cisp list of cisp compliant service providersww1.prweb.com/prfiles/2008/09/09/151982/cisp... ·...
TRANSCRIPT
Visa U.S.A. Cardholder Information Security Program (CISP)
List of Compliant Service Providers
The companies listed below successfully completed a CISP review based on the PCI Data Security Standard.
The "VALIDATION DATE" is the date of last compliance. CISP reviews are valid for one year, with the next annual report due to Visa one year from the "VALIDATION DATE". Reports that are from 1-60 days late are noted in yellow and reports that are from 60-90 days late are noted in red. Entities with reports over 90 days past due are removed from this list.
It is the member's responsibility to use compliant service providers and to follow up with service providers if there are any questions about their compliance status.
As Of August 31, 2008
SERVICE PROVIDERVALIDATION
DATESERVICES
COVERED BY REVIEW (1) ASSESSOR
Visa U.S.A. Cardholder Information Security Program (CISP)
List of Compliant Service Providers - All
1ShoppingCart.com Internet Payment ProcessingJune 30, 2008 Security Metrics
1st Americard Merchant Payment ServicesMarch 31, 2008 Trustwave
3Delta Systems Merchant Payment ServicesJuly 31, 2007 Fortrex Technologies
3Pea Technologies, Inc Prepaid Card ProcessingMay 31, 2008 SecurityMetrics
A3 IT Solutions Managed HostingNovember 30, 2007 Trustwave
AAFES Managed HostingJuly 31, 2008 IBM Internet Security Systems
Payment Gateway
Payment Processing
ABC Financial Account Billing ServicesMay 31, 2008 Trustwave
Academy Collection Service Debt Collection AgencyOctober 31, 2007 Self-Assessment
Accel Networks Wireless Payment ProcessingJanuary 31, 2008 Trustwave
AccountNow Account Management ServicesJune 30, 2008 Trustwave
Accounts Receivable Management (ARM)
Account CollectionsJune 30, 2008 Self-Assessment
ACH Direct Merchant Payment ProcessingNovember 30, 2007 RSM McGladrey
ACI Worldwide Merchant Payment ProcessingApril 30, 2008 Solutionary, Inc
ACS Government and Community Solutions
Payment ProcessingAugust 31, 2008 Jefferson Wells
Acxiom ICS/BNS Core & ISC/BNS Proprietary
Bankruptcy Notification ServicesAugust 31, 2008 Verisign
Acxiom ICS/BNS Proprietary - 1 & 2
August 31, 2008 Verisign
1 of 22
(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.
© 2008 Visa U.S.A. Inc.
Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.
Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.
SERVICE PROVIDERVALIDATION
DATESERVICES
COVERED BY REVIEW (1) ASSESSOR
Visa U.S.A. Cardholder Information Security Program (CISP)
List of Compliant Service Providers - All
Adeptra Call Center ServicesDecember 31, 2007 Trustwave
Fraud and Chargeback Services
Adteractive, Inc. Merchant Digital MarketingFebruary 28, 2008 Digital Resources Group (DRG)
Aegis Communications Call Center ServicesDecember 31, 2007 K3DES
Affinity Solutions Loyalty ProgramsNovember 30, 2007 Solutionary
AHT Services Payment GatewayJuly 31, 2008 Trustwave
Airlines Reporting Corporation Payment ProcessingFebruary 28, 2008 Verisign
Alaska Option Services EFT ProcessingApril 30, 2008 K3DES
Aliaswire Payment GatewayOctober 30, 2007 IGX Global
Alliance Data - Network Services Merchant Payment ProcessingOctober 31, 2007 Cybertrust
Alliance Data - Remittance Processing
Remittance ProcessingMay 31, 2008 Cybertrust
Alliance Data - Retail Services Back Office Services for marketing and collection
January 31, 2008 Cybertrust
Alliance Entertainment Corp Payment GatewayJune 30, 2008 Solutionary
Alta Resources Account Billing ServicesApril 30, 2008 IBM Internet Security Systems
Payment Processing
Amazon.com Internet Payment ProcessingOctober 31, 2007 Trustwave
American Data Technology Managed HostingApril 30, 2008 Self-Assessment
Americaneagle.com Co-Location HostingNovember 30, 2007 Fortrex Technologies
Managed Hosting
Managed Merchant Hosting
Physical Security
Andera, Inc. New Accounts OnlineSeptember 30, 2007 Self-Assessment
Angel.com Account Management ServicesOctober 31, 2007 Self-Assessment
Aplus.Net Internet Payment ProcessingJuly 31, 2008 Security Metrics
Applied Card Systems Credit Card Account ServicingJuly 31, 2008 Self-Assessment
Apriva Merchant Payment ProcessingJuly 31, 2008 Trustwave
Arcaneo Web-based ReportingDecember 31, 2007 Self-Assessment
Ariba Inc Expense ManagementMay 31, 2008 Payment Software company (PSC)
Arise Virtual Solutions Payment Transmission ServicesMay 31, 2008 Verisign
Art Technology Group (ATG) Payment GatewayNovember 30, 2007 Payment Software company (PSC)
Arvato Finance Services Limited Payment ProcessingJuly 31, 2008 Acertigo AG - An EXCELSIS Company
2 of 22
(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.
© 2008 Visa U.S.A. Inc.
Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.
Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.
