment Processing Internet Authorization Clearing & Settlement Hosting Provider Issuing Processing Payment Gateway (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 9 of 80 Brightline CPAs & Associates, Inc. Trustwave ANXeBusiness Corp. Security Horizon, Inc. SecurityMetrics SPIGuard Security Solutions Inc Trustwave Trustwave Acertigo ASSESSOR AP CEMEA LAC NA

BillMatrix Billtrust Blackbaud - Internet Services

July 31, 2011 March 31, 2012 September 30, 2011

Payment Software Company (PSC) K3DES Trustwave

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Blackhawk Network BluePay VALIDATION DATE November 30, 2011 May 31, 2011 SERVICES COVERED BY REVIEW (1) Switching Other Payment Gateway Payment Gateway Loyalty Programs Managed Services Bora Payment Systems March 31, 2011 Merchant Services Payment Gateway/Switch Payment Processing Internet Payment Gateway/Switch Payment Processing Internet Brightwell Payments, Inc. February 28, 2012 Clearing & Settlement Issuer Processing Merchant Services Prepaid Services Brinkman Financial January 31, 2011 Authorization IPSP (E-commerce) MOTO Payment Processing BSG Payments (formerly Billing Concepts) BTB Soft, Inc. DBA: B2B Soft Business Data Record Services Cale Access AB (Cale Systems) November 30, 2011 October 31, 2011 Payment Gateway Other Payment Processing - ATM November 30, 2011 November 30, 2011 Other Clearing & Settlement Other Payment Gateway/Switch Caledon Card Services May 31, 2011 Clearing & Settlement Fraud and Chargeback Services Merchant Services Payment Gateway/Switch Payment Processing Internet Payment Processing MOTO Calypso Canada January 31, 2012 Switching Trustwave SPIguard Security Solutions Inc. RSM McGladrey Trustwave Trustwave IGX Global K3DES INFORMATION EXCHANGE, INC Information Exchange ASSESSOR ANXeBusiness Corp. Trustwave AP CEMEA LAC NA

BLUM INVESTMENT GROUP, INC. BMI Fulfillment Services

November 30, 2011 November 30, 2011

Coalfire UHY Advisors

Braintree Payment Solutions February 28, 2012

Trustwave

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 10 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Camis, Inc. VALIDATION DATE October 31, 2011 SERVICES COVERED BY REVIEW (1) Payment Processing Internet Payment Processing MOTO Payment Gateway/Switch Hosting Provider IPSP (E-commerce) MOTO Payment Processing Other Card Alliance Company Limited January 31, 2012 Clearing & Settlement Hosting Provider- Hardware Issuer Processing Card Management Corporation (CMC) Card Tranz, Inc. August 31, 2011 December 31, 2011 Other Hosting Provider IPSP (E-commerce) Cardflex, Inc. December 31, 2011 Authorization MOTO Payment Processing Other Payment Gateway 3-D Secure Access Control Server Payment Gateway/Switch Clearing & Settlement MOTO Payment Processing Payment Gateway/Switch CARDPAY INC June 30, 2011 Other Vectra Information Security Pte Ltd (Branch office of Vectra Corp) K3DES LLC Trustwave Trustwave Evolution Limited ASSESSOR SPIguard Security Solutions Inc. AP CEMEA LAC NA

Cantaloupe Systems, Inc. Capital Card Services

September 30, 2011 April 30, 2011

403 Labs, LLC Trustwave

Cardinal Commerce Corp.

December 31, 2011

Payment Software Company (PSC) Securus Global

CARDLINK SERVICES LIMITED

June 30, 2011

Payment Gateway/Switch Payment Processing Internet Payment Processing MOTO Cardtronics EFT May 31, 2011 Other Process Magnetic-Stripe Transactions Switching Cardworks Processing August 31, 2011 Authorization IPSP (E-commerce) Payment Gateway Cardworks Servicing LLC February 28, 2012 Back Office Services Trustwave Trustwave K3DES

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 11 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Carlson Marketing Worldwide - US CartManager VALIDATION DATE June 30, 2011 February 28, 2011 SERVICES COVERED BY REVIEW (1) Loyalty Programs IPSP (E-commerce) Payment Gateway Process Magnetic-Stripe Transactions CashEdge CashLINQ Group, LLC May 31, 2011 August 31, 2011 Authorization MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Other Other Payment Gateway/Switch Hosting Provider - Web Hosting Provider- Hardware Payment Processing Internet CCBill CDMS MERCHANT SERVICES, INC. CDS Global Inc.- PayDQ Gateway January 31, 2012 December 31, 2011 IPSP (E-commerce) Merchant Services Other November 30, 2011 Merchant Services Payment Gateway/Switch Payment Processing - ATM CDS Global, Inc. November 30, 2011 Issuer Processing Managed Services Other Payment Processing MOTO CDW Managed Services Cedar Document Technologies CenPos Centershift October 31, 2011 January 31, 2012 January 31, 2012 October 31, 2011 Hosting Provider Other Payment Gateway/Switch Back Office Services Data Preparation Hosting Provider - Web Hosting Provider- Hardware Managed Services Trustwave igxglobal, Inc. Enterprise Risk Management Grant Thornton, LLP Solutionary, Inc Solutionary Coalfire Systems. Inc. Enterprise Risk Management AppSec Consulting, Inc. SecurityMetrics ASSESSOR Trustwave Trustwave AP CEMEA LAC NA

CBC Companies, Inc CBCInnovis, Inc. CBORD Group, Inc. Cboss

April 30, 2011 April 30, 2011 February 28, 2012 November 30, 2011

Verizon Business, Inc Verizon Trustwave KirkpatrickPrice Inc.

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 12 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Centershift VALIDATION DATE October 31, 2011 SERVICES COVERED BY REVIEW (1) Network Provider/Transmitter Prepaid Services Other Other Hosting Provider- Hardware MOTO Payment Processing Clearing & Settlement Merchant Services Payment Gateway/Switch Payment Gateway Other Payment Processing Internet Chase Loyalty Solutions December 31, 2011 Authorization Clearing & Settlement Loyalty Programs Payment Gateway Switching Chase Paymentech Solutions, LLC. January 31, 2012 Clearing & Settlement Loyalty Programs Merchant Services Payment Gateway/Switch Payment Processing Internet Payment Processing - POS Cintas Document Management Shredding Cintas Document Management Storage CJSC PC (CARDSTANDARD) June 30, 2012 June 30, 2012 April 30, 2012 Other Other Clearing & Settlement Data Preparation Issuing Processing Payment Processing - ATM Payment Processing Internet Payment Processing MOTO (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 13 of 80 SecureState SecureState FortConsult A/S Trustwave Trustwave ASSESSOR Grant Thornton, LLP AP CEMEA LAC NA

Central Payment Corporation Central States Indemnity

July 31, 2011 October 31, 2011

Trustwave Continuum Worldwide Corporation Ubitrak inc. SecurityMetrics Information Exchange

Centre de services partags February 28, 2012 du Qubec Centrix Bank - LockBox Service Century Bankcard Services May 31, 2011 May 31, 2012

Certain Software CHARGE Anywhere Chargeback Guardian

October 31, 2011 April 30, 2011 November 30, 2011

Coalfire Systems Trustwave SecurityMetrics

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER CJSC PC (CARDSTANDARD) ClearChoice Merchant Service, LLC Clearent VALIDATION DATE April 30, 2012 January 31, 2012 SERVICES COVERED BY REVIEW (1) Payment Processing - POS Clearing & Settlement Merchant Services April 30, 2011 Authorization Clearing & Settlement Payment Gateway Switching ClearTran March 31, 2012 Payment Processing Internet Payment Processing MOTO Other IPSP (E-commerce) MOTO Payment Processing Payment Gateway Other Payment Gateway/Switch CollegeNET March 31, 2011 IPSP (E-commerce) Payment Gateway Columbus Data Services January 31, 2012 Back Office Services Clearing & Settlement Data Preparation Issuing Processing Network Provider/Transmitter Payment Processing - ATM Prepaid Services CommerceV3 November 30, 2011 Hosting Provider Payment Gateway/Switch Compania Uruguaya de Medios de Procesamiento January 31, 2012 Authorization Clearing & Settlement MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching Compass Plus November 30, 2011 Clearing & Settlement Issuer Processing Payment Gateway/Switch Trustwave Xtrategies Secure Technology Group LLC FishNet Security Coalfire SecurityMetrics Coalfire ASSESSOR FortConsult A/S Information Exchange AP CEMEA LAC NA

Client Services Cobre Bem

September 30, 2011 September 30, 2011

Insight Networking CPqD

Collections Marketing Center, Inc.

December 31, 2011

403 Labs

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 14 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Compass Plus VALIDATION DATE November 30, 2011 SERVICES COVERED BY REVIEW (1) Payment Processing - ATM Payment Processing - POS Complete Merchant Solutions Computer Services, Inc. February 28, 2012 September 30, 2011 Other Authorization Clearing & Settlement Issuing Processing Payment Gateway Process Magnetic-Stripe Transactions Switching Other Authorization Clearing & Settlement Issuing Processing CONEXIS October 31, 2011 Back Office Services Issuing Processing Connexions Loyalty Travel Solutions Consumer Benefit Services September 30, 2011 Loyalty Programs MOTO Payment Processing March 31, 2011 Loyalty Programs Clearing & Settlement Payment Gateway/Switch Payment Processing Internet Convergys (Home Agent) Convergys CCMS Convergys Encore Convergys Interaction Recording Platform Convergys Intervoice Convergys SuddenLink ICOMS July 31, 2011 April 30, 2012 March 31, 2012 August 31, 2011 July 31, 2011 August 31, 2011 Other Other Payment Gateway/Switch Merchant Services Other IPSP (E-commerce) MOTO Payment Processing Payment Gateway Convio, Inc. CO-OP Financial Services January 31, 2012 April 30, 2011 Payment Gateway/Switch Clearing & Settlement Fraud and Chargeback Services (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 15 of 80 Trustwave Tevora Business Solutions Inc Fortrex Technologies Fortrex Technologies Fortrex Technologies Accuvant, Inc. Fortrex Technologies Fortrex Technologies Trustwave 403 Labs Trustwave FishNet Security Security Metrics, Inc. Crowe Horwath LLP ASSESSOR Trustwave AP CEMEA LAC NA

Concur - Redmond CONDUCTOR TECNOLOGIA S.A.

June 30, 2011 January 31, 2011

Verizon Business CIPHER

Convergence Technologies, February 28, 2012 Inc

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER CO-OP Financial Services VALIDATION DATE April 30, 2011 SERVICES COVERED BY REVIEW (1) Loyalty Programs Other Payment Gateway/Switch Corduro, Inc. March 31, 2011 Clearing & Settlement Hosting Provider Loyalty Programs MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching CORE Business Technologies July 31, 2011 Authorization Hosting Provider Payment Gateway Process Magnetic-Stripe Transactions CoSentry CRE Secure Credibanco Visa Colombia April 30, 2011 July 31, 2011 April 30, 2011 Managed Services Payment Gateway Authorization Clearing & Settlement IPSP (E-commerce) Issuing Processing MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching Credimatic S.A. January 31, 2012 Authorization Clearing & Settlement Issuing Processing MOTO Payment Processing Other Switching Clearing & Settlement Authorization Clearing & Settlement MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Credomatic de Costa Rica January 31, 2012 Clearing & Settlement Xtrategies, LLC Trustwave Continuum Worldwide Coalfire Systems, Inc. Xtrategies Trustwave Trustwave ASSESSOR Tevora Business Solutions Inc AP CEMEA LAC NA

Credimax B.S.C. CreditCall Ltd.

November 30, 2011 April 30, 2011

SISA Information Security Pvt. Ltd. Foregenix

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 16 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Credomatic de Costa Rica VALIDATION DATE January 31, 2012 SERVICES COVERED BY REVIEW (1) Fraud and Chargeback Services Other Payment Processing - ATM Payment Processing Internet Payment Processing MOTO Payment Processing - POS Authorization Clearing & Settlement IPSP (E-commerce) MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching Authorization Clearing & Settlement IPSP (E-commerce) MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching Credomatic de Honduras May 31, 2011 Authorization Clearing & Settlement IPSP (E-commerce) MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching Credomatic de Nicaragua September 30, 2011 Authorization Clearing & Settlement IPSP (E-commerce) MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching Authorization Xtrategies Clearing & Settlement IPSP (E-commerce) MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 17 of 80 Credomatic de Panama May 31, 2011 Xstrategies, LLC Xtrategies, LLC ASSESSOR Xtrategies, LLC AP CEMEA LAC NA

Credomatic de El Salvador

September 30, 2011

Xtrategies, LLC

Credomatic de Guatemala

May 31, 2011

Xtrategies, LLC

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Credomatic de Panama CREDOMATIC OF FLORIDA, INC. VALIDATION DATE May 31, 2011 September 30, 2011 SERVICES COVERED BY REVIEW (1) Switching Authorization Clearing & Settlement IPSP (E-commerce) Issuing Processing MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching Crescent Processing October 31, 2011 Other Payment Gateway Croem, Inc. October 31, 2011 IPSP (E-commerce) MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions CSG Content Direct March 31, 2011 Back Office Services Payment Gateway/Switch Payment Processing Internet Billing Management Payment Processing Internet Records Management CSG Systems, Inc. Interactive Messaging April 30, 2011 Back Office Services Payment Gateway/Switch Payment Processing Internet CSG Systems, Inc. Statement and Account Billing Services April 30, 2011 Back Office Services Solutionary Solutionary Solutionary Trustwave SecurityMetrics ASSESSOR Xtrategies Xtrategies, LLC AP CEMEA LAC NA

CSG Systems Inc. - Data Prose

May 31, 2011

Solutionary

Billing Management Payment Gateway/Switch Payment Processing Internet Records Management CSI Software December 31, 2011 Hosting Provider Payment Gateway Account Management Back Office Services Billing Management Clearing & Settlement (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 18 of 80 Trustwave

CSU CardSystem S.A.

September 30, 2011

Trustwave

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER CSU CardSystem S.A. VALIDATION DATE September 30, 2011 SERVICES COVERED BY REVIEW (1) Fraud and Chargeback Services Issuer Processing Other Payment Gateway/Switch Payment Processing Internet Payment Processing MOTO Payment Processing - POS Clearing & Settlement IPSP (E-commerce) MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching Cvent, Inc. Cyber City Teleservices Cybera CyberSource (including Authorize.Net) August 31, 2011 December 31, 2011 April 30, 2011 August 31, 2011 Payment Processing Internet Other Switching Billing Management Clearing & Settlement Fraud and Chargeback Services Hosting Provider - Web Hosting Provider- Hardware Managed Services Merchant Services Network Provider/Transmitter Payment Gateway/Switch Payment Processing Internet Payment Processing - POS Cynergy Data August 31, 2011 Payment Gateway/Switch Payment Processing Internet Payment Processing MOTO Payment Processing - POS Data Oceans, LLC Data Paradigm Data Stream May 31, 2011 July 31, 2011 February 28, 2011 Payment Processing Internet Other Clearing & Settlement Compliance Point Crowe Horwath LLP Information Exchange, Inc. Coalfire Systems. Inc. Stratum Security CrimsonSecurity FishNet Security Trustwave ASSESSOR Trustwave AP CEMEA LAC NA

CT-Paiement Inc.

November 30, 2011

Trustwave

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 19 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Data Stream VALIDATION DATE February 28, 2011 SERVICES COVERED BY REVIEW (1) Merchant Services Payment Gateway/Switch Payment Processing - ATM DataCash Limited August 31, 2011 Fraud and Chargeback Services Payment Gateway/Switch Payment Processing Internet Payment Gateway Authorization Hosting Provider Payment Gateway DataPipe DataTrax Technologies September 30, 2011 January 31, 2012 Hosting Provider Payment Gateway/Switch Payment Processing - POS Other Back Office Services Payment Processing Internet Debit Plus Technologies, LLC Debit Technologies, Inc. February 28, 2012 May 31, 2011 Other Clearing & Settlement Merchant Services Payment Gateway Hosting Provider IPSP (E-commerce) Payment Gateway Denarii Systems January 31, 2011 Authorization Clearing & Settlement IPSP (E-commerce) Issuing Processing Loyalty Programs MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching DHD Media June 30, 2011 Clearing & Settlement Payment Processing Internet Trustwave Fortrex Technologies, Inc. Specialized Security Services Information Exchange Trustwave SecurityMetrics, Inc. SecuriCentrix ASSESSOR Information Exchange, Inc. AP CEMEA LAC NA

Dataline Systems, Inc. Datapak Services Corporation

December 31, 2011 December 31, 2011

Trustwave Trustwave

Davis & Henderson G.P. Inc September 30, 2011 DAXKO April 30, 2011

IBM Internet Security Systems BrightLine

Delphis Software, Inc. Demandware

May 31, 2011 June 30, 2011

Digital Resources Group (DRG) SecurityMetrics

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 20 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Diamond Marketing Solutions Digital Payment Technologies Digital River VALIDATION DATE September 30, 2011 May 31, 2011 July 31, 2011 SERVICES COVERED BY REVIEW (1) Other Payment Gateway/Switch IPSP (E-commerce) Payment Gateway Network Provider/Transmitter Payment Gateway/Switch Payment Processing - ATM Payment Processing - POS Prepaid Services Payment Gateway/Switch Payment Processing Internet Direct Mail Processors, Inc. Donor.com January 31, 2012 June 30, 2011 Payment Gateway Hosting Provider - Web Other Payment Processing Internet Payment Processing MOTO Authorization Hosting Provider DST Output, LLC. - Payment August 31, 2011 Duncan Solutions DBA: Duncan Parking Technologies Duncan Solutions DBA: Professional Account Management June 30, 2011 Payment Gateway Payment Gateway/Switch FishNet Security, Inc. SecurityMetrics Fortrex Technologies Coalfire ASSESSOR Halock Security Labs Payment Software Company (PSC) NetSPI AP CEMEA LAC NA

Direct Cash Management

December 31, 2011

Accuvant, Inc.

Direct Insite

May 31, 2011

Enterprise Risk Management, Inc.

drugstore.com, inc.

June 30, 2011

Coalfire

October 31, 2011

Account Management

SecurityMetrics, Inc.

Billing Management Payment Gateway/Switch Records Management EarthLink Business EC Suite July 31, 2011 August 31, 2011 Network Provider/Transmitter IPSP (E-commerce) Other ECARD SOLUTIONS LTD May 31, 2011 Authorization Clearing & Settlement Issuing Processing MOTO Payment Processing Payment Gateway (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 21 of 80 Ambersail Ltd Neohapsis Inc. Coalfire

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER ECARD SOLUTIONS LTD EchoSat Communications VALIDATION DATE May 31, 2011 September 30, 2011 SERVICES COVERED BY REVIEW (1) Switching Network Provider/Transmitter Payment Gateway Hosting Provider Issuing Processing Edhance, Inc. EFT SOURCE, INC. eGate Payment Technologies Ltd July 31, 2011 July 31, 2011 August 31, 2011 Loyalty Programs Other Back Office Services Payment Gateway/Switch Payment Processing Internet Eigen Development, Ltd October 31, 2011 Payment Gateway/Switch Payment Processing Internet Payment Processing MOTO Payment Processing - POS Elan Financial Services April 30, 2011 Authorization Clearing & Settlement Hosting Provider IPSP (E-commerce) Issuing Processing Loyalty Programs Other Payment Gateway Process Magnetic-Stripe Transactions Switching Elavon (formerly NOVA) May 31, 2011 Authorization Clearing & Settlement Other Payment Gateway Process Magnetic-Stripe Transactions Elavon Canada (formerly Internet Secure) ELAVON DO BRASIL SOLUCOES DE PAGAMENTO S.A. July 31, 2011 Other Payment Gateway January 31, 2012 Payment Processing - POS Verizon Business Network Services Inc. Trustwave TrustWave TrustWave Payment Software Company (PSC) Payment Software Company (PSC) Lattimore Black Morgan and Cain Sysnet ASSESSOR Ambersail Ltd ComplyGuard Networks Inc. AP CEMEA LAC NA

eCommLink

March 31, 2011

Payment Software Company (PSC)

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 22 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Elavon Fusebox VALIDATION DATE November 30, 2011 SERVICES COVERED BY REVIEW (1) Authorization Clearing & Settlement Payment Gateway Process Magnetic-Stripe Transactions ELECTRA CARD SERVICES PVT. LTD. May 31, 2011 3-D Secure Hosting Provider ControlCase Clearing & Settlement Issuer Processing Loyalty Programs Payment Gateway/Switch Payment Processing - ATM Payment Processing Internet Electronic Merchant Systems Electronic Payment Exchange (EPX) April 30, 2011 April 30, 2011 Other Authorization Clearing & Settlement MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching Electronic Payments Inc July 31, 2011 Clearing & Settlement Loyalty Programs Merchant Services Electronic Processing Services Electronic Transaction Systems Corporation (ETS Corp.) January 31, 2011 Clearing & Settlement Other September 30, 2011 Billing Management Arsenal Security Group Information Exchange Information Exchange Trustwave Payment Software Company (PSC) ASSESSOR Verizon Business AP CEMEA LAC NA

Clearing & Settlement Hosting Provider - Web Merchant Services Payment Gateway/Switch Payment Processing Internet Payment Processing MOTO Payment Processing - POS Tax/Government Payments Element Payment Services November 30, 2011 Clearing & Settlement Merchant Services Payment Gateway/Switch Information Exchange

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 23 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Element Payment Services VALIDATION DATE November 30, 2011 SERVICES COVERED BY REVIEW (1) Payment Processing Internet Payment Processing - POS Back Office Services Payment Processing Internet Payment Processing - POS eMerchantPay December 31, 2011 Merchant Services Other Authorization Clearing & Settlement IPSP (E-commerce) Issuing Processing MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching Emergis Inc. November 30, 2011 Clearing & Settlement IPSP (E-commerce) MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching EMN8, Inc. November 30, 2011 Managed Services Payment Gateway/Switch Enacomm, Inc. eNett International (Netherlands)B.V. March 31, 2012 December 31, 2011 Managed Services Fraud and Chargeback Services Issuer Processing Payment Processing - ATM Payment Processing Internet 3-D Secure Access Control Server Payment Gateway/Switch Payment Processing Internet Payment Processing - POS Prepaid Services Payment Gateway/Switch Payment Processing Internet True Digital Security Securus Global Tevora Business Solutions Trustwave Enterptise Risk Management ASSESSOR Information Exchange AP CEMEA LAC NA

Emdeon

March 31, 2011

Lattimore Black Morgan and Cain

EMERGING MARKETS PAYMENTS - JORDAN

December 31, 2011

Trustwave

enStage Software Pvt Ltd

December 31, 2011

ControlCase India

ePay Healthcare

January 31, 2012

403 Labs, LLC

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 24 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER ePay Healthcare ePayData VALIDATION DATE January 31, 2012 October 31, 2011 SERVICES COVERED BY REVIEW (1) Payment Processing - POS Clearing & Settlement Merchant Services Payment Gateway/Switch Payment Processing Internet Managed Services Payment Processing Internet Epoch.com eProcessing Network November 30, 2011 April 30, 2011 IPSP (E-commerce) Payment Gateway MOTO Payment Processing Loyalty Programs Payment Processing Internet Payment Processing MOTO Other Authorization Loyalty Programs MOTO Payment Processing Issuing Processing Switching EURONET SERVICES INDIA PVT. LTD. Everlink April 30, 2011 Issuer Processing Payment Processing - ATM June 30, 2011 Clearing & Settlement Payment Gateway EVERTEC Latinoamerica / ATH Costa Rica December 31, 2011 Authorization Clearing & Settlement Issuing Processing Loyalty Programs MOTO Payment Processing Process Magnetic-Stripe Transactions Switching EVERTEC, Inc. July 31, 2011 Authorization Xtrategies Xtrategies Trustwave ControlCase Protiviti Trustwave K3DES Brightline CPAs & Associates, Inc. Datassurant, Inc ASSESSOR 403 Labs, LLC Information Exchange AP CEMEA LAC NA

Epicor

March 31, 2012

Trustwave

eProcurement Services LLC September 30, 2011 Epsilon Data Management, LLC Equiant Financial Services, LLC August 31, 2011 November 30, 2011

Equifax

December 31, 2011

Trustwave Trustwave

Escalate Retail Incorporated October 31, 2011

EURONET PAKISTAN (PRIVATE) LIMITED

May 31, 2011

Risk Associates

Clearing & Settlement Hosting Provider IPSP (E-commerce) (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 25 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER EVERTEC, Inc. VALIDATION DATE July 31, 2011 SERVICES COVERED BY REVIEW (1) Issuing Processing MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching EVO Merchant Services October 31, 2011 Authorization Clearing & Settlement Process Magnetic-Stripe Transactions Switching E-xact Transactions Excellence in Motivation May 31, 2011 November 30, 2011 Payment Gateway Clearing & Settlement Loyalty Programs Merchant Services Prepaid Services Experian Experient ExtraMeasures EZFacility.com Ezic, Inc. September 30, 2011 July 31, 2011 May 31, 2011 August 31, 2011 July 31, 2011 Other Payment Gateway Other Payment Gateway Merchant Services Payment Gateway/Switch Payment Processing Internet Payment Processing MOTO Payment Processing - POS EZIDEBIT PTY LTD July 31, 2011 Clearing & Settlement IPSP (E-commerce) MOTO Payment Processing Other Payment Gateway ezRez Software Fair Isaac Corporation Faith Direct October 31, 2011 December 31, 2011 July 31, 2011 Hosting Provider - Web Other Billing Management Payment Processing Internet Payment Processing MOTO Fdration des caisses Desjardins du Qubec August 31, 2011 Authorization Clearing & Settlement (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 26 of 80 Trustwave Payment Software Company (PSC) Trustwave CrimsonSecurity Trustwave Verizon Business Trustwave Coalfire Trustwave Information Exchange Trustwave Information Exchange Trustwave ASSESSOR Xtrategies AP CEMEA LAC NA

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Fdration des caisses Desjardins du Qubec VALIDATION DATE August 31, 2011 SERVICES COVERED BY REVIEW (1) Issuing Processing MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Fidelity Information Services - Acquiring Solutions, ATM Driving & Gateway Services April 30, 2011 Authorization Trustwave ASSESSOR Trustwave AP CEMEA LAC NA

Clearing & Settlement Payment Gateway Process Magnetic-Stripe Transactions Switching Fidelity Information Services - Australasia Pty Ltd November 30, 2011 Authorization Trustwave

Clearing & Settlement Issuing Processing Fidelity Information Services - Chicago Authnet December 31, 2011 Payment Gateway/Switch Payment Processing - ATM Payment Processing - POS Fidelity Information Services - Clear Commerce May 31, 2011 Authorization Clearing & Settlement Payment Gateway Fidelity Information Services - Electronic Payment Presentment Fidelity Information Services - eZCard Fidelity Information Services - Issuing Solutions, Debit Account, Healthcare Payment Card and Prepaid Card Solutions Fidelity Information Services - Lisle Remittance Processing Fidelity Information Services - Loyalty Card Processing July 31, 2011 Authorization Trustwave Trustwave Trustwave

March 31, 2012 April 30, 2011

Other Authorization

Trustwave Trustwave

Issuing Processing January 31, 2012 Other Trustwave

June 30, 2011

Loyalty Programs

Trustwave

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 27 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Fidelity Information Services - Merchant Acquiring and Credit Card Account Processing Services Fidelity Information Services - Norcross Debit Card Processing VALIDATION DATE April 30, 2011 SERVICES COVERED BY REVIEW (1) Other ASSESSOR Trustwave AP CEMEA LAC NA