SERVICE PROVIDERVALIDATION
DATESERVICES
COVERED BY REVIEW (1) ASSESSOR
Visa U.S.A. Cardholder Information Security Program (CISP)
List of Compliant Service Providers - All
AT&T Managed Services - AT&T Enhanced VPN Services, AT&T VPN Services, AT&T Private Network Transport Services
Managed MPLS VPNJuly 31, 2008 Trustwave
AT&T Managed Services - AT&T Network Based IP VPN Remote Access Service / AT&T VPN Tunneling Service
Managed VPNMay 31, 2008 Trustwave
AT&T Managed Services - Endpoint Security
Managed SecurityJuly 31, 2008 Trustwave
AT&T Managed Services - Intrusion Detection Services
Managed SecurityJuly 31, 2008 Trustwave
AT&T Managed Services - Intrusion Prevention Services
Managed SecurityJuly 31, 2008 Trustwave
AT&T Managed Services - IP Telephony and LAN Services
Managed VPNJuly 31, 2008 Trustwave
AT&T Managed Services - Managed Router Services
Managed VPNJuly 31, 2008 Trustwave
AT&T Managed Services - Network Based Firewall
Managed SecurityJuly 31, 2008 Trustwave
AT&T Managed Services - Premises Firewall
Managed SecurityJuly 31, 2008 Trustwave
AT&T Managed Services - Transaction Routing Service
Payment Transmission ServiceJuly 31, 2008 Trustwave
AT&T Managed Services - VoiceTones
Data ServicesJuly 31, 2008 Trustwave
IVR Services
Atlantech Online, Inc Data-Center HostingJuly 31, 2008 TrustWave
Physical Security
AuBeta Networks Corporation Payment Transmission ServicesJune 30, 2008 Trustwave
Authorize.NET Internet Payment ProcessingNovember 30, 2007 Trustwave
BA Merchant Services Payment ProcessingMarch 31, 2008 Trustwave
Bank Card Services, Inc Merchant Payment ProcessingMay 31, 2008 Trustwave
BankersBank Card Services Back Office Services for marketing and collection
November 30, 2007 Self-Assessment
Bankserv Merchant Payment ProcessingOctober 31, 2007 Payment Software Company (PSC)
Beanstream Internet Payment ProcessingAugust 31, 2007 Dyntek
BearingPoint ePay Internet Payment ProcessingNovember 30, 2007 Trustwave
BillMatrix Bill Payment ProcessingFebruary 28, 2008 Trustwave
3 of 22
(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.
© 2008 Visa U.S.A. Inc.
Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.
Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.
SERVICE PROVIDERVALIDATION
DATESERVICES
COVERED BY REVIEW (1) ASSESSOR
Visa U.S.A. Cardholder Information Security Program (CISP)
List of Compliant Service Providers - All
Blackboard Merchant Payment ProcessingMay 31, 2008 Trustwave
Bluefin Payment Systems Merchant Payment ProcessingOctober 31, 2007 403 Labs
BluePay Merchant Payment ProcessingMay 31, 2008 Trustwave
BSG Payments (formerly Billing Concepts)
Merchant Payment ProcessingNovember 30, 2007 Trustwave
Business Data Record Services Records ManagementNovember 30, 2007 RSM McGladrey
Tape Storage
Caledon Card Systems Payment ProcessingJune 30, 2008 MTS Allstream
Capital Card Services Credit Card ServicesApril 30, 2008 Trustwave
Card Management Corp. Credit Card ServicesAugust 31, 2008 Crowe Chizek
Card Tranz, Inc. Merchant Payment ProcessingJune 30, 2007 Trustwave
Cardholder Brokerage Services, Inc. (CBSI)
Account Management ServicesJuly 31, 2008 Self-Assessment
Cardinal Commerce Corp. Verified by Visa Merchant ServicesDecember 31, 2007 Payment Software Company (PSC)
CardService International, a First Data Company
Merchant Payment ProcessingAugust 31, 2007 Trustwave
Cardtronics EFT ATM ProcessingMay 31, 2008 K3DES
Cardworks Processing Payment ProcessingAugust 31, 2008 Accuvant
Cardworks Servicing LLC Account Management ServicesFebruary 28, 2008 Jefferson Wells
Carlson Marketing Worldwide (Visa Data Track)
Visa Data TrackMarch 31, 2008 Trustwave
Carlson Marketing Worldwide (Visa Extras)
Visa ExtrasJune 30, 2008 Trustwave
CartManager Payment ProcessingFebruary 28, 2008 Trustwave
Cash Systems ATM ProcessingNovember 30, 2007 Information Exchange
CashLINQ Group, LLC Merchant Payment ServicesAugust 31, 2008 SecurityMetrics
Catalyst Payments Merchant Payment ProcessingApril 30, 2008 Trustwave
Cboss Payment ProcessingNovember 30, 2007 SecurityMetrics
CCBill Internet Payment ProcessingJanuary 31, 2008 Chief Security Officers
Center Partners Call Center ServicesOctober 31, 2007 Verisign
Central Coast Processing Payment ProcessingApril 30, 2008 403 Labs
Central States Indemnity Payment ProcessingNovember 30, 2007 FishNet Security
Centrix Bank – LockBox Service Payment GatewayMay 31, 2008 SecurityMetrics
Century Bankcard Services Merchant POS ProcessingMay 22, 2008 Information Exchange
4 of 22
(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.
© 2008 Visa U.S.A. Inc.
Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.
Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.
SERVICE PROVIDERVALIDATION
DATESERVICES
COVERED BY REVIEW (1) ASSESSOR
Visa U.S.A. Cardholder Information Security Program (CISP)
List of Compliant Service Providers - All
Certain Software Web-based ReportingFebruary 28, 2008 Payment Software Company (PSC)
Certified Payments Payment ProcessingJune 30, 2007 Trustwave
Chase Loyalty Solutions Merchant Payment ProcessingDecember 31, 2007 Trustwave
Chase Paymentech Solutions, LLC.
Gift Card ProcessingJanuary 31, 2008 Trustwave
Internet Payment Processing
Payment Processing
ChockStone Gift Card ProcessingJuly 31, 2007 Trustwave
Merchant Payment Processing
Stored Value Card Processing
ChoicePay Internet Payment GatewaySeptember 30, 2007 K3DES
Chrislands, Inc Managed Merchant HostingNovember 30, 2007 Raven Eye
Cintas Document Management Off Site Data ProtectionJune 30, 2008 Self-Assessment
CityXpress Internet Payment GatewayFebruary 28, 2008 Trustwave
ClearCommerce Internet Payment ProcessingMay 31, 2008 Trustwave
Verified by Visa Hosted Payer Authentication
Clearent New Merchant AccountsApril 30, 2008 Trustwave
Report Processing
ClearTran Merchant Payment ProcessingJanuary 31, 2008 SecurityMetrics
Columbus Data ATM ProcessingJanuary 31, 2008 Information Exchange
Comdata Processing Systems Payment ProcessingAugust 31, 2007 K3DES
Commerciant Payment ProcessingOctober 31, 2007 Trustwave
Communications Data Services Order FulfillmentMay 31, 2007 RSM McGladrey
Complianthost.com, a GSI Service Offering
Data-Center HostingJuly 31, 2008 Solutionary
Managed Hosting
Physical Security
Comstar Interactive Internet Payment ProcessingApril 30, 2008 Trustwave
Mobile Payment Processing
Wireless Payment Processing
Concord EFS, a First Data Company
Payment ProcessingAugust 31, 2007 Trustwave
Concord Emerging Technologies, a First Data Company
Merchant Payment ProcessingAugust 31, 2007 Trustwave
Concord Payment Services, a First Data Company
Payment ProcessingAugust 31, 2007 Trustwave
Concur Travel Profile ServicesFebruary 28, 2008 Self-Assessment
5 of 22
(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.