April 30, 2011

Authorization

Trustwave

Clearing & Settlement Issuing Processing Process Magnetic-Stripe Transactions Fidelity Information Services - Output Solutions San Antonio Fidelity Information Services - Payment Processing and Data Center Little Rock, AR February 28, 2011 Other Trustwave

May 31, 2011

MOTO Payment Processing

Trustwave

Process Magnetic-Stripe Transactions Fidelity Information Services - Prepaid Solutions - South July 31, 2011 Authorization IBM Internet Security Systems (ISS)

Clearing & Settlement Issuing Processing Payment Gateway Switching Fidelity Information Services - Processadora e Servicos S.A. Brazil April 30, 2011 Authorization Trustwave

Clearing & Settlement Issuing Processing Payment Gateway Process Magnetic-Stripe Transactions Fidelity Information Services - PSS India January 31, 2012 Issuing Processing Payment Gateway/Switch Payment Processing - ATM Fidelity Information Services - St. Petersburg Check Fidelity Information Services - St. Petersburg Remittance Processing March 31, 2011 Other Trustwave Trustwave

Payment Gateway September 30, 2011 MOTO Payment Processing Trustwave

Fidelity Information Other Trustwave January 31, 2011 Services - Web Vault (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 28 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Fidelity Information Services Electronic Payments, New Berlin WI Fidelity Information Services India Business Process Outsource (BPO) Program Fidelity Information Services PayDirect Solutions - Government VALIDATION DATE September 30, 2011 SERVICES COVERED BY REVIEW (1) Clearing & Settlement ASSESSOR Trustwave AP CEMEA LAC NA

Payment Gateway/Switch September 30, 2011 Account Management Trustwave

Back Office Services March 31, 2011 Authorization Trustwave

Clearing & Settlement Payment Gateway Process Magnetic-Stripe Transactions Fifth Gear August 31, 2011 IPSP (E-commerce) MOTO Payment Processing Payment Gateway Financial Transmission Network Inc Finexus International Sdn Bhd January 31, 2012 March 31, 2012 Payment Gateway/Switch Trustwave Trustwave

3-D Secure Hosting Provider Trustwave Authorization Clearing & Settlement Hosting Provider Issuing Processing Payment Gateway/Switch Payment Processing MOTO Payment Processing - POS

First American Payment Systems First Atlantic Commerce, Ltd.

June 30, 2011 March 31, 2011

Clearing & Settlement MOTO Payment Processing Payment Gateway Switching

IBM Internet Security Systems Coalfire Systems

First Data Buypass (First Data Concord Payment Services)

September 30, 2011

Authorization

Trustwave

Clearing & Settlement IPSP (E-commerce) Issuing Processing MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 29 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER First Data Buypass (First Data Concord Payment Services) First Data CAC (Processing Center, S.A.) VALIDATION DATE September 30, 2011 SERVICES COVERED BY REVIEW (1) Switching ASSESSOR Trustwave AP CEMEA LAC NA

March 31, 2012

Clearing & Settlement Issuer Processing Payment Gateway/Switch

TrustWave

First Data Card Services International

September 30, 2011

Authorization Clearing & Settlement IPSP (E-commerce) Issuing Processing MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching

Trustwave

First Data Clientline Reporting (First Data Concord Electronic Financial Systems) FIRST DATA CONO SUR, S.A.

September 30, 2011

Clearing & Settlement

Trustwave

March 31, 2012

Account Management Back Office Services Clearing & Settlement Data Preparation Fraud and Chargeback Services Issuer Processing Merchant Services Other Payment Processing - ATM Payment Processing Internet Payment Processing MOTO Payment Processing - POS

Trustwave

First Data EFS Transportation System

September 30, 2011

Authorization Clearing & Settlement IPSP (E-commerce) Issuing Processing MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching

Trustwave

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 30 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER First Data Global Gateway (First Data LinkPoint/First Data YourPay) VALIDATION DATE September 30, 2011 SERVICES COVERED BY REVIEW (1) IPSP (E-commerce) ASSESSOR Trustwave AP CEMEA LAC NA

MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions First Data Government Solutions First Data Integrated Payment Systems First Data International ANZ September 30, 2011 IPSP (E-commerce) Payment Gateway September 30, 2011 September 30, 2011 Other Authorization Clearing & Settlement IPSP (E-commerce) Issuing Processing Loyalty Programs MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching Authorization Clearing & Settlement Issuing Processing Loyalty Programs Process Magnetic-Stripe Transactions First Data International Korea October 31, 2011 Authorization Clearing & Settlement Loyalty Programs Payment Gateway Switching First Data InternationalOmniPay Limited November 30, 2011 Authorization Clearing & Settlement MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching First Data Merchant Services September 30, 2011 Authorization Clearing & Settlement IPSP (E-commerce) (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 31 of 80 Trustwave Trustwave Trustwave Trustwave Trustwave Trustwave

First Data International China

September 30, 2011

Trustwave

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER First Data Merchant Services VALIDATION DATE September 30, 2011 SERVICES COVERED BY REVIEW (1) MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching First Data Money Network September 30, 2011 Authorization Clearing & Settlement IPSP (E-commerce) Issuing Processing MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching First Data PayPoint September 30, 2011 Clearing & Settlement IPSP (E-commerce) Process Magnetic-Stripe Transactions First Data Prepaid Services (First Data Concord Financial Technologies) September 30, 2011 Authorization Trustwave Trustwave Trustwave ASSESSOR Trustwave AP CEMEA LAC NA

Clearing & Settlement IPSP (E-commerce) Issuing Processing Loyalty Programs MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching First Data RemitCo September 30, 2011 Other Remittance Processing First Data Resources September 30, 2011 Authorization Clearing & Settlement IPSP (E-commerce) Issuing Processing MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching Authorization Clearing & Settlement IPSP (E-commerce) MOTO Payment Processing Payment Gateway (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 32 of 80 Trustwave Trustwave

First Data Retail ATM

September 30, 2011

Trustwave

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER First Data Retail ATM VALIDATION DATE September 30, 2011 SERVICES COVERED BY REVIEW (1) Process Magnetic-Stripe Transactions Switching Authorization IPSP (E-commerce) Payment Gateway Process Magnetic-Stripe Transactions Switching First Data STAR (Networks, Processing and Systems Inc.) September 30, 2011 Authorization Trustwave ASSESSOR Trustwave AP CEMEA LAC NA

First Data Secure Transport (Datawire)

September 30, 2011

Trustwave

Clearing & Settlement IPSP (E-commerce) Issuing Processing MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching First Data TeleCheck September 30, 2011 Authorization Clearing & Settlement Issuing Processing Loyalty Programs MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching First Hawaiian Bank June 30, 2011 Authorization Clearing & Settlement Payment Gateway Process Magnetic-Stripe Transactions Authorization Clearing & Settlement Issuing Processing MOTO Payment Processing Process Magnetic-Stripe Transactions Switching First National Technology Solutions March 31, 2012 Hosting Provider- Hardware Managed Services Network Provider/Transmitter (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 33 of 80 Trustwave Trustwave Trustwave

First National Bank of Omaha

January 31, 2012

Trustwave

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER VALIDATION DATE SERVICES COVERED BY REVIEW (1) Other Authorization Issuing Processing MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Fiserv - ACCEL/Exchange April 30, 2011 Issuing Processing Other Other Other Other Payment Software Company (PSC) Payment Software Company (PSC) Payment Software Company (PSC) Payment Software Company (PSC) Payment Software Company (PSC) Payment Software Company (PSC) Payment Software Company (PSC) ASSESSOR SecurityMetrics Trustwave AP CEMEA LAC NA

FirstSource Advantage, LLC September 30, 2011 FirstView, LLC August 31, 2011

Fiserv - Amherst Call Center March 31, 2011 Fiserv - Bank Solutions Lincoln & Sioux Falls Fiserv - Bank Solutions Precision Data Center July 31, 2011 November 30, 2011

Fiserv Checkfree Club December 31, 2011 Solutions (I4 Aphelion, EFT, POS) Fiserv - CheckFreePay Fiserv - Club Solutions (Compete, EFT Web, EFT, POS) Fiserv - CUBEOL Fiserv - CUSA Fiserv - Customer Solutions Fiserv - Enterprise Technology Group Brookfield, WI Data Center Fiserv - Enterprise Technology Group - Johns Creek, GA, Philadelphia, PA and Lewisville, TX Data Centers Fiserv ETG Irving Data Center Fiserv - Galaxy Fiserv - Premier Central June 30, 2011 July 31, 2011

Other Authorization

Payment Gateway May 31, 2011 October 31, 2011 November 30, 2011 October 31, 2011 Issuing Processing Other Other Other Payment Software Company (PSC) Payment Software Company (PSC) Payment Software Company (PSC) Payment Software Company (PSC) Payment Software Company (PSC)

September 30, 2011

Other

November 30, 2011 January 31, 2012 November 30, 2011

Other Issuer Processing Other

Payment Software Company (PSC) Payment Software Company (PSC) Payment Software Company (PSC)

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 34 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Fiserv - Signature Development Lake Mary Fiserv - SourceOne FISERV - XP2 VALIDATION DATE August 31, 2011 July 31, 2011 May 31, 2011 SERVICES COVERED BY REVIEW (1) Other Other Hosting Provider Other Fiserv - Xroads FISERV Advantage February 28, 2012 September 30, 2011 Other Authorization Hosting Provider Switching Fiserv Bank Solutions November 30, 2011 Cleartouch Banking Platform Hosting Provider IPSP (E-commerce) Issuing Processing Fiserv Bank Solutions Southwest March 31, 2011 Authorization Issuing Processing Switching Fiserv Bank Solutions Western Region Data Center Fiserv Bank Solutions Eastern Region: Service Center Fiserv Card Services Fiserv E-Banking Hillsboro Fiserv Electronic Banking, Biller Solutions & Itech Fiserv India PVT LTD Fiserv Lending Solutions Loan Serv Fiserv OnCU Fiserv Output Solutions Electronic Document Delivery November 30, 2011 Issuing Processing Payment Software Company (PSC) Payment Software Company (PSC) Payment Software Company (PSC) Payment Software Company (PSC) Payment Software Company (PSC) ControlCase India Payment Software Company (PSC) Payment Software Company (PSC) Payment Software Company (PSC) Payment Software Company (PSC) Payment Software Company (PSC) Payment Software Company (PSC) Payment Software Company (PSC) ASSESSOR Payment Software Company (PSC) Payment Software Company (PSC) Payment Software Company (PSC) AP CEMEA LAC NA

December 31, 2011

Issuing Processing

March 31, 2012 September 30, 2011 October 31, 2011

Issuing Processing Hosting Provider Other Payment Gateway

August 31, 2011 November 30, 2011 July 31, 2011 February 28, 2012

Other Other Other Records Management

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 35 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Fiserv Solutions, Inc. (Maverick) VALIDATION DATE July 31, 2011 SERVICES COVERED BY REVIEW (1) Clearing & Settlement Issuing Processing Prepaid Services Fiserv, Inc., Virtual Branch Florists Transworld Delivery, Inc. Fore! Reservations Fosdick Fulfillment December 31, 2011 December 31, 2011 Other Payment Gateway/Switch Payment Processing - POS September 30, 2011 July 31, 2011 Payment Gateway/Switch Clearing & Settlement MOTO Payment Processing Other Clearing & Settlement Loyalty Programs Payment Processing Internet Payment Processing - POS Other Payment Gateway FrontStream Payments, Inc. May 31, 2011 Payment Gateway/Switch Payment Processing Internet Payment Processing MOTO Hosting Provider Authorization Clearing & Settlement Other Fujitsu America Inc. Fulfillment Technologies February 28, 2012 June 30, 2011 Managed Services Authorization Clearing & Settlement MOTO Payment Processing Galileo Processing July 31, 2011 Authorization Clearing & Settlement Issuing Processing Process Magnetic-Stripe Transactions Ganart Technologies, Inc. Gateway Ticketing Systems, Inc. February 28, 2011 October 31, 2011 Other Hosting Provider ControlCase Fortrex Technologies Trustwave Verizon Business SecureState ControlCase BrightLine CPAs and Associates, Inc. Trustwave Payment Software Company (PSC) Halock Security Labs ASSESSOR Pointe Solutions AP CEMEA LAC NA

FreedomPay Inc.

July 31, 2011

CompliancePoint

Frontline Processing

June 30, 2011

SecurityMetrics

Fry Inc. FSV Payment Systems

May 31, 2011 May 31, 2011

IBM Internet Security Systems K3DES

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 36 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Gateway Ticketing Systems, Inc. GE Capital Retail Bank Retail Finance GE Capital Retail Bank Sales Finance GetNet VALIDATION DATE October 31, 2011 August 31, 2011 SERVICES COVERED BY REVIEW (1) IPSP (E-commerce) Authorization Issuing Processing December 31, 2011 IPSP (E-commerce) Payment Gateway July 31, 2011 Clearing & Settlement Payment Gateway Switching Authorization Clearing & Settlement Other Payment Gateway Process Magnetic-Stripe Transactions Fraud and Chargeback Services Other Payment Processing - ATM Payment Processing MOTO Payment Processing - POS Authorization Issuing Processing Global Collect Services July 31, 2011 IPSP (E-commerce) Other Global Debt Registry Global Electronic Technology September 30, 2011 January 31, 2012 Other Clearing & Settlement Payment Gateway/Switch Payment Processing Internet Payment Processing MOTO Payment Processing - POS Global Processing Centre June 30, 2011 Clearing & Settlement Issuing Processing Payment Gateway/Switch Payment Processing - ATM Payment Processing Internet Payment Processing - POS Information Exchange Inc. Solutionary, Inc. 403 Labs, LLC Trustwave Cipher Informatica Ltda Trustwave ASSESSOR Fortrex Technologies Trustwave AP CEMEA LAC NA

Global Card Services

May 31, 2011

Trustwave

Global Cash Access

July 31, 2011

Trustwave

Global Cash Card

January 31, 2012

Digital Resources Group (DRG)

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 37 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER GLOBAL REFUND HOLDINGS AB Global Technology Partners LLC Go Daddy Goconcierge.net VALIDATION DATE January 31, 2011 June 30, 2011 December 31, 2011 December 31, 2011 SERVICES COVERED BY REVIEW (1) Payment Gateway Other Other Back Office Services Merchant Services Records Management GoEmerchant May 31, 2011 Authorization Payment Gateway GolfSwitch November 30, 2011 IPSP (E-commerce) MOTO Payment Processing Google Government Payment Services Government Payments LLC January 31, 2012 December 31, 2011 October 31, 2011 Payment Gateway Payment Gateway IPSP (E-commerce) Payment Gateway Govolution, Inc. May 31, 2011 Authorization Payment Gateway GP Network Corporation September 30, 2011 Issuing Processing Payment Gateway/Switch Grant Street Group February 28, 2012 Payment Gateway Payment Gateway/Switch Payment Processing Internet Payment Processing - POS Tax/Government Payments Green Dot GSI Commerce Solutions Guthy Renker Fulfillment Services Halyk Savings Bank of Kazakhstan October 31, 2011 September 30, 2011 October 31, 2011 Issuing Processing IPSP (E-commerce) Authorization Hosting Provider January 31, 2011 ATM Processing Authorization Clearing & Settlement POS Payment Processing Process Magnetic-Stripe Transactions (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 38 of 80 FortConsult Protiviti Inc. Trustwave Trustwave SecurityMetrics, Inc. BSI Japan IBM Internet Security Systems IOActive Trustwave Trustwave Chief Security Officers, LLC IBM Internet Security Systems ASSESSOR Vectra Information Security Pte Ltd Coalfire Protiviti Accretive Solutions Operating Corp. AP CEMEA LAC NA

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Hamer Enterprises Hanover Direct Harland Clarke Harland Financial Solutions VALIDATION DATE December 31, 2011 September 30, 2011 June 30, 2011 August 31, 2011 SERVICES COVERED BY REVIEW (1) Payment Processing Internet Payment Gateway Other Authorization Clearing & Settlement MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching Harris Connect December 31, 2011 Authorization Payment Gateway Harte-Hanks Hearst Communication Inc June 30, 2011 May 31, 2011 Merchant Services Merchant Services Payment Gateway/Switch Heartland Payment Systems April 30, 2011 Authorization Clearing & Settlement MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching IPSP (E-commerce) Payment Gateway/Switch Payment Processing Internet Payment Processing MOTO Hewlett-Packard (TD Bank Environment) June 30, 2011 Clearing & Settlement Hosting Provider- Hardware Managed Services Payment Processing - ATM Payment Processing - POS Higher One Payments Inc. (CASHNet) December 31, 2011 Payment Gateway Payment Processing Internet Payment Processing - POS Hinda, Inc. January 31, 2012 Loyalty Programs Tech Lock Inc 403 Labs, LLC TELUS Security Solutions Coalfire CyberEnsure LLC Solutionary, Inc. Trustwave ASSESSOR SecurityMetrics Fortrex Technologies Verizon Business Crowe Horwath AP CEMEA LAC NA

Heartland Payment Systems mySchoolBucks Helcim Inc.

August 31, 2011 June 30, 2011

Tevora Business Solutions SPIguard Security Solutions Inc.

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 39 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Hitachi Systems Ltd. VALIDATION DATE June 30, 2011 SERVICES COVERED BY REVIEW (1) Authorization Issuing Processing Payment Gateway Host.net December 31, 2011 Hosting Provider Other HostedPCI March 31, 2012 Hosting Provider - Web Payment Gateway/Switch Hosting.com April 30, 2011 Hosting Provider Other HP Commercial Card (EDS) May 31, 2011 Authorization Issuing Processing Clearing & Settlement Hosting Provider IPSP (E-commerce) Payment Gateway HP EDS Merchant Acquirer October 31, 2011 Authorization Clearing & Settlement Payment Gateway Switching Authorization Issuing Processing Payment Gateway Payment Gateway Back Office Services Merchant Services HP Surveyor (EDS) Hughes Network Systems Hyperativa Consultoria e Internet LTDA HyperQuality, Inc. i2c Incorporated August 31, 2011 September 30, 2011 January 31, 2011 April 30, 2011 November 30, 2011 Other Network Provider/Transmitter Loyalty Programs Other Authorization Issuing Processing Payment Gateway Payment Gateway Trustwave IBM Internet Security Systems Cipher ControlCase Trustwave Arsenal Security Group Trustwave Trustwave NCI Secured Intellgence BrightLine CPAs and Associates, Inc. ASSESSOR Internet Secuirty Services AP CEMEA LAC NA

HP Consumer Direct

September 30, 2011

Arsenal Security Group

HP Guidance Authorization

October 31, 2011

Arsenal Security Group

HP Oregon eGovernment (EDS) HP Pay for Convenience (EDS) HP Secure Payment Services - RCU America

June 30, 2011 April 30, 2011 January 31, 2012

Trustwave Trustwave Arsenal Security Group

IATS

December 31, 2011

Internet Security Systems (ISS)

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 40 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER IC Systems iCongo ID Analytics, Inc. iMax Bancard IModules Software, Inc VALIDATION DATE August 31, 2011 January 31, 2011 June 30, 2011 December 31, 2011 August 31, 2011 SERVICES COVERED BY REVIEW (1) Clearing & Settlement Hosting Provider Other Other Hosting Provider - Web Network Provider/Transmitter Payment Processing Internet InComm September 30, 2011 Authorization Issuing Processing Other Industry Retail Group INetU, Inc. November 30, 2011 January 31, 2012 Other Hosting Provider Managed Services Infinity Data October 31, 2011 Clearing & Settlement Merchant Services Payment Processing MOTO Other MOTO Payment Processing Payment Gateway Innotrac Corporation August 31, 2011 IPSP (E-commerce) MOTO Payment Processing Payment Gateway Innovis Data Solutions, Inc. IN-SOLUTIONS GLOBAL PVT LIMITED April 30, 2011 April 30, 2011 Other Back Office Services Clearing & Settlement Issuer Processing Other InstaMed Communications February 28, 2012 Payment Processing Internet Payment Processing - POS Clearing & Settlement Other InteliSpend Prepaid Solutions September 30, 2011 Issuing Processing Loyalty Programs (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 41 of 80 IBM Security Services Trustwave Verizon Business SISA Information Security Trustwave Information Exchange Trustwave Trustwave IBM Internet Security Systems ASSESSOR RSM McGladrey NetSPI Computer Task Group SecurityMetrics FishNet Security AP CEMEA LAC NA

Infocision InfoGroup Infusion Software

August 31, 2011 March 31, 2011 July 31, 2011

SecureState Consulting Solutionary, Inc. SecurityMetrics

Integrity Payment Systems

March 31, 2011

K3DES

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Intellipay VALIDATION DATE February 28, 2012 SERVICES COVERED BY REVIEW (1) Payment Gateway/Switch Payment Processing Internet InterceptEFT Interface Security Secure Managed Broadband International Bancard Corporation INTERNATIONAL CARD PROCESSING SERVICES LTD September 30, 2011 June 30, 2011 November 30, 2011 Payment Gateway Network Provider/Transmitter Clearing & Settlement Merchant Services June 30, 2011 Issuer Processing ControlCase Coalfire SecurityMetrics Information Exchange Inc. ASSESSOR Trustwave AP CEMEA LAC NA

Payment Processing - ATM Payment Processing - POS INTERNATIONAL CARD August 31, 2011 SYSTEMS AD (CASYS AD) Clearing & Settlement Payment Gateway/Switch Payment Processing - ATM Payment Processing Internet Payment Processing - POS Internet Payment Exchange July 31, 2011 Network Provider/Transmitter Payment Processing Internet Records Management Other Payment Gateway/Switch Payment Processing Internet Payment Processing - POS Intersections February 28, 2011 Authorization IPSP (E-commerce) Hosting Provider MOTO Payment Processing Intrix Technology Inc. March 31, 2012 Payment Gateway/Switch Payment Processing Internet Payment Processing - POS Intuit BackOffice November 30, 2011 Back Office Services Clearing & Settlement Fraud and Chargeback Services (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 42 of 80 Trustwave Trustwave Control Case ANX Acertigo AG

Internet Ticketing Systems, Inc

July 31, 2011

SecurityMetrics

Interspire pty Ltd.

November 30, 2011

Payment Software Company, LLC (PSC)

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Intuit BackOffice Intuit Electronic Clearing House (ECHO, Inc.) VALIDATION DATE November 30, 2011 April 30, 2011 SERVICES COVERED BY REVIEW (1) Other Authorization Clearing & Settlement Payment Gateway Process Magnetic-Stripe Transactions Switching Intuit Merchant Intuit Processor October 31, 2011 October 31, 2011 Other Account Management Clearing & Settlement Merchant Services Other Payment Gateway/Switch Payment Processing Internet Prepaid Services Intuition Systems, Inc. a.k.a Bill2Pay IP Commerce October 31, 2011 October 31, 2011 Payment Gateway Other Payment Gateway IP PAYMENTS PTY LTD August 31, 2011 Payment Gateway/Switch Payment Processing Internet Other Other Payment Gateway/Switch Payment Processing Internet Clearing & Settlement Merchant Services Other MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions ITS Inc./Shazam Inc. April 30, 2012 Authorization Clearing & Settlement Payment Gateway Process Magnetic-Stripe Transactions (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 43 of 80 Trustwave Vectra Corporation SecurityMetrics Coalfire Trustwave Trustwave ASSESSOR Trustwave Trustwave AP CEMEA LAC NA

iPass, Inc. iPayment IPS Group Inc. iQmetrix IRN Payment Systems

March 31, 2012 June 30, 2011 October 31, 2011 August 31, 2011 February 28, 2011 May 31, 2011 May 31, 2011

Digital Resources Group (DRG) Trustwave Tevora Business Solutions Seccuris, Inc. Information Exchange

Iron Mountain iTransact

Neohapsis Inc. Specialized Security Services, Inc.

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER ITS Inc./Shazam Inc. Iveri Payment Technology VALIDATION DATE April 30, 2012 March 31, 2011 SERVICES COVERED BY REVIEW (1) Switching Authorization IPSP (E-commerce) MOTO Payment Processing Switching Payment Gateway ASSESSOR Trustwave Trustwave AP CEMEA LAC NA

J.J. MacKay Canada Limited/MacKay Meters, Inc. (MacKay Meters) JetPay, LLC

November 30, 2011

Trustwave

April 30, 2011

Clearing & Settlement Payment Gateway

Trustwave

jha Payment Processing Solutions

June 30, 2011

Clearing & Settlement Issuing Processing Loyalty Programs Payment Gateway

Coalfire Systems Inc.

JP Morgan Chase Pay Connexion JSC SMARTCARDLINK

April 30, 2011 April 30, 2011

Payment Processing Internet Payment Gateway/Switch Payment Processing Internet Authorization Clearing & Settlement Issuing Processing Other Process Magnetic-Stripe Transactions Switching

Jefferson Wells Sysnet Global Solutions

JSC United Financial Corporation

February 28, 2011

Trustwave

Kalio KeyBank Lockbox

February 28, 2012 January 31, 2012

Payment Gateway/Switch Payment Processing MOTO Records Management Hosting Provider - Web Payment Processing Internet

SecurityMetrics SecureState

Kimbia, Inc.

October 31, 2011

Compass IT Compliance, LLC

Klik Technologies, Corp.

September 30, 2011

Other Payment Gateway/Switch

Information Exchange

Kobie Marketing, Inc. Kony Solutions, Inc

December 31, 2011 February 28, 2012

Loyalty Programs Managed Services Payment Gateway/Switch

BrightLine CPAs and Associates, Inc. 403 Labs, LLC

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 44 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Kount, Inc (A Division of Keynetics, Inc) Kubra Data Transfer, Inc. KUWAIT INTERNATIONAL BANK VALIDATION DATE March 31, 2012 July 31, 2011 November 30, 2011 SERVICES COVERED BY REVIEW (1) Fraud and Chargeback Services Payment Gateway Authorization Clearing & Settlement Issuing Processing Switching Layered Tech, formerly GSI Hosting LesConcierges Lethoff, Inc. May 31, 2011 March 31, 2011 January 31, 2011 Hosting Provider Loyalty Programs Authorization Payment Gateway Lighthouse1 Litle & Co February 28, 2011 January 31, 2012 Other Clearing & Settlement Payment Gateway/Switch Payment Processing Internet Payment Processing MOTO LiveOps, Inc LiveVox, Inc. July 31, 2011 January 31, 2012 Other Billing Management Other ATM Processing Authorization Clearing & Settlement Internet Payment Processing Merchant POS Processing MOTO Payment Processing Process Magnetic-Stripe Transactions LOTSolutions / Life of the South Lundquist Consulting Maas Global Solutions Corporation June 30, 2011 MOTO Payment Processing Other February 28, 2011 October 31, 2011 Other Authorization MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 45 of 80 Trustwave Digital Resources Group (DRG) Trustwave Trustwave Verizon Business Jefferson Wells Payment Software Company (PSC) BrightLine CPAs and Associates, Inc. Digital Resources Group (DRG) Trustwave ASSESSOR Trustwave Trustwave SISA Information Security Pvt. Ltd. AP CEMEA LAC NA

LLC Multifunctional Processing Company

January 31, 2011

FortConsult

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Magensa VALIDATION DATE August 31, 2011 SERVICES COVERED BY REVIEW (1) Fraud and Chargeback Services Payment Gateway/Switch Payment Processing Internet Payment Processing MOTO Payment Processing - POS Authorization Payment Gateway Switching Other Loyalty Programs Other Hosting Provider Other Payment Gateway 3-D Secure Access Control Server Authorization Clearing & Settlement IPSP (E-commerce) Issuing Processing Payment Gateway Process Magnetic-Stripe Transactions Switching IPSP (E-commerce) MOTO Payment Processing Payment Gateway MegaPath January 31, 2012 Managed Services Network Provider/Transmitter Member Solutions, Inc. September 30, 2011 Authorization Clearing & Settlement MOTO Payment Processing Payment Gateway Trustwave Trustwave Coalfire ASSESSOR AP CEMEA LAC NA

Magic-Wrighter, Inc.