© 2008 Visa U.S.A. Inc.
Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.
Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.
SERVICE PROVIDERVALIDATION
DATESERVICES
COVERED BY REVIEW (1) ASSESSOR
Visa U.S.A. Cardholder Information Security Program (CISP)
List of Compliant Service Providers - All
Consumer Benefit Services Loyalty ProgramsMarch 31, 2008 Trustwave
Convergys CCMS Customer Relationship ManagementApril 30, 2008 Fortrex Technologies
Convergys Encore Account Billing ServicesMarch 31, 2008 Fortrex Technologies
Convergys Speechport IVR Payment ProcessingApril 30, 2008 Fortrex Technologies
CO-OP Financial Services ATM ProcessingApril 30, 2008 Tevora Business Solutions Inc
Dispute Resolution
Credit Discovery Report ProcessingDecember 31, 2007 K3DES
Credit Management Group Rewards 660November 30, 2007 Self-Assessment
Credit Union Card Center (ICUL Services Corporation)
Credit Card ServicesNovember 30, 2007 Self-Assessment
CreditCall Communications Ltd. Internet Payment ProcessingJanuary 31, 2008 Trustwave
CSG Systems Account Billing ServicesMarch 31, 2008 Solutionary
CSI Software Account Billing ServicesOctober 31, 2007 Trustwave
Cyber City Teleservices Call Center ServicesFebruary 28, 2008 CrimsonSecurity
Cybera Data TransmissionApril 30, 2008 IBM Internet Security Systems
CyberSource Corporation Internet Payment ProcessingAugust 31, 2008 CyberTrust
Verified by Visa Hosted Payer Authentication
Cygnus Payment GatewayFebruary 28, 2008 Trustwave
Cynergy Data Merchant Payment ServicesAugust 31, 2008 Information Exchange
Data Center of Arizona Call Center ServicesDecember 31, 2007 Self-Assessment
Data Delivery Services Web-based ReportingJuly 31, 2008 Trustwave
Data Stream ATM ProcessingFebruary 28, 2008 Information Exchange
DataCo Credit Card ServicesMay 31, 2008 BT INS
Dataline Systems Affinity Card ServicesDecember 31, 2007 Trustwave
DataPipe Co-Location HostingSeptember 30, 2007 Trustwave
Managed Hosting
Physical Security
Dataprose Bill Payment ProcessingJanuary 31, 2008 Backbone Security.com, Inc
Datawire Communication Network, a First Data Company
Payment Transmission ServicesDecember 31, 2007 Trustwave
Debit Technologies, Inc Customer Relationship ManagementMay 31, 2008 Information Exchange
Delphis Software Managed HostingNovember 30, 2007 Payment Software company (PSC)
Demandware Managed HostingJune 30, 2008 SecurityMetrics
6 of 22
(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.
© 2008 Visa U.S.A. Inc.
Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.
Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.
SERVICE PROVIDERVALIDATION
DATESERVICES
COVERED BY REVIEW (1) ASSESSOR
Visa U.S.A. Cardholder Information Security Program (CISP)
List of Compliant Service Providers - All
Deposit Computer Services, Inc Account Billing ServicesJuly 31, 2008 Self-Assessment
Dispute Resolution
DHD Media Internet Payment ProcessingJune 30, 2008 Trustwave
Digital Payment Technologies Payment ProcessingMay 31, 2008 Payment Software company (PSC)
Digital River Internet Payment ProcessingJuly 31, 2008 CyberTrust
Direct Mail Processors Merchant Payment ServicesFebruary 28, 2008 Fortrex Technologies
DST Output, LLC Payment ProcessingJanuary 31, 2008 FishNet Security
Ebocom, LLC Payment ProcessingApril 30, 2008 CyberTrust
eCommLink Debit Card ProcessingNovember 30, 2007 RSM McGladrey
Stored Value Card Processing
ECS/PayByComputer Internet Payment GatewayAugust 31, 2007 IGX Global
EDS Commercial Card Payment ProcessingMay 31, 2008 Trustwave
EDS Consumer Card Services Payment ProcessingSeptember 30, 2007 Trustwave
EDS Deposit Systems Payment ProcessingSeptember 30, 2007 Trustwave
EDS GM Card Vehicle Rewards Program
Rewards/Gift Card ProgramsJune 30, 2008 Trustwave
EDS Guidance Authorization Payment ProcessingNovember 30, 2007 Trustwave
EDS Merchant Acquirer Services Payment ProcessingSeptember 30, 2007 Trustwave
EDS Oregon eGovernment Managed Merchant HostingApril 30, 2008 Trustwave
EDS Pay for Convenience Internet Payment ProcessingApril 30, 2008 Trustwave
EDS Surveyor Report ProcessingJune 30, 2008 Trustwave
EFX Payment ProcessingMarch 31, 2008 T3i
Elan Financial Services Payment ProcessingApril 30, 2008 K3DES
Elan Financial Services (formerly GenPass)
Payment ProcessingJune 30, 2008 K3DES
Elan Financial Services Credit Card Issuing
Payment ProcessingNovember 30, 2007 Trustwave
Elavon (formerly NOVA) Payment ProcessingMay 31, 2008 Verisign
Electronic Clearing House (ECHO) Payment ProcessingSeptember 30, 2007 403 Labs
Electronic Merchant Systems Merchant Payment ProcessingApril 30, 2008 Trustwave
Electronic Payment Exchange (EPX)
Merchant Payment ProcessingApril 30, 2008 Payment Software Company (PSC)
Electronic Payments Inc Credit Card ServicesJuly 31, 2008 Information Exchange
Electronic Processing Services Merchant Payment ProcessingJanuary 31, 2008 Information Exchange
7 of 22
(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.
© 2008 Visa U.S.A. Inc.
Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.
Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.