July 31, 2011

Trustwave

Maintech MAKO NETWORKS LIMITED Maritz Loyalty Marketing Maritz Travel MarketLive MBS Insight, Inc MBS Textbook Exchange, Inc. - inSite MBU d.o.o.

November 30, 2011 February 28, 2011 December 31, 2011 August 31, 2011 October 31, 2011 May 31, 2011 September 30, 2011 August 31, 2011

IBM Internet Security Systems Verizon Business IBM Internet Security Systems IBM Internet Security Systems AT&T Consulting Solutions K3DES Trustwave Trustwave

McKesson - RelayHealth

April 30, 2011

Trustwave

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 46 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Mercadotcnia, Ideas y Tecnologa VALIDATION DATE November 30, 2011 SERVICES COVERED BY REVIEW (1) IPSP (E-commerce) Issuing Processing MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching Merchant e-Solutions July 31, 2011 Authorization Clearing & Settlement MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Merchant Link, LLC January 31, 2012 Clearing & Settlement Payment Gateway/Switch Payment Processing Internet Merchant One, Inc. March 31, 2011 Clearing & Settlement Merchant Services Clearing & Settlement Merchant Services Payment Gateway/Switch Payment Processing Internet Payment Processing MOTO Payment Processing - POS Merchant Processing International Merchant Services LTD Merchant Services Processing at Bank of America, NA May 31, 2011 Fraud and Chargeback Services Prepaid Services Other Clearing & Settlement Intersec Worldwide Information Exchange Trustwave Digital Resources Group (DRG) ASSESSOR Xtrategies, LLC AP CEMEA LAC NA

Merchant Partners

July 31, 2011

Information Exchange

April 30, 2011 March 31, 2011

The Compliance and Audit Group Trustwave

Payment Gateway Switching Merchant Warehouse Merchants Billing Services March 31, 2011 November 30, 2011 Payment Gateway Clearing & Settlement IPSP (E-commerce) Merchant Services MOTO Payment Processing Payment Gateway (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 47 of 80 Trustwave Information Exchange Inc.

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Merchants Billing Services VALIDATION DATE November 30, 2011 SERVICES COVERED BY REVIEW (1) Payment Processing Internet Other Payment Gateway Merchant Services Payment Gateway/Switch Payment Processing Internet Payment Processing - POS Meta Payment Systems MetaSource Metavante Biller Solution Product (BSP) Metavante Healthcare Payment Solutions Group, Benefits Payment Systems April 30, 2011 March 31, 2011 September 30, 2011 February 28, 2011 Clearing & Settlement Other Billing Management Account Management Trustwave Compass IT Trustwave TrustWave ASSESSOR Information Exchange Inc. K3DES LLC Coalfire 403 Labs AP CEMEA LAC NA

Merchants Choice Payment September 30, 2011 Solutions Mercury Payment Systems Meritus Payment Solutions November 30, 2011 October 31, 2011

Billing and Customer Support Employee Benefits Programs Health Savings Account Services Prepaid Employee Benefits Programs MetraTech Corp. February 28, 2011 Hosting Provider - Web Network Provider/Transmitter Payment Processing Internet Clearing & Settlement Loyalty Programs MICROPAGOS S.A. February 28, 2012 Network Provider/Transmitter Payment Processing Internet Payment Gateway Authorization IPSP (E-commerce) MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Microsoft Tellme September 30, 2011 MOTO Payment Processing Trustwave CYBSEC SA Kirkpatrick Price LLC

MHM Resources, LLC

January 31, 2012

RSM McGladrey

Micros Systems, Inc. Microsoft Dynamics Online

May 31, 2011 May 31, 2011

Trustwave Trustwave

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 48 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Microsoft Tellme Minacs Worldwide Inc. VALIDATION DATE September 30, 2011 April 30, 2011 SERVICES COVERED BY REVIEW (1) Other Account Management Loyalty Programs MOTO Payment Processing Other Prepaid Services Hosting Provider Payment Gateway Moneris Solutions Corp Shared Cash Dispensing Royal Bank of Canada July 31, 2011 Authorization Control Gap ASSESSOR Trustwave Trustwave AP CEMEA LAC NA

Mindbody

September 30, 2011

Payment Software Company (PSC)

Clearing & Settlement Process Magnetic-Stripe Transactions Switching Moneris Solutions Inc. July 31, 2011 3-D Secure Access Control Server Clearing & Settlement MOTO Payment Processing Process Magnetic-Stripe Transactions Other Clearing & Settlement Payment Gateway/Switch MoneyGram Payment Systems / Property Bridge Moneytree ATM Digital Network Solutions LLC May 31, 2011 IPSP (E-commerce) Other April 30, 2011 Clearing & Settlement Merchant Services Payment Gateway/Switch Payment Processing - ATM Monitise Americas Moore Wallace Motionsoft September 30, 2011 February 28, 2011 March 31, 2012 Account Management Other Hosting Provider - Web Other Payment Gateway/Switch Payment Processing Internet Payment Processing MOTO Payment Processing - POS (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 49 of 80 Trustwave Solutionary, Inc Trustwave Information Exchange Payment Software Company (PSC) Control Gap

Monexa Solutions, Inc. Money Movers, Inc

January 31, 2011 February 28, 2012

Payment Software company (PSC) Digital Resources Group (DRG)

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Motivational Fulfillment & Logistics Services mPay Gateway VALIDATION DATE February 28, 2011 December 31, 2011 SERVICES COVERED BY REVIEW (1) Payment Processing MOTO Billing Management Payment Gateway/Switch Prepaid Services MPOS Australia Pty Ltd October 31, 2011 Payment Gateway/Switch Payment Processing MOTO Payment Processing - POS MSI - Merchant Services, Inc. NJ Mtrex (Vision Bankcard, Inc.) March 31, 2011 Clearing & Settlement Merchant Services February 28, 2011 IPSP (E-commerce) Payment Gateway Process Magnetic-Stripe Transactions MTXEPS October 31, 2011 Payment Gateway Process Magnetic-Stripe Transactions Switching Clearing & Settlement Payment Gateway/Switch Payment Processing Internet Payment Processing - POS Clearing & Settlement Loyalty Programs Payment Gateway/Switch Payment Processing - POS National Credit Cards July 31, 2011 Clearing & Settlement Issuer Processing Other Payment Gateway/Switch Payment Processing - ATM National Fulfillment Services (NFS) October 31, 2011 Authorization Clearing & Settlement Hosting Provider MOTO Payment Processing Payment Gateway National Information Solutions Cooperative May 31, 2011 Payment Gateway Trustwave SecurityMetrics NVision Group Trustwave Trustwave Information Exchange Vectra Corporation Limited ASSESSOR Tevora Business Solutions SecurityMetrics AP CEMEA LAC NA

Multi Service Corporation

February 28, 2012

Trustwave

National Bankcard Services

October 31, 2011

RSM McGladrey

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 50 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER National Merchant Center VALIDATION DATE December 31, 2011 SERVICES COVERED BY REVIEW (1) Authorization IPSP (E-commerce) MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions National Processing Company National Records Management National Systems Corporation / QuikOrder, Inc. Nationwide Payment Solutions, LLC September 30, 2011 August 31, 2011 July 31, 2011 Other Other Authorization Trustwave 403 Labs Trustwave ASSESSOR Digital Resources Group (DRG) AP CEMEA LAC NA

Hosting Provider January 31, 2012 Authorization Clearing & Settlement Payment Gateway NBX Merchant Services, Inc. DBA Optimal Payments December 31, 2011 Clearing & Settlement Payment Gateway NCMIC Finance Corporation October 31, 2011 NCO Group NCR Corporation NCR eCommerce - TD Bank Environment November 30, 2011 November 30, 2011 September 30, 2011 Other Other Other Hosting Provider - Web Hosting Provider- Hardware Managed Services Nebraska Electronic Transfer System, Inc. November 30, 2011 Clearing & Settlement Payment Gateway/Switch Payment Processing - ATM Nelnet Business Solutions, Inc NeoSpire, Inc. NETBilling April 30, 2011 Authorization Payment Gateway April 30, 2011 February 28, 2012 Hosting Provider Billing Management Payment Gateway/Switch Payment Processing Internet NetCentrix April 30, 2011 Billing Management INFORMATION EXCHANGE, INC Trustwave SecurityMetrics Trustwave Trustwave SecurityMetrics Payment Software Company (PSC) ControlCase LLC Arsenal Security Group Trustwave ControlCase LLC

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 51 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER NetCentrix VALIDATION DATE April 30, 2011 SERVICES COVERED BY REVIEW (1) Clearing & Settlement Loyalty Programs Merchant Services Payment Gateway/Switch Payment Processing Internet Payment Processing MOTO Payment Processing - POS netSpend Corporation June 30, 2011 Clearing & Settlement Issuer Processing Payment Gateway/Switch Payment Processing - ATM Payment Processing Internet Prepaid Services NetSuite January 31, 2012 Hosting Provider Payment Gateway Network Merchants NETWORK PROCESSING COMPANY S.A.E. (NPC) March 31, 2011 June 30, 2011 Payment Gateway Authorization Clearing & Settlement Issuing Processing MOTO Payment Processing Payment Gateway Switching Network Solutions Newtek Merchant Solutions November 30, 2011 October 31, 2011 Hosting Provider - Web Clearing & Settlement Loyalty Programs Hosting Provider IPSP (E-commerce) NEXUS, S.A. August 31, 2011 Authorization Clearing & Settlement Issuing Processing nFinanSe Inc June 30, 2011 Account Management Issuer Processing Prepaid Services NIC Services, LLC North American Bancard June 30, 2011 October 31, 2011 Payment Gateway Clearing & Settlement Merchant Services Payment Gateway/Switch (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 52 of 80 Trustwave Information Exchange Security Horizon, Inc. 403 Labs, LLC Payment Software Company (PSC) SecurityMetrics Trustwave Trustwave Trustwave Coalfire Systems. Inc. ASSESSOR INFORMATION EXCHANGE, INC AP CEMEA LAC NA

NEXTAG, INC.

June 30, 2011

Trustwave

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER North American Bancard VALIDATION DATE October 31, 2011 SERVICES COVERED BY REVIEW (1) Payment Processing Internet Payment Processing - POS Authorization Payment Gateway Process Magnetic-Stripe Transactions NRT Technologies, Inc. February 28, 2011 Authorization Clearing & Settlement Process Magnetic-Stripe Transactions Switching Nuance Communications, Inc. NYCE Payments Network, LLC Oak Leaf Systems, Inc. Obopay July 31, 2011 April 30, 2011 February 28, 2011 August 31, 2011 Other Authorization Hosting Provider Clearing & Settlement MOTO Payment Processing Other OCA S.A. July 31, 2011 Issuer Processing Payment Gateway/Switch Payment Processing - POS Clearing & Settlement Payment Gateway/Switch Payment Processing Internet Ogone February 28, 2012 Account Management Back Office Services Clearing & Settlement Data Preparation Fraud and Chargeback Services Merchant Services Payment Gateway/Switch Payment Processing Internet Payment Processing - POS OneBridge, Inc. October 31, 2011 Clearing & Settlement Fraud and Chargeback Services Issuer Processing Payment Gateway/Switch (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 53 of 80 Crowe Horwath LLP NTT Security Limited Cybsec S.A. Trustwave Trustwave Raven Eye Digital Resources Group, LLC Trustwave ASSESSOR Information Exchange AP CEMEA LAC NA

NPC Secure

March 31, 2011

Trustwave

Official Payments Corporation

February 28, 2012

Trustwave

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Onestop Internet, Inc. Open Solutions VALIDATION DATE October 31, 2011 April 30, 2011 SERVICES COVERED BY REVIEW (1) Merchant Services Issuing Processing Other Payment Gateway Switching OpSource February 28, 2012 Hosting Provider- Hardware Managed Services Payment Gateway/Switch Opticard Payment Services Inc. April 30, 2011 Clearing & Settlement Issuer Processing Merchant Services Payment Gateway/Switch Payment Processing Internet Payment Processing MOTO Payment Processing - POS Optimal Payments June 30, 2011 Clearing & Settlement Payment Gateway IPSP (E-commerce) Hosting Provider IPSP (E-commerce) Oracle E-Billing August 31, 2011 Hosting Provider IPSP (E-commerce) Oracle On Demand Service August 31, 2011 Hosting Provider IPSP (E-commerce) ORBIT Systems Inc. ORBITALL SERVICOS E PROCESSAMENTO DE INFORMACOES COMERCIAIS LTDA. February 28, 2011 October 31, 2011 Hosting Provider Authorization Raven Eye CPqD Coalfire Coalfire Systems Trustwave Information Exchange Brightline CPAs & Associates ASSESSOR Neohapsis, Inc. K3DES AP CEMEA LAC NA

Open Solutions Canada

July 31, 2011

K3DES

Oracle ATG Web Commerce On Demand Oracle EasyPay

October 31, 2011 August 31, 2011

Coalfire Coalfire

Hosting Provider Issuing Processing MOTO Payment Processing Process Magnetic-Stripe Transactions Switching ORCC - eCommerce Division: Columbus ORCC - eCommerce Division: Parsippany November 30, 2011 October 31, 2011 Other Other Trustwave Trustwave

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 54 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER ORCC - eCommerce Division: Princeton ORCS Web, Inc. OrderMotion OrderTalk VALIDATION DATE May 31, 2011 May 31, 2011 May 31, 2011 September 30, 2011 SERVICES COVERED BY REVIEW (1) Payment Gateway Hosting Provider - Web Payment Processing Internet IPSP (E-commerce) MOTO Payment Processing Payment Gateway OverDrive, Inc December 31, 2011 Clearing & Settlement Payment Gateway/Switch Payment Processing Internet PACIFICARD S.A., COMPAIA EMISORA Y ADMINISTRADORA DE TARJETAS DE CREDITO March 31, 2012 Issuer Processing Trustwave NetWorks Group ASSESSOR Trustwave igxglobal, Inc. Trustwave Trustwave AP CEMEA LAC NA

Payment Processing - ATM Payment Processing Internet Payment Processing - POS Paciolan, Inc. October 31, 2011 Hosting Provider Payment Gateway Process Magnetic-Stripe Transactions Pago Mobile Inc. November 30, 2011 Authorization Payment Gateway Palm Coast Data December 31, 2011 IPSP (E-commerce) MOTO Payment Processing Payment Gateway PAMS Lunchroom LLC August 31, 2011 IPSP (E-commerce) MOTO Payment Processing Panasonic Avionics Corporation Paramount Acceptance April 30, 2011 June 30, 2011 Payment Gateway/Switch Other Payment Gateway Parkeon Parkmobile USA, Inc. Passkey International, Inc. Passport EFT Solutions Passport Health Communications, Inc. May 31, 2011 December 31, 2011 July 31, 2011 December 31, 2011 February 28, 2012 Payment Gateway Other Other Payment Gateway Payment Processing Internet Trustwave Coalfire Systems, Inc. IOActive Inc. Coalfire Trustwave Tevora Business Solutions SecurityMetrics, Inc. Trustwave K3DES Integral Business Solutions Trustwave

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 55 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Patronpath, LLC PAY.ON VALIDATION DATE December 31, 2011 July 31, 2011 SERVICES COVERED BY REVIEW (1) IPSP (E-commerce) Payment Gateway/Switch Payment Processing Internet IPSP (E-commerce) MOTO Payment Processing Payment Gateway Hosting Provider - Web Payment Gateway/Switch PayJunction April 30, 2011 Other Payment Gateway PayLeap LLC February 28, 2011 Clearing & Settlement Payment Gateway/Switch Payment Data Systems May 31, 2011 Clearing & Settlement Issuer Processing Merchant Services Payment Gateway/Switch Payment Processing - POS Payment Processing, Inc. April 30, 2011 IPSP (E-commerce) MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Account Management Billing Management Managed Services Payment Gateway Payment Gateway/Switch Payment Processing MOTO Paymentus Corporation October 31, 2011 Other Payment Gateway/Switch Payment Processing - POS Paymetric August 31, 2011 Authorization Clearing & Settlement Other Payment Gateway Pay-O-Matic Corp PayPal March 31, 2011 December 31, 2011 Other IPSP (E-commerce) MOTO Payment Processing (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 56 of 80 Jefferson Wells, Inc. K3DES Trustwave SPIguard Trustwave Information Exchange Inc. Information Exchange Payment Software Company (PSC) ASSESSOR Crowe Horwath LLP Acertigo AG AP CEMEA LAC NA

PayCommerce Inc.

October 31, 2011

Trustwave

Paydiant Inc.

December 31, 2011

Secure Technology Group LLC

Payment Service Network, Inc.

December 31, 2012

Digital Resources Group (DRG)

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER PayPal PaySentinel VALIDATION DATE December 31, 2011 February 28, 2012 SERVICES COVERED BY REVIEW (1) Payment Gateway Payment Gateway/Switch Payment Processing Internet Payment Gateway Clearing & Settlement Merchant Services Payment Gateway/Switch Payment Processing Internet Payment Processing MOTO Payment Processing - POS Payvision BV August 31, 2011 Authorization IPSP (E-commerce) Loyalty Programs MOTO Payment Processing Other Payment Gateway PBD Worldwide Fulfillment Services July 31, 2011 Clearing & Settlement Hosting Provider IPSP (E-commerce) Payment Gateway Peak 10, Inc. PFSweb, Inc. December 31, 2011 April 30, 2011 Hosting Provider- Hardware Authorization Clearing & Settlement IPSP (E-commerce) MOTO Payment Processing Phoenix Managed Networks, LLC PhoenixNap, LLC Phreesia Pipeline Data August 31, 2011 Other Payment Gateway/Switch January 31, 2012 January 31, 2012 November 30, 2011 Hosting Provider Payment Gateway Payment Gateway/Switch Payment Processing Internet Payment Processing MOTO Payment Processing - POS Pitney Bowes March 31, 2012 Other IBM Internet Security Systems Coalfire Trustwave Coalfire Systems. Inc. igxglobal, Inc. BrightLine CPAs and Associates, Inc. Trustwave Trustwave Trustwave K3DES Trustwave ASSESSOR AP CEMEA LAC NA

PaySimple PayTrace

September 30, 2011 August 31, 2011

Coalfire Information Exchange

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 57 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Pivotal Payments VALIDATION DATE February 28, 2011 SERVICES COVERED BY REVIEW (1) Clearing & Settlement Loyalty Programs Payment Gateway Planet Payment, Inc. March 31, 2012 Authorization Clearing & Settlement MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Plug & Pay Technologies, Inc. June 30, 2011 Clearing & Settlement MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions POS Portal POST Integrations, Inc. (Ebocom, LLC) Powa Technologies PowerPay, LLC August 31, 2011 April 30, 2011 October 31, 2011 October 31, 2011 Other Clearing & Settlement Payment Processing Internet Other Payment Gateway IPSP (E-commerce) Payment Gateway Presto - Publix Super Markets Primoris Services LLC October 31, 2011 Other Switching July 31, 2011 Clearing & Settlement IPSP (E-commerce) MOTO Payment Processing Payment Gateway Princeton Payment Solutions, LLC Priority Payment Systems October 31, 2011 April 30, 2011 Payment Gateway/Switch Other Payment Gateway PROCARD SERVICES FZ LLC July 31, 2011 Authorization Clearing & Settlement Issuing Processing MOTO Payment Processing Switching (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 58 of 80 Trustwave SecurityMetrics SecurityMetrics SecurityMetrics Solutionary Coalfire Systems. Inc. Verizon Business Network Services Inc. SecurityMetrics Payment Software Company (PSC) Trustwave Witham Laboratories SecurityMetrics Trustwave ASSESSOR SecurityMetrics AP CEMEA LAC NA

Preferred Health Technology August 31, 2011 PREMIER TECHNOLOGIES PTY LTD March 31, 2011

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Procecard, S.A. VALIDATION DATE May 31, 2011 SERVICES COVERED BY REVIEW (1) Billing Management Payment Gateway/Switch Payment Processing Payment Processing - ATM Process America September 30, 2011 Clearing & Settlement Merchant Services Payment Gateway/Switch Payment Processing Internet Payment Gateway Clearing & Settlement Issuer Processing Payment Gateway/Switch Payment Processing - ATM Payment Processing - POS ProPay USA, Inc. June 30, 2011 Authorization Issuing Processing Payment Gateway Process Magnetic-Stripe Transactions Propco Marketing PSCU Financial Services, Inc. April 30, 2011 February 28, 2012 Loyalty Programs Account Management Fraud and Chargeback Services Payment Gateway/Switch PSiGate PSOnline, LLC PSP Card Services Inc. June 30, 2011 August 31, 2011 February 28, 2011 Payment Gateway Other Issuing Processing Process Magnetic-Stripe Transactions Pulse Network LLC PURE COMMERCE PTY LTD July 31, 2011 November 30, 2011 Switching Account Management Back Office Services Clearing & Settlement Data Preparation Fraud and Chargeback Services Managed Services Other Payment Gateway/Switch Payment Processing - ATM (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 59 of 80 K3DES Vectra Corporation Trustwave ControlCase Control Gap Inc. Neohapsis, Inc. Tevora Business Solutions SecurityMetrics Information Exchange ASSESSOR Internet Security Systems AP CEMEA LAC NA

ProfitStars Promocin y Operacin S.A. de C.V. (PROSA)

September 30, 2011 November 30, 2011

Coalfire Systems 403 Labs

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER PURE COMMERCE PTY LTD VALIDATION DATE November 30, 2011 SERVICES COVERED BY REVIEW (1) Payment Processing Internet Payment Processing MOTO Payment Processing - POS Records Management Payment Gateway Authorization Payment Gateway Quality Technology Services April 30, 2011 Hosting Provider Other QuanComm, Inc. Quantum Services July 31, 2011 September 30, 2011 Payment Gateway Payment Gateway/Switch Payment Processing Internet Payment Processing MOTO Payment Processing - POS Qwest Communications May 31, 2011 Hosting Provider Other Rackspace Hosting Radiant Systems - ALOHA COMMAND CENTER Radiant Systems - Aloha Takeout and Aloha Ordering Online Radiant Systems - CP GATEWAY July 31, 2011 January 31, 2012 November 30, 2011 Hosting Provider Other Hosting Provider Trustwave Coalfire Systems, Inc. Coalfire Trustwave Trustwave Raven Eye NDB Advisory ASSESSOR Vectra Corporation AP CEMEA LAC NA

Qgiv QS/1

May 31, 2011 June 30, 2011

SecurityMetrics Trustwave

October 31, 2011

Payment Gateway IPSP (E-commerce) Hosting Provider Loyalty Programs Issuer Processing Other Payment Gateway IPSP (E-commerce) Other

Coalfire Coalfire Systems. Inc. Coalfire Coalfire Systems. Inc. ControlCase LLC Trustwave Trustwave IBM Internet Security Systems Trustwave

Radiant Systems - CPOnline November 30, 2011 Radiant Systems - PCI Data Centers Rainbow Rewards Rapid Investments, Inc. Ready Financial Group RealPage, Inc. Rearden Commerce October 31, 2011 February 28, 2012 September 30, 2011 July 31, 2011 June 30, 2011 April 30, 2011

Recurly, Inc.

January 31, 2012

Hosting Provider - Web Payment Gateway/Switch

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 60 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Recurly, Inc. Redbanc, S.A. VALIDATION DATE January 31, 2012 June 30, 2011 SERVICES COVERED BY REVIEW (1) Payment Processing Internet Clearing & Settlement Process Magnetic-Stripe Transactions Switching Redcats USA Redfin Network, Inc. RegOnline March 31, 2011 October 31, 2011 April 30, 2011 IPSP (E-commerce) Payment Gateway Authorization Clearing & Settlement Payment Gateway Resurgent Capital Services Retail Decisions August 31, 2011 October 31, 2011 Other Protiviti Trustwave Trustwave Coalfire ASSESSOR Trustwave Xtrategies, LLC AP CEMEA LAC NA

3-D Secure Hosting Provider Trustwave Clearing & Settlement Fraud and Chargeback Services Hosting Provider - Web Payment Gateway/Switch Payment Processing Internet Payment Processing - POS

Retail Point, LLC

July 31, 2011

Authorization Payment Gateway

Trustwave

Rev Worldwide, Inc.

May 31, 2011

Authorization Issuing Processing Other Authorization Payment Gateway Loyalty Programs Loyalty Programs Payment Processing Internet Hosting Provider Other

403 Labs

Revelex Corporation RevTrak, Inc

September 30, 2011 May 31, 2011

Trustwave Coalfire Systems. Inc.

Rewards Network RewardsNow RideCharge Inc.

July 31, 2011 March 31, 2011 June 30, 2011

Sunera AT&T Consulting Solutions, Inc. ControlCase LLC FishNet Security

RightNow Technologies, Inc. April 30, 2011

ROAM Data, Inc. RocketGate RSI International

March 31, 2012 October 31, 2011 January 31, 2011

Payment Gateway/Switch Payment Gateway/Switch IPSP (E-commerce) Payment Gateway

igxglobal, Inc. IGX Global Coalfire

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 61 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER RT Lawrence Rycom Inc S1 Corp. - Postilion Retail POS Environment VALIDATION DATE April 30, 2011 November 30, 2011 October 31, 2011 SERVICES COVERED BY REVIEW (1) Payment Gateway Network Provider/Transmitter Hosting Provider Payment Gateway Process Magnetic-Stripe Transactions Sabre GetThere November 30, 2011 Other Payment Gateway/Switch Switching Global Distribution System Hosting Provider - Web Other Payment Gateway/Switch Sage Payment Solutions (formerly Verus Card Services) Salesforce.com Sallie Mae Satellite Receivers, Ltd. (Cash Depot) Savvis, Inc. SBI VERITRANS CO., LTD July 31, 2011 Payment Processing Internet Other Payment Gateway/Switch Other Switching August 31, 2011 December 31, 2011 Other Clearing & Settlement Payment Gateway/Switch SBW.com LLC ScholarChip Card Company, LLC School-Link Technologies July 31, 2011 August 31, 2011 Payment Processing Internet Payment Gateway/Switch Prepaid Services April 30, 2011 Other Payment Processing Internet Authorization Clearing & Settlement Hosting Provider IPSP (E-commerce) Loyalty Programs MOTO Payment Processing Payment Gateway (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 62 of 80 Coalfire Neohapsis SecurityMetrics, Inc. COALFIRE SYSTEMS ICMS Verizon Business Network Services Inc. FishNet Security Specialized Security Services K3DES Verizon Business ASSESSOR Trustwave NCI (Net Cyclops Inc.) Trustwave AP CEMEA LAC NA

Sabre Hospitality Solutions (SynXis) Sabre, Inc.

October 31, 2011 July 31, 2011

Fortrex Technologies Verizon Business

November 30, 2011 April 30, 2011 December 31, 2011

SecureNet

June 30, 2011

RSM McGladrey Inc.