SERVICE PROVIDERVALIDATION
DATESERVICES
COVERED BY REVIEW (1) ASSESSOR
Visa U.S.A. Cardholder Information Security Program (CISP)
List of Compliant Service Providers - All
Electronic Transaction Systems Corporation
Merchant Payment ProcessingJuly 31, 2007 Fortrex Technologies
Element Payment Services Payment ProcessingNovember 30, 2007 Information Exchange
Emergis Internet Payment GatewayJune 30, 2008 Trustwave
EMS Holland, a First Data Company
Payment ProcessingDecember 31, 2007 Trustwave
Encircle Payment ProcessingJuly 31, 2008 K3DES
Eperformax Centers Call Center ServicesMay 31, 2008 Hill & Associates
Epicenter Technologies Call Center ServicesFebruary 28, 2008 Controlcase
Epoch (a dba of Paycom.net) Internet Payment ProcessingNovember 30, 2007 Protiviti
eProcessing Network Internet Payment ProcessingApril 30, 2008 Trustwave
Mobile Payment Processing
POS Payment Processing
Epsilon Data Management Loyalty ProgramsAugust 31, 2008 CyberTrust
EVO Merchant Services Merchant Payment ProcessingJuly 31, 2007 Trustwave
Evolution Benefits Account Billing ServicesDecember 31, 2007 Self-Assessment
E-xact Transactions Merchant Payment ProcessingMay 31, 2008 Emergis
Excellence in Motivation Rewards/Gift Card ProgramsNovember 30, 2007 Information Exchange
Experian Information Solutions Credit ReportingSeptember 30, 2007 CyberTrust
ExtraMeasures Fraud and Risk AnalysisMay 31, 2008 PSC
EzGov Managed Merchant HostingNovember 30, 2007 IBM Internet Security Systems
Ezic, Inc. Payment ProcessingJuly 31, 2008 Information Exchange
Faith Direct Account Billing ServicesJuly 31, 2008 CrimsonSecurity
Farelogix Travel Profile ServicesApril 30, 2008 Self-Assessment
Fast Transact Inc Merchant Payment ProcessingMay 31, 2008 Contronl Case
Fidelity Information Services - (FIS) Chicago
Debit Card ProcessingNovember 30, 2007 IBM Internet Security Systems
Payment Processing
Fidelity Information Services - eFunds Prepaid Solutions
Payment ProcessingApril 30, 2008 Trustwave
Fidelity Information Services - Little Rock
Debit Card ProcessingMay 31, 2008 IBM Internet Security Systems
Payment Processing
Fidelity Information Services - Norcross GA
Payment ProcessingApril 30, 2008 IBM Internet Security Systems
8 of 22
(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.
© 2008 Visa U.S.A. Inc.
Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.
Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.
SERVICE PROVIDERVALIDATION
DATESERVICES
COVERED BY REVIEW (1) ASSESSOR
Visa U.S.A. Cardholder Information Security Program (CISP)
List of Compliant Service Providers - All
Fidelity Information Services - Plainview
Remittance ProcessingAugust 31, 2007 IBM Internet Security Systems
Fidelity Information Services Lisle - Remittance Processing
Remittance ProcessingNovember 30, 2007 IBM Internet Security Systems
Fidelity Information Services-St. Petersburg
Remittance ProcessingSeptember 30, 2007 IBM Internet Security Systems
Fifth Third Processing Solutions - Issuing and Switch-Providing Systems
Payment ProcessingJune 30, 2008 Trustwave
Fifth Third Processing Solutions-Acquiring Systems
Payment ProcessingJune 30, 2008 Trustwave
First American Payment Systems Merchant Payment ProcessingJune 30, 2008 IBM Internet Security Systems
First Data Government Solutions Merchant Payment ProcessingDecember 31, 2007 Trustwave
First Data International-ANZSA (Australia)
Merchant Payment ProcessingAugust 31, 2007 Trustwave
First Data International-CAN (China)
Merchant Payment ProcessingAugust 31, 2007 Trustwave
First Data International-Deutschland (Germany)
Merchant Payment ProcessingAugust 31, 2007 Trustwave
First Data International-Hellas (Greece)
Merchant Payment ProcessingDecember 31, 2007 Trustwave
First Data International-LAC (Latin American & Canada)
Merchant Payment ProcessingDecember 31, 2007 Trustwave
First Data International-Latvia Merchant Payment ProcessingDecember 31, 2007 Trustwave
First Data International-Lithuania Merchant Payment ProcessingDecember 31, 2007 Trustwave
First Data International-OmniPay Limited
Payment ProcessingDecember 31, 2007 Trustwave
First Data International-TeleCash (Germany)
Merchant Payment ProcessingOctober 31, 2007 Trustwave
First Data International-UK (Basildon)
Merchant Payment ProcessingDecember 31, 2007 Trustwave
First Data International-UK (Hellaby, formerly Active Resources)
Merchant Payment ProcessingDecember 31, 2007 Trustwave
First Data Merchant Services Payment ProcessingDecember 31, 2007 Trustwave
First Data Resources Payment ProcessingJanuary 31, 2008 Trustwave
First Data Retail ATM Services (formerly known as Concord Processing)
ATM ProcessingAugust 31, 2007 Trustwave
First Hawaiian Bank Payment ProcessingJuly 31, 2008 Trustwave
9 of 22
(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.
© 2008 Visa U.S.A. Inc.
Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.
Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.
SERVICE PROVIDERVALIDATION
DATESERVICES
COVERED BY REVIEW (1) ASSESSOR
Visa U.S.A. Cardholder Information Security Program (CISP)
List of Compliant Service Providers - All
First Horizon Merchant Services Payment ProcessingOctober 31, 2007 CyberTrust
First National Bank of Omaha Payment ProcessingJanuary 31, 2008 Trustwave
First National Merchant Solutions Payment ProcessingJanuary 31, 2008 Trustwave
First National Technology Solutions
Co-Location HostingMarch 31, 2008 Trustwave
Managed Hosting
Physical Security
FirstBank Data Corporation Payment ProcessingAugust 31, 2008 CyberTrust
Fiserv Credit Processing Services Payment ProcessingJuly 31, 2007 Payment Software Company (PSC)
Fiserv EFT Payment ProcessingMarch 31, 2008 Payment Software Company (PSC)
Florida Credit Union League Back Office Charge-backsApril 30, 2008 Self-Assessment
Florists’ Transworld Delivery Inc. Merchant Payment ProcessingMarch 31, 2008 Halock Security
FMS Inc. Debt Collection AgencyMay 31, 2008 Self-Assessment
Fort Knox National Company Internet Payment GatewayMay 31, 2008 CyberTrust
Fosdick Fulfillment Order FulfillmentJuly 31, 2008 Trustwave
Four51 Merchant Payment ProcessingFebruary 29, 2008 Solutionary
Fry Inc. Managed Merchant HostingMay 31, 2008 IBM Internet Security Systems
FSV Payment Systems Payment ProcessingMay 31, 2008 K3DES
Fulfillment Technologies Order FulfillmentNovember 30, 2007 Verisign
Galileo International Global Distribution SystemFebruary 28, 2008 Trustwave
Galileo Processing Merchant Payment ProcessingJuly 31, 2008 Trustwave
GC Services Internet Payment GatewayOctober 31, 2007 K3DES
Global Card Services Merchant Payment ProcessingMay 31, 2008 CyberTrust
Global Cash Access Payment ProcessingJuly 31, 2008 Digital Resources Group (DRG)
Global Collect Services Internet Payment ProcessingFebruary 28, 2008 Trustwave
Global Electronic Technology Internet Payment ProcessingJanuary 31, 2008 403 Labs
Global Payments, Inc. Payment ProcessingJuly 31, 2008 Trustwave
Global Technology Partners LLC Prepaid Card ProcessingJune 30, 2008 Coalfire
GlobalPayNet Payment ProcessingAugust 31, 2008 SecurityMetrics
Go Daddy Internet Payment GatewayOctober 31, 2007 Trustwave
Managed Merchant Hosting
Goconcierge.net Order FulfillmentJuly 31, 2008 Self-Assessment
10 of 22
(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.
© 2008 Visa U.S.A. Inc.
Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.
Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.
SERVICE PROVIDERVALIDATION
DATESERVICES
COVERED BY REVIEW (1) ASSESSOR
Visa U.S.A. Cardholder Information Security Program (CISP)
List of Compliant Service Providers - All
GoEmerchant Internet Payment ProcessingMay 31, 2008 IBM Internet Security Systems
Golden Retriever Systems Loyalty ProgramsApril 30, 2008 Trustwave
Google Internet Payment ProcessingJanuary 31, 2008 Core Security
Govolution Internet Payment ProcessingMay 31, 2008 IBM Internet Security Systems
Green Dot Prepaid Card ProcessingAugust 31, 2007 403 Labs
GSI Commerce Solutions Managed HostingSeptember 30, 2007 Trustwave
Hamer Technologies Payment GatewayDecember 31, 2007 SecurityMetrics
Harbor Payments Payment ProcessingSeptember 30, 2007 CyberTrust
Harland Clarke Direct MarketingOctober 31, 2007 IBM Internet Security Systems
Order Fulfillment
Harland Financial Solutions ATM ProcessingAugust 31, 2008 Crowe Chizek
Debit Card Processing
Payment Gateway
Harris Connect Managed HostingDecember 31, 2007 Trustwave
Harte-Hanks Direct MarketingJune 30, 2008 Trustwave
Targeted Marketing
Heartland Payment Systems Payment ProcessingApril 30, 2008 Trustwave
HostMySite.com Co-Location HostingApril 30, 2008 Self-Assessment
Physical Security
Hughes Network Systems Payment Transmission ServicesOctober 31, 2007 IBM Internet Security Systems
Humboldt Merchant Services Merchant Payment ProcessingOctober 31, 2007 SecurityMetrics
I.C. System Inc Account Management ServicesJuly 31, 2008 Self-Assessment
I_Tech Corporation ATM ProcessingJuly 31, 2008 Crowe Chizek
Debit Card Processing
i2c Incorporated Stored Value Card ManagementSeptember 30, 2007 Trustwave
IATS Ticketmaster Canada Merchant Payment ProcessingJune 30, 2008 Trustwave
ICT Group Customer Relationship ManagementOctober 31, 2007 Crimson Security
ID Analytics, Inc. Predictive Scoring for Identity Risk Management
June 30, 2008 Computer Task Group
iKobo Targeted MarketingJune 30, 2008 Self-Assessment
InComm Prepaid Card ProcessingDecember 31, 2007 IBM Internet Security Systems
Private Label Cards and Bank-Issued Transactions
Infinity Data Merchant Payment ProcessingOctober 31, 2007 Information Exchange
Infonox Merchant Payment ProcessingNovember 30, 2007 Digital Resources Group (DRG)
11 of 22
(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.
© 2008 Visa U.S.A. Inc.
Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.
Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.
SERVICE PROVIDERVALIDATION
DATESERVICES
COVERED BY REVIEW (1) ASSESSOR
Visa U.S.A. Cardholder Information Security Program (CISP)
List of Compliant Service Providers - All
Informed Decisions Merchant Payment ProcessingDecember 31, 2007 Trustwave
Innovative Gateway Solutions (IGS)
Merchant Payment ProcessingSeptember 30, 2007 Trustwave
Innovative Merchant Solutions (IMS)
Merchant Payment ProcessingSeptember 30, 2007 Trustwave
InstaMed Communications Payment ProcessingFebruary 28, 2008 Trustwave
Integrated Payment Systems (IPS) Denver, a First Data Company
Payment ProcessingFebruary 28, 2008 Trustwave
Intellipay Merchant Payment ProcessingFebruary 28, 2008 Trustwave
Intercept Payment ProcessingOctober 31, 2007 Coalfire
International Card Establishment Fraud and Risk AnalysisApril 30, 2008 Self-Assessment
International Merchant Services Fraud and Risk AnalysisApril 30, 2008 Trustwave
Interplx Technologies Expense ManagementDecember 31, 2007 Self-Assessment
IntraISP Software Solutions, LLC Internet Payment ProcessingMay 31, 2008 Trustwave
Intuition Systems Payment GatewayOctober 31, 2007 SecurityMetrics
iPass, Inc. Payment Transmission ServicesAugust 31, 2008 Digital Resources Group (DRG)
iPayment Merchant Payment ProcessingJune 30, 2008 Trustwave
iQor Call Center ServicesFebruary 28, 2008 CrimsonSecurity
IRN Payment Systems Account Management ServicesFebruary 28, 2008 Information Exchange
Iron Mountain Off Site Data ProtectionMay 31, 2008 CyberTrust
Records Management
Secure Shredding
ITA Software Merchant Payment ProcessingJune 30, 2007 Trustwave
iTransact Internet Payment ProcessingMay 31, 2008 SecurityMetrics
ITS Bank - Shazam Network Payment ProcessingApril 30, 2008 Trustwave
JetPay, LLC Payment ProcessingApril 30, 2008 Trustwave
Jettis Internet Payment GatewayJuly 31, 2007 Verisign
JPMorgan Xign Payment GatewayJuly 31, 2008 Trustwave
K/P Corporation Managed HostingApril 30, 2008 Self-Assessment
Order Fulfillment
Keynetics Merchant Payment ServicesMarch 31, 2008 Trustwave
Kincaid Technologies Merchant Payment ProcessingJuly 31, 2007 Trustwave
Kubra Data Transfer, Inc. Merchant Payment ProcessingJuly 31, 2008 Trustwave
12 of 22
(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.