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER SecureNet VALIDATION DATE June 30, 2011 SERVICES COVERED BY REVIEW (1) Process Magnetic-Stripe Transactions Switching Clearing & Settlement Fraud and Chargeback Services Payment Gateway/Switch Payment Processing - ATM Payment Processing Internet Payment Processing MOTO SegPay August 31, 2011 Clearing & Settlement Payment Processing Internet Hosting Provider Payment Gateway Serve Virtual Enterprises, Inc. May 31, 2011 Account Management Back Office Services Billing Management Clearing & Settlement Fraud and Chargeback Services Issuer Processing Loyalty Programs Merchant Services Network Provider/Transmitter Payment Processing - ATM Payment Processing Internet Payment Processing - POS Prepaid Services Records Management Servebase January 31, 2011 3-D Secure Access Control Server Authorization Clearing & Settlement IPSP (E-commerce) MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Hosting Provider MOTO Payment Processing Payment Gateway Foregenix Trustwave Trustwave ASSESSOR RSM McGladrey Inc. AP CEMEA LAC NA

SecureTrading Limited

June 30, 2011

Trustwave

Sequoia Retail Systems

July 31, 2011

Digital Resources Group (DRG)

ServiceU Corporation

April 30, 2011

K3DES

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 63 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Servicios Electrnicos Globales S.A. de C.V. (EGlobal) VALIDATION DATE October 31, 2011 SERVICES COVERED BY REVIEW (1) Clearing & Settlement ASSESSOR 403 Labs, LLC AP CEMEA LAC NA

Issuer Processing Payment Gateway/Switch Payment Processing Payment Processing - ATM SHC Direct Shift4 DOLLARS ON THE NET Shopify April 30, 2011 May 31, 2011 July 31, 2011 Loyalty Programs Payment Gateway/Switch Hosting Provider - Web Managed Services Sigma Micro August 31, 2011 IPSP (E-commerce) MOTO Payment Processing Payment Gateway Signature Card Services March 31, 2012 Loyalty Programs Other Simmons First National Corporation Simply Easier Payments September 30, 2011 October 31, 2011 Clearing & Settlement IPSP (E-commerce) Payment Gateway SITA - AirportConnect PCI Common Use Platform (2 airports) SITA Information Networking Computing, USA Inc. July 31, 2011 Managed Services IBM Security Services Trustwave Trustwave SecurityMetrics Trustwave Trustwave Verizon Business IOActive, Inc.

Other April 30, 2011 Authorization IBM Internet Security Systems

Global Distribution System IPSP (E-commerce) Other Switching Six Card Solutions Luxembourg S.A. April 30, 2011 Authorization IPSP (E-commerce) Payment Gateway Process Magnetic-Stripe Transactions Skipjack Financial Services January 31, 2012 Authorization Payment Gateway Process Magnetic-Stripe Transactions SlimCD September 30, 2011 Merchant Services Payment Gateway/Switch (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 64 of 80 Enterprise Risk Management Trustwave NTT Security Limited

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Smart Business Technology, Inc VALIDATION DATE March 31, 2011 SERVICES COVERED BY REVIEW (1) Authorization Clearing & Settlement Loyalty Programs Payment Gateway Switching SmartEtailing, Inc September 30, 2011 Hosting Provider Payment Gateway Snapfinger Inc. SOCIEDADE INTERBANCARIA E SISTEMA DE PAGAMENTOS SARL Softvoyage Inc SoundBite Communications Spacenet SpeedFC, Inc. September 30, 2011 January 31, 2012 Payment Processing Internet Switching ControlCase Trustwave Digital Resources Group (DRG) T3i ASSESSOR AP CEMEA LAC NA

November 30, 2011 September 30, 2011 May 31, 2011 November 30, 2011

Payment Processing Internet Other Other Hosting Provider Payment Gateway

Ubitrak K3DES Trustwave Payment Software Company (PSC) Trustwave

Speedpay (Western Union Payment Services) Spendvision Square, Inc.

August 31, 2011

MOTO Payment Processing Payment Gateway

April 30, 2011 May 31, 2011

Other Payment Gateway/Switch Payment Processing Internet

Integralis Ltd Coalfire

Stafford Associates Stamps.com

October 31, 2011 August 31, 2011

Managed Services IPSP (E-commerce) MOTO Payment Processing Payment Gateway

CrimsonSecurity Trustwave

StarCite, Inc. Sterling Payment Technologies

February 28, 2012 August 31, 2011

Payment Processing Internet Clearing & Settlement IPSP (E-commerce) Loyalty Programs MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions

RSM McGladrey, Inc. Trustwave

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 65 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Sterling Valley Systems, Inc.- Inntopia VALIDATION DATE July 31, 2011 SERVICES COVERED BY REVIEW (1) Authorization MOTO Payment Processing Payment Gateway STI PROCESSING LTD. April 30, 2011 Authorization Clearing & Settlement Issuing Processing MOTO Payment Processing Process Magnetic-Stripe Transactions Switching Clearing & Settlement Issuer Processing Merchant Services Payment Gateway/Switch Payment Processing Internet Hosting Provider IPSP (E-commerce) Payment Gateway StoreFinancial Services, LLC StoresOnline, Inc. / iMergent, Inc Strategic Fulfillment Group / Dynamic Resource Group (SFG/DRG) December 31, 2011 Issuer Processing Payment Gateway/Switch January 31, 2011 Hosting Provider Payment Gateway August 31, 2011 IPSP (E-commerce) Trustwave SecurityMetrics 403 Labs K3DES LLC ASSESSOR Trustwave AP CEMEA LAC NA

StoneEagle Services, Inc.

October 31, 2011

Information Exchange Inc.

Stored Value Solutions

September 30, 2011

K3DES LLC

MOTO Payment Processing Payment Gateway STRATEGIC PAYMENTS SERVICES PTY LTD April 30, 2011 Issuing Processing Payment Gateway/Switch Payment Processing - ATM Payment Processing MOTO Payment Processing - POS Strategic Profits April 30, 2011 Hosting Provider - Web Managed Services Payment Gateway/Switch Payment Processing Internet Payment Processing MOTO (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 66 of 80 SPIguard Security Solutions Inc. Verizon Business

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Stripe, Inc Sunburst Innovations, Inc. SunGard Availability Services VALIDATION DATE March 31, 2011 December 31, 2011 February 28, 2012 SERVICES COVERED BY REVIEW (1) Payment Gateway Other Hosting Provider- Hardware Managed Services Superior Financial Systems, September 30, 2011 LLC Switch Commerce LLC July 31, 2011 Other Clearing & Settlement Merchant Services Payment Gateway/Switch Payment Processing - ATM Synapse Group, Inc. T.K. Keith Company, Inc. (dba Primax) T2 Systems, Inc. October 31, 2011 July 31, 2011 November 30, 2011 Other Other MOTO Payment Processing Other Process Magnetic-Stripe Transactions Payment Gateway Switching Authorization Authorization Clearing & Settlement Issuing Processing MOTO Payment Processing Process Magnetic-Stripe Transactions Switching Teleflora February 28, 2012 Fraud and Chargeback Services Payment Processing Internet Payment Processing MOTO Payment Processing - POS Clearing & Settlement Loyalty Programs Other Hosting Provider Trustwave Neohapsis Inc. Verizon Business Network Services Inc. Trustwave Trustwave INFORMATION EXCHANGE, INC., ASSESSOR Payment Software Company (PSC) Professional Computer Center Fortrex Technologies AP CEMEA LAC NA

TalentBeat, Inc

September 30, 2011

K3DES

TD Merchant Services Tecnicard Inc

March 31, 2011 May 31, 2011

Telus Security Solutions Xtrategies

Teleformix, LLC

September 30, 2011

RSM McGladrey

Telekenex, Inc. Teleperformance Brazil

October 31, 2011 April 30, 2011

Trustwave British Telecom

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 67 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Teleperformance USA VALIDATION DATE February 28, 2012 SERVICES COVERED BY REVIEW (1) MOTO Payment Processing Other Telered S.A. February 28, 2011 ATM Processing Debit Card Processing POS Payment Processing TeleTech Holdings August 31, 2011 MOTO Payment Processing Other Telvista - Grupo Tecnico de Servicios January 31, 2012 Account Management Other Payment Processing MOTO Teranet Enterprises Inc. Terremark North America, Inc. Tessitura Network, Inc. April 30, 2011 December 31, 2011 IPSP (E-commerce) Hosting Provider - Web Hosting Provider- Hardware May 31, 2011 Authorization MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Payment Gateway Issuing Processing Loyalty Programs Payment Gateway The Members Group January 31, 2012 Other Other Authorization MOTO Payment Processing Process Magnetic-Stripe Transactions Thermeon May 31, 2011 Hosting Provider - Web Managed Services Payment Processing - POS Switching MOTO Payment Processing Other Payment Gateway Process Magnetic-Stripe Transactions (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 68 of 80 Tevora Business Solutions RSM McGladrey Coalfire Systems Trustwave Trustwave Trustwave BrightLine CPAa & Associates, Inc. Trustwave AT&T Consulting Trustwave ASSESSOR AT&T Consulting Solutions, Inc. AP CEMEA LAC NA

T-Gate LLC The Bancorp Bank The DataBase Group

November 30, 2011 September 30, 2011 September 30, 2011

Trustwave FishNet Security Specialized Security Services

The Results Companies LLC February 28, 2012 The Shubert Organization February 28, 2012

Threshold Financial Technologies Ticketmaster, LLC

June 30, 2011 June 30, 2011

Control Gap Inc. Trustwave

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER TicketNetwork, Inc. VALIDATION DATE November 30, 2011 SERVICES COVERED BY REVIEW (1) Hosting Provider Payment Gateway Tickets.com Advantix February 28, 2012 Payment Gateway/Switch Payment Processing Internet Payment Processing MOTO Payment Processing - POS Tickets.com ProVenue January 31, 2012 Clearing & Settlement Payment Gateway/Switch Payment Processing Internet Payment Processing MOTO Payment Processing - POS Tickets.com ProVenue Elite December 31, 2011 Authorization MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Clearing & Settlement Payment Gateway/Switch Payment Processing MOTO Payment Processing - POS TIES January 31, 2012 Payment Gateway/Switch Payment Processing Internet Time Customer Service July 31, 2011 Other Payment Gateway/Switch Payment Processing Internet Tix, Inc. Total Card, Inc. July 31, 2011 May 31, 2011 Other Other Payment Gateway Clearing & Settlement Merchant Services TouchNet Town North Bank Credit Card Services Transaction Network Services (TNS) April 30, 2011 February 28, 2011 June 30, 2011 Payment Gateway/Switch Other Other Trustwave Trustwave Trustwave Compass IT Compliance, LLC SecurityMetrics, Inc. Neohapsis, Inc Trustwave Trustwave Trustwave Trustwave ASSESSOR Trustwave AP CEMEA LAC NA

Tickets.com ProVenue Online

January 31, 2012

Trustwave

Total Merchant Services

February 28, 2011

Information Exchange

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 69 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Transaction Network Services (TNS) Transaction Network Services (TNS) TNSPay CNP Gateway Transaction Processing Partners VALIDATION DATE June 30, 2011 SERVICES COVERED BY REVIEW (1) Payment Gateway Switching June 30, 2011 Payment Gateway Trustwave ASSESSOR Trustwave AP CEMEA LAC NA

May 31, 2011

Clearing & Settlement Merchant Services Payment Gateway/Switch Payment Processing Internet Payment Processing - POS

Information Exchange

Transactis

June 30, 2011

Clearing & Settlement Merchant Services Payment Gateway/Switch Payment Processing Internet

INFORMATION EXCHANGE, INC

Transbank, S.A.

December 31, 2011

Authorization Clearing & Settlement IPSP (E-commerce) MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching MOTO Payment Processing Other

Xtrategies

Transcom North America/Asia TransCore

January 31, 2011

Sunera LLC

April 30, 2011

Hosting Provider MOTO Payment Processing Payment Gateway Back Office Services Clearing & Settlement Fraud and Chargeback Services Merchant Services Other Payment Gateway/Switch Payment Processing Internet Payment Processing MOTO Payment Processing - POS Other

Trustwave

TransFirst

May 31, 2011

Solutionary, Inc.