© 2008 Visa U.S.A. Inc.
Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.
Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.
SERVICE PROVIDERVALIDATION
DATESERVICES
COVERED BY REVIEW (1) ASSESSOR
Visa U.S.A. Cardholder Information Security Program (CISP)
List of Compliant Service Providers - All
Lethoff, Inc. Merchant Payment ProcessingNovember 30, 2007 CyberTrust
Lighthouse1 Health Savings Account ServicesJuly 31, 2008 Self-Assessment
Link2Gov Federal, State, and County Tax Payments
February 28, 2008 Trustwave
LinkPoint International, a First Data Company
Merchant Payment ProcessingDecember 31, 2007 Trustwave
Litle & Co Merchant Payment ProcessingApril 30, 2008 Payment Software Company (PSC)
Logitek Payment ProcessingSeptember 30, 2007 Trustwave
LOTSolutions / Life of the South Merchant Payment ServicesJune 30, 2008 Trustwave
Lundquist Consulting Bankruptcy Notification ServicesDecember 31, 2007 Trustwave
M & T Bank Payment ProcessingMay 31, 2008 BT INS
Magic Wrighter Payment ProcessingJuly 31, 2008 Trustwave
Maritz Loyalty Marketing Loyalty ProgramsDecember 31, 2007 IBM Internet Security Systems
Marketworks Order FulfillmentApril 30, 2008 Trustwave
Report Processing
Maverick Network Solutions, Inc Payment ProcessingJuly 31, 2008 SecureIT
MBS Insight, Inc Database Marketing ServicesMay 31, 2008 K3DES
MegaPath (formerly Netifice Communications)
Payment Transmission ServicesJanuary 31, 2008 Trustwave
Mellon Bank Payment ProcessingMay 31, 2008 Protiviti
Merchant e-Solutions Merchant Payment ProcessingJanuary 31, 2008 Digital Resources Group (DRG)
Merchant Link, LLC Merchant Payment ProcessingJanuary 31, 2008 Trustwave
Merchant Partners Merchant Payment ProcessingJuly 31, 2008 403 Labs
Merchant Plus Payment GatewayJuly 31, 2008 Trustwave
Payment Processing
Merchant Processing International Credit Card ServicesApril 30, 2008 Self-Assessment
Merchant Service Center Merchant Payment ServicesNovember 30, 2007 Information Exchange
Merchants Billing Services Merchant Payment ProcessingNovember 30, 2007 Information Exchange
Mercury Payment Systems Merchant Payment ProcessingMarch 31, 2008 Coalfire
Merlin Solutions, LLC ChargebacksApril 30, 2008 Trustwave
Dispute Resolution
Meta Payment Systems IssuerApril 30, 2008 Trustwave
13 of 22
(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.
© 2008 Visa U.S.A. Inc.
Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.
Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.
SERVICE PROVIDERVALIDATION
DATESERVICES
COVERED BY REVIEW (1) ASSESSOR
Visa U.S.A. Cardholder Information Security Program (CISP)
List of Compliant Service Providers - All
Metavante Corporation-Acquiring Solutions, ATM Driving & Gateway Services
ATM ProcessingApril 30, 2008 Trustwave
Payment Gateway
Metavante Corporation-Issuing Solutions, Debit Account, Healthcare Payment Card, and Prepaid Card Solutions
Debit Card ProcessingApril 30, 2008 Trustwave
Metavante-Credit Card and Merchant Transaction Processing
Merchant Payment ProcessingApril 30, 2008 Trustwave
MHM Resources Employee Benefits ProgramsAugust 31, 2007 Self-Assessment
Micros Systems, Inc. Managed HostingJanuary 31, 2008 Trustwave
Millennium Communications Inc. Managed HostingApril 30, 2008 Self-Assessment
Minacs Worldwide Inc. April 08, 2008 Trustwave
Modern Payment Solutions Account Billing ServicesDecember 31, 2007 CyberTrust
Moneris Payment ProcessingJuly 31, 2008 Dyntek
Money Centers of America EFT ProcessingDecember 31, 2007 K3DES
MoneyTree ATM ATM ProcessingApril 30, 2008 Information Exchange
Montrose Travel Bill Payment ProcessingJuly 31, 2008 Self-Assessment
Travel Profile Services
mPay Gateway Prepaid Card ProcessingAugust 31, 2007 SecurityMetrics
Mtrex (Vision Bankcard, Inc.) Merchant Payment ServicesFebruary 28, 2008 Trustwave
Payment Processing
MTXEPS Payment ProcessingSeptember 30, 2007 Trustwave
Multi Service Corp Private Label Cards and Bank-Issued Transactions
February 28, 2008 Trustwave
National Bankcard Services Payment ProcessingNovember 30, 2007 RSM McGladrey
National Card Services Stored Value Card ManagementSeptember 30, 2007 K3DES
National Electronics Warranty Claim ServicesJune 30, 2008 Self-Assessment
Visa Cardholder Enhancement Management Services
National Merchant Center Merchant Payment ProcessingMarch 30, 2008 Digital Resources Group (DRG)
Nationwide Payment Solutions Payment Transmission ServicesNovember 30, 2007 Information Exchange
Navitaire Payment ProcessingDecember 31, 2007 Trustwave
NBS Technologies Payment Solutions
Merchant Payment ProcessingSeptember 30, 2007 CyberTrust
NCMIC Finance Corporation Merchant Payment ServicesOctober 31, 2007 SecurityMetrics
14 of 22
(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.
© 2008 Visa U.S.A. Inc.
Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.
Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.
SERVICE PROVIDERVALIDATION
DATESERVICES
COVERED BY REVIEW (1) ASSESSOR
Visa U.S.A. Cardholder Information Security Program (CISP)
List of Compliant Service Providers - All
NCO Group Account Management ServicesJanuary 31, 2008 Verizon Business – Security
Nelnet Business Solutions, Inc Merchant Payment ProcessingApril 30, 2008 Trustwave
NETBilling Account Billing ServicesJuly 31, 2007 SecurityMetrics
NetSpend Prepaid Card ProcessingDecember 31, 2007 Verisign
NetSuite Internet Payment ProcessingJanuary 31, 2008 Trustwave
Network Merchants Internet Payment ProcessingMarch 31, 2008 Trustwave
Network Solutions (MonsterCommerce)
Merchant Payment ProcessingOctober 31, 2007 Payment Software Company (PSC)
New Edge Networks Payment Transmission ServicesJuly 31, 2008 Trustwave
Newtek Merchant Services Merchant Payment ProcessingOctober 31, 2007 SecurityMetrics
Nobel Electronic Transfer Payment ProcessingJuly 30, 2007 K3DES
NoCheck Account Billing ServicesAugust 31, 2007 TruArx
North American Bancard Payment ProcessingSeptember 30, 2007 Information Exchange
NXGEN A Transaction Company Fraud and Risk AnalysisJuly 31, 2007 Self-Assessment
NYCE Payments Network, LLC Payment ProcessingApril 30, 2008 Trustwave
Obopay Mobile Payment ProcessingMay 31, 2008 IBM Internet Security Systems
Official Payments Corporation Federal, State, and County Tax Payments
February 28, 2008 Trustwave
Payment Processing
OMS Online, LLC Managed Merchant HostingJune 30, 2008 SecurityMetrics
Order Fulfillment
OneBridge, Inc. Payment ProcessingAugust 31, 2008 Crowe Chizek
Online Resources Card and Credit Services
Web-based ReportingOctober 31, 2007 Trustwave
Opticard Payment Services Inc. Prepaid Card ProcessingApril 30, 2008 Information Exchange
Private Label Cards and Bank-Issued Transactions
Stored Value Card Processing
Optimal Payments Merchant Payment ProcessingJune 30, 2008 Trustwave
Oracle on Demand Managed Merchant HostingAugust 31, 2008 Coalfire
ORCC - eCommerce Division: Columbus
Merchant Payment ServicesMay 31, 2008 Trustwave
ORCC - eCommerce Division: Princeton
Merchant Payment ProcessingMay 31, 2008 Trustwave
OrderMotion Order FulfillmentMay 31, 2007 Jefferson Wells
15 of 22
(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.
© 2008 Visa U.S.A. Inc.
Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.
Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.
SERVICE PROVIDERVALIDATION
DATESERVICES
COVERED BY REVIEW (1) ASSESSOR
Visa U.S.A. Cardholder Information Security Program (CISP)
List of Compliant Service Providers - All
OrderTalk Internet Payment ProcessingJune 30, 2007 Trustwave
Paciolan, Inc. Merchant Payment ProcessingOctober 31, 2007 Trustwave
Palm Coast Data Order FulfillmentJanuary 31, 2008 K3DES
PAMS Lunchroom LLC Expense ManagementAugust 31, 2008 Self-Assessment
PassPort EFT Solutions ATM ProcessingDecember 31, 2007 Trustwave
Pay DQ Merchant Payment ProcessingNovember 30, 2007 Solutionary
Pay Simple Gift Card ProcessingJune 30, 2008 Coalfire
Payment Processing
PayByTouch Solutions - Delaware Payment ProcessingJuly 31, 2007 Trustwave
Paycom Billing Services (dba Epoch)
Internet Payment ProcessingNovember 30, 2007 Protiviti
PayConnexion Bill Payment ProcessingApril 30, 2008 Jefferson Wells
PAYjr Internet Payment GatewayOctober 31, 2007 Information Exchange
PayJunction Merchant Payment ProcessingApril 30, 2008 Payment Software Company (PSC)
Payment Clearing Internet Payment ProcessingMay 31, 2008 SecurityMetrics Inc.
Payment Data Systems Private Label Cards and Bank-Issued Transactions
May 31, 2008 Trustwave
Payment Processing, Inc. Merchant Payment ProcessingApril 30, 2008 Trustwave
Paymetric Internet Payment GatewayAugust 31, 2008 Trustwave
PayPal Internet Payment ProcessingDecember 31, 2007 IBM Internet Security Systems
PayPoint Electronic Payment Systems, a First Data Company
Payment ProcessingAugust 31, 2007 Trustwave
PayTrace Internet Payment GatewayAugust 31, 2008 Information Exchange
PEMCO Payment ProcessingJune 30, 2008 Coalfire
PeopleSupport GCA Call Center ServicesOctober 31, 2007 Verisign
PeopleSupport-Costa Rica Call Center ServicesMay 31, 2008 Verisign
PFSweb, Inc. Order FulfillmentApril 30, 2008 Trustwave
Pipeline Data Payment ProcessingSeptember 30, 2007 Trustwave
Planet eShop Payment ProcessingOctober 31, 2007 Information Exchange
Planet Payment Multi-Currency Payment ProcessingMarch 31, 2008 Trustwave
Plug & Pay Technologies, Inc. Internet Payment ProcessingJune 30, 2008 SecurityMetrics
POS Portal Merchant Payment ProcessingAugust 31, 2008 Coalfire
POST Integrations, Inc. Payment ProcessingApril 30, 2008 CyberTrust
16 of 22
(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.
© 2008 Visa U.S.A. Inc.
Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.
Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.