Transnational Bankcard, Inc. October 31, 2011

Valcom

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 70 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER TransPerfect Translations Inc. TransUnion Interactive, Inc. Tranzact Travelport GDS VALIDATION DATE December 31, 2011 November 30, 2011 October 31, 2011 February 28, 2012 SERVICES COVERED BY REVIEW (1) Other Other Payment Gateway Hosting Provider- Hardware Payment Gateway/Switch Payment Processing Internet Tridata, Inc. - Datalink Bankcard Services December 31, 2011 Fraud and Chargeback Services Loyalty Programs Other Records Management Authorization MOTO Payment Processing Payment Gateway Triplefin TriSource Solutions, LLC (formerly Nobel EFT) Tropical Productions July 31, 2011 September 30, 2011 June 30, 2011 Other Clearing & Settlement Clearing & Settlement Merchant Services Payment Gateway/Switch Payment Processing Internet TrustCommerce April 30, 2011 Payment Gateway Process Magnetic-Stripe Transactions TRXSERVICES LLC TSD Rental TSYS (Issuing Processing) October 31, 2011 January 31, 2011 January 31, 2012 Payment Gateway Payment Gateway/Switch Authorization Issuing Processing Process Magnetic-Stripe Transactions Authorization Coalfire Systems. Inc. Coalfire Systems, Inc Trustwave 403 Labs Trustwave COALFIRE SYSTEMS, INC. Information Exchange Trustwave ASSESSOR 403 Labs SecurityMetrics, Inc. Trustwave Jefferson Wells Inc. AP CEMEA LAC NA

Trilegiant

December 31, 2011

Trustwave

TSYS Acquiring Solutions (formerly Vital Processing Services)

April 30, 2011

Trustwave

Clearing & Settlement Loyalty Programs TSYS Customer Insight TSYS Digital Document System January 31, 2012 February 28, 2012 Other Other TrustWave Trustwave

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 71 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER TSYS iSolutions TSYS Loyalty VALIDATION DATE January 31, 2012 July 31, 2011 SERVICES COVERED BY REVIEW (1) Other Loyalty Programs Other Other Authorization Issuing Processing MOTO Payment Processing TSYS SERVICOS DE TRANSACOES ELETRONICAS LTDA. (TSYS TS Prime Latin America) November 30, 2011 Authorization Trustwave ASSESSOR Trustwave Trustwave Trustwave Trustwave Trustwave AP CEMEA LAC NA

TSYS Managed Services April 30, 2011 Myersville (Merlin Solutions) TSYS Merchant Solutions TSYS Prepaid January 31, 2012 July 31, 2011

Clearing & Settlement Issuing Processing Loyalty Programs MOTO Payment Processing Process Magnetic-Stripe Transactions Twin Oaks Software Development, Inc. February 28, 2012 Billing Management Payment Processing MOTO TxVia January 31, 2011 Authorization Clearing & Settlement Issuing Processing Payment Gateway Switching U.S. Bank Access Online U.S. Payments July 31, 2011 December 31, 2011 Other Merchant Services Payment Gateway/Switch Payment Processing MOTO UltraCart September 30, 2011 Merchant Services Payment Processing Internet UMS Banking Unirush, LLC (Rush Card) United Bank Card November 30, 2011 December 31, 2011 July 31, 2011 Other Payment Gateway Clearing & Settlement Merchant Services Back Office Services Jet Infosystems Billing Management Clearing & Settlement (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. January 31, 2011 Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 72 of 80 UNITED CARD SERVICE SecurityMetrics Fortrex Technologies Information Exchange Compliance Point TrustWave 403 Labs, LLC 403 Labs 403 Labs

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER UNITED CARD SERVICE VALIDATION DATE January 31, 2011 SERVICES COVERED BY REVIEW (1) Data Preparation Fraud and Chargeback Services Issuing Processing Loyalty Programs Merchant Services Payment Processing - ATM Payment Processing Internet Payment Processing MOTO Payment Processing - POS Records Management United Merchant Services, Inc. (UMSI) April 30, 2011 Fraud and Chargeback Services Merchant Services Payment Gateway/Switch Payment Processing Internet Payment Processing - POS Authorization Merchant Services MOTO Payment Processing Payment Gateway Payment Processing Internet Payment Processing Internet Tax/Government Payments UniteU Technologies, Inc August 31, 2011 Hosting Provider Payment Gateway Clearing & Settlement Merchant Services Payment Gateway/Switch Payment Processing - ATM UrbanStyle, Inc. December 31, 2011 Hosting Provider Other Payment Gateway US Bank - ATM Banking April 30, 2011 Authorization Clearing & Settlement Other Process Magnetic-Stripe Transactions (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 73 of 80 TrustWave Compass IT Compliance, LLC SecurityMetrics SecurityMetrics Arsenal Security Group ASSESSOR Jet Infosystems AP CEMEA LAC NA

United Payment Services

January 31, 2012

Accudata Systems

United States Department of The Treasury, Financial Management Service

March 31, 2012

SecureState

Universal Money Centers Inc.

September 30, 2011

Information Exchange

US ALLIANCE GROUP, INC November 30, 2011

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER US Bank - ATM Banking VALIDATION DATE April 30, 2011 SERVICES COVERED BY REVIEW (1) Switching Authorization Clearing & Settlement Other Process Magnetic-Stripe Transactions Switching Other Other Payment Gateway/Switch US Bank Multiservice Aviation US Bank/Elan Financial Services Credit Card Issuing - Integrated Card Systems (ICS) December 31, 2011 December 31, 2011 Payment Gateway/Switch Account Management Trustwave TrustWave ASSESSOR TrustWave TrustWave AP CEMEA LAC NA

US Bank - Gaming Services April 30, 2011

US Bank - Voyager US Bank E-Payment/EDisbursement Services

July 31, 2011 January 31, 2012

TrustWave Trustwave

Clearing & Settlement Fraud and Chargeback Services Issuing Processing Other USA ePay April 30, 2012 Authorization Payment Gateway Authorization Clearing & Settlement Hosting Provider USA Payment Systems, Inc. December 31, 2011 Clearing & Settlement Issuer Processing Payment Gateway/Switch Payment Processing - ATM USA Technologies USA800 January 31, 2012 September 30, 2011 Payment Gateway/Switch MOTO Payment Processing Payment Gateway VALUE PAY SERVICES LLC, AN IPC COMPANY November 30, 2011 Payment Gateway/Switch Payment Processing Internet Value Payment Systems, LLC. December 31, 2011 Payment Gateway/Switch Payment Processing Internet Payment Processing MOTO (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 74 of 80 SAIC IBM Security Services Trustwave IOActive, Inc. K3DES Trustwave

USA Fulfillment, Inc.

November 30, 2011

AT&T Consulting

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Value Payment Systems, LLC. Vanco Services VALIDATION DATE December 31, 2011 January 31, 2012 SERVICES COVERED BY REVIEW (1) Tax/Government Payments Fraud and Chargeback Services Merchant Services Payment Gateway/Switch Payment Processing Internet Process Magnetic-Stripe Transactions Authorization SAIC SecurityMetrics ASSESSOR AP CEMEA LAC NA

Vantiv (a.k.a. Fifth Third Processing Solutions) Acquiring Systems

June 30, 2011

Trustwave

Clearing & Settlement MOTO Payment Processing Vantiv (a.k.a. Fifth Third Processing Solutions) Issuing and Switch Providing Systems June 30, 2011 Authorization Trustwave

Clearing & Settlement Issuing Processing Process Magnetic-Stripe Transactions Switching Varolii Corporation March 31, 2012 Other Payment Gateway/Switch VEGAS.COM July 31, 2011 Loyalty Programs MOTO Payment Processing Payment Gateway Payment Gateway/Switch Payment Gateway Network Provider/Transmitter Billing Management Fraud and Chargeback Services Payment Gateway/Switch Payment Processing Internet Verifi June 30, 2011 Hosting Provider Payment Processing Internet Trustwave Trustwave Brightline CPAs & Associates, Inc.

Vendini, Inc. VenTek International Ventus Networks VERePAY (formerly VEReFIED)

May 31, 2011 November 30, 2011 January 31, 2012 January 31, 2012

igxglobal, Inc. Digital Resources Group (DRG) UHY Advisors TX, LLC SecurityMetrics

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 75 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER VeriFone - PAYware Connect VALIDATION DATE June 30, 2011 SERVICES COVERED BY REVIEW (1) Authorization Payment Gateway Process Magnetic-Stripe Transactions Verifone WAY Payment Gateway Verifone Transportation Systems October 31, 2011 Payment Gateway/Switch Network Security Professionals, Incorporated (NetSPI) Fortrex Technologies ASSESSOR Trustwave AP CEMEA LAC NA

April 30, 2011

Authorization Clearing & Settlement Payment Gateway Process Magnetic-Stripe Transactions

VeriFone VeriShield Protect

July 31, 2011

Other Payment Gateway

SecurityMetrics

Verizon Business Global January 31, 2012 Services System Integration (VB-GSSI)

Payment Gateway/Switch

Trustwave

Payment Processing Internet Payment Processing MOTO Verizon Business Remote Application Management Verizon Computing as a Service Verrus Mobile Technologies February 28, 2011 June 30, 2011 November 30, 2011 Other Hosting Provider Authorization MOTO Payment Processing VERSATILE TECHNOLOGY INC. June 30, 2011 Authorization Clearing & Settlement IPSP (E-commerce) MOTO Payment Processing Other Payment Gateway Process Magnetic-Stripe Transactions Switching Vesdia Vesta Corporation April 30, 2011 June 30, 2011 Loyalty Programs MOTO Payment Processing Other Payment Gateway VetCentric, Inc. April 30, 2011 IPSP (E-commerce) Payment Gateway (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 76 of 80 Coalfire Coalfire Systems. Inc. AT&T Consulting, Inc. Xtrategies, LLC Trustwave Trustwave Trustwave

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER VICTORIABANK VALIDATION DATE December 31, 2011 SERVICES COVERED BY REVIEW (1) Authorization Clearing & Settlement IPSP (E-commerce) Issuing Processing Other Payment Gateway Process Magnetic-Stripe Transactions Switching Vindicia March 31, 2011 Other Payment Gateway Virtual Piggy, Inc. Visa Argentina S A (VASA) December 31, 2011 August 31, 2011 Payment Gateway/Switch 3-D Secure Access Control Server Authorization Clearing & Settlement IPSP (E-commerce) Issuing Processing Loyalty Programs MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching Self-Assessment Xtrategies, LLC Payment Software Company (PSC) ASSESSOR Trustwave AP CEMEA LAC NA

Visa Inc. (including Visa Debit Processing)

June 30, 2011

3-D Secure Hosting Provider Trustwave

Account Management Back Office Services Billing Management Clearing & Settlement Data Preparation Fraud and Chargeback Services Hosting Provider - Web Hosting Provider- Hardware Issuer Processing Loyalty Programs Managed Services Merchant Services Network Provider/Transmitter Payment Gateway/Switch Payment Processing - ATM Payment Processing Internet Payment Processing MOTO Payment Processing - POS (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 77 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER Visa Inc. (including Visa Debit Processing) VALIDATION DATE June 30, 2011 SERVICES COVERED BY REVIEW (1) Prepaid Services Records Management Tax/Government Payments Visa Intellilink Visa Processing Services Pte Ltd December 31, 2011 January 31, 2011 Other Authorization Clearing & Settlement Hosting Provider Issuing Processing MOTO Payment Processing Prepaid Services Process Magnetic-Stripe Transactions Switching VisionOne September 30, 2011 IPSP (E-commerce) Payment Gateway IPSP (E-commerce) MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Voice Data Solutions Volusion Voxeo Corporation VXI Global Solutions, Inc WageWorks October 31, 2011 January 31, 2011 December 31, 2011 February 28, 2012 September 30, 2011 Other Hosting Provider Other MOTO Payment Processing Clearing & Settlement Loyalty Programs Payment Gateway/Switch SecurityMetrics Payment Software Company (PSC) Sunera LLC Trustwave RSM McGladrey IBM Security Services Trustwave SISA Information Security Pvt Ltd., ASSESSOR Trustwave AP CEMEA LAC NA

VitalChek

October 31, 2011

Trustwave

WEB ACTIVE CORPORATION PTY LTD (eWay)

August 31, 2011

Stratsec

Payment Processing Internet West - Managed Call Center Services West Business Services West Customer Management Group - Work At Home (WCMG - WAH) September 30, 2011 Account Management Billing Management April 30, 2011 September 30, 2011 MOTO Payment Processing Account Management Trustwave Continuum Worldwide Continuum Worldwide Corporation

Billing Management

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 78 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER West Direct - Direct Response West Direct - Smartsell West Interactive DataGuard Wipro Limited Wirecard Wiretrust WorkflowOne, Inc. WorldPay (UK) Limited PaymentTrust (High Capacity Gateway) VALIDATION DATE April 30, 2011 October 31, 2011 April 30, 2011 September 30, 2011 August 31, 2011 July 31, 2011 December 31, 2011 March 31, 2011 SERVICES COVERED BY REVIEW (1) MOTO Payment Processing Other MOTO Payment Processing Other Payment Processing Internet Payment Gateway Other 3-D Secure Access Control Server Account Management Clearing & Settlement Fraud and Chargeback Services Loyalty Programs Payment Gateway/Switch Payment Processing Internet Payment Processing MOTO Payment Processing - POS Prepaid Services WorldPay US, Inc. May 31, 2011 Authorization Clearing & Settlement IPSP (E-commerce) Loyalty Programs Payment Gateway Process Magnetic-Stripe Transactions Switching Wyndham Hotel & Resorts February 28, 2012 Authorization IPSP (E-commerce) Loyalty Programs Other Xtec April 30, 2011 Clearing & Settlement Payment Gateway/Switch Yahoo! Stores YALAMANCHILI SOFTWARE EXPORTS (P) LTD March 31, 2011 January 31, 2011 IPSP (E-commerce) Authorization Accuvant, Inc. SISA Information Security (P) Ltd Information Exchange Verizon Business Verizon Business ASSESSOR Trustwave Trustwave Trustwave SISA Information Security Pvt Ltd IPS Coalfire Systems. Inc. Protiviti, Inc. Arsenal Secuirty Group AP CEMEA LAC NA

Clearing & Settlement (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 79 of 80

Visas Global Registry of Service Providers - PCI DSS Validated Entities


SERVICE PROVIDER YALAMANCHILI SOFTWARE EXPORTS (P) LTD VALIDATION DATE January 31, 2011 SERVICES COVERED BY REVIEW (1) Hosting Provider ASSESSOR SISA Information Security (P) Ltd AP CEMEA LAC NA

Issuing Processing MOTO Payment Processing Process Magnetic-Stripe Transactions Switching Yapstone Inc. April 30, 2011 Payment Gateway/Switch Payment Processing Internet Payment Processing MOTO Yes-Pay International Ltd. July 31, 2011 Issuer Processing Payment Gateway/Switch Payment Processing Internet Payment Processing MOTO Payment Processing - POS Yodlee December 31, 2011 Hosting Provider IPSP (E-commerce) Zagrebaka banka d.d. January 31, 2012 Clearing & Settlement Fraud and Chargeback Services Issuer Processing Payment Processing - ATM Payment Processing Internet Payment Processing - POS ZEUS Corporation October 31, 2011 3-D Secure Hosting Provider NTT Data Security Corporation Account Management Billing Management Clearing & Settlement Payment Gateway/Switch Payment Processing Internet Payment Processing - POS Payment Gateway Authorization Payment Gateway 403 Labs Digital Resources Group (DRG) IBM AT&T Consulting Fortconsult BrightLine

ZirMed, Inc. Zuora, Inc.

April 30, 2011 June 30, 2011

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. 2012 Visa Inc. 80 of 80

Das könnte Ihnen auch gefallen