SERVICE PROVIDERVALIDATION
DATESERVICES
COVERED BY REVIEW (1) ASSESSOR
Visa U.S.A. Cardholder Information Security Program (CISP)
List of Compliant Service Providers - All
Prairie Interactive Messaging Payment GatewayMay 31, 2008 Solutionary
Preferred Health Payment ProcessingAugust 31, 2008 Trustwave
Premiere Global Services Records ManagementApril 30, 2008 Trustwave
Prestige International Issuing ProcessingAugust 31, 2008 Self-Assessment
Presto ATM ProcessingNovember 30, 2007 Solutionary
Priority Payment Systems Merchant Payment ProcessingApril 30, 2008 SecurityMetrics
Process America Payment ProcessingSeptember 30, 2007 Information Exchange
Profit Margins, Inc. Direct MarketingDecember 31, 2007 Self-Assessment
Progressive Distribution Merchant Payment ProcessingApril 30, 2008 Janus Associates
ProPay USA, Inc. Internet Payment ProcessingJune 30, 2008 SecurityMetrics
MOTO Payment Processing
Propco Marketing Call Center ServicesApril 30, 2008 Self-Assessment
PropertyBridge Merchant Payment ProcessingMarch 31, 2008 SecurityMetrics
PSCU Financial Services, Inc. Bill Payment ProcessingFebruary 28, 2008 Verizon Business
Dispute Resolution
PSIGate Internet Payment GatewayApril 30, 2008 Trustwave
Pulse Network LLC Payment ProcessingJuly 31, 2008 K3DES
Qgiv Payment ProcessingMay 31, 2008 SecurityMetrics
QS/1 Payment ProcessingJune 30, 2008 Trustwave
Quantum Services Payment GatewayOctober 31, 2007 Raven Eye
Quickbooks Merchant Services Merchant Payment ProcessingSeptember 30, 2007 Trustwave
Radiant Systems Payment ProcessingOctober 31, 2007 Trustwave
RBS Lynk Payment ProcessingJuly 31, 2008 Trustwave
Ready Financial Group Customer Relationship ManagementJuly 31, 2008 Self-Assessment
Receivable Management Services Call Center ServicesJune 30, 2007 Trustwave
Debt Collection Agency
RegOnline Account Management ServicesApril 30, 2008 Coalfire
RemitCo, a First Data Company Merchant Payment ProcessingAugust 31, 2007 Trustwave
RentPayment Bill Payment ProcessingApril 30, 2008 SecurityMetrics
Resurgent Capital Services Bankruptcy Notification ServicesAugust 31, 2008 Protiviti
Credit Card Services
RevTrak, Inc Internet Payment ProcessingApril 30, 2008 SecurityMetrics, Inc
Rewards Network Rewards/Gift Card ProgramsJuly 31, 2008 Sunera
17 of 22
(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.
© 2008 Visa U.S.A. Inc.
Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.
Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.
SERVICE PROVIDERVALIDATION
DATESERVICES
COVERED BY REVIEW (1) ASSESSOR
Visa U.S.A. Cardholder Information Security Program (CISP)
List of Compliant Service Providers - All
RocketGate Payment ProcessingOctober 31, 2007 403 Labs
RT Lawrence Bill Payment ProcessingApril 30, 2008 Trustwave
Payment Processing
Sabre, Inc. Global Distribution SystemMarch 31, 2008 Jefferson Wells
Sage Payment Solutions (formerly Verus Card Services)
Merchant Payment ProcessingJuly 31, 2008 CyberTrust
Sallie Mae Managed HostingApril 30, 2008 FishNet Security
School-Link Technologies Stored Value Card ManagementApril 30, 2008 Coalfire
Secure Electronic Transmissions Payment Transmission ServicesAugust 31, 2007 Solutionary
SecureNet Internet Payment GatewayJune 30, 2008 Fortrex Technologies
Sequoia Retail Systems Data-Center HostingJuly 31, 2008 Self-Assessment
Physical Security
Servebase Payment ProcessingSeptember 30, 2007 One-Sec
ServiceU Internet Payment ProcessingApril 30, 2008 K3DES
SHC Direct Loyalty ProgramsApril 30, 2008 Trustwave
Shift4 Merchant Payment ProcessingMay 31, 2008 Trustwave
SIA Select Services Check ProtectionDecember 31, 2007 Self-Assessment
New Merchant Accounts
Rewards/Gift Card Programs
Signature Card Services Customer Relationship ManagementOctober 31, 2007 SecurityMetrics
Simmons First National Bank Payment ProcessingSeptember 30, 2007 Trustwave
SITA Global Distribution SystemApril 30, 2008 IBM Internet Security Systems
Skipjack Financial Services County Tax PaymentsFebruary 28, 2008 Trustwave
Internet Payment Processing
Skylight Financial, Inc. Debit Card ProcessingJune 30, 2008 Information Exchange
SlimCD Merchant POS ProcessingSeptember 30, 2007 Enterprise Risk Management
SoundBite Communications Credit Card Account ServicingAugust 31, 2007 Self-Assessment
Southern Datacomm Merchant Payment ProcessingSeptember 30, 2007 Trustwave
Speedpay (AKA Western Union Payment Services)
Merchant Payment ProcessingDecember 31, 2007 Trustwave
Spendvision Account Management ServicesApril 30, 2008 Symantec
Springbok Payment ProcessingSeptember 30, 2007 K3DES
Stamps.com Internet Payment ProcessingAugust 31, 2008 Trustwave
18 of 22
(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.
© 2008 Visa U.S.A. Inc.
Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.
Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.
SERVICE PROVIDERVALIDATION
DATESERVICES
COVERED BY REVIEW (1) ASSESSOR
Visa U.S.A. Cardholder Information Security Program (CISP)
List of Compliant Service Providers - All
STAR Networks, Inc. (Northeast, Southeast and West Platforms), a First Data Company
Payment ProcessingAugust 31, 2007 Trustwave
Star Processing Services, Inc. (Northeast Platform), a First Data Company (formerly listed as STAR Networks)
Payment ProcessingAugust 31, 2007 Trustwave
Star Systems, Inc. (Southeast and West Platforms), a First Data Company (formerly listed as STAR Networks)
Payment ProcessingAugust 31, 2007 Trustwave
Stark Brother's Fulfillment Services Order FulfillmentApril 30, 2008 Trustwave
Sterling Payment Technologies Merchant Payment ProcessingAugust 31, 2007 Trustwave
Web-based Reporting
Strategic Profits Payment ProcessingApril 30, 2008 MTS Allstream
Strobe Back Office Services for marketing and collection
January 31, 2008 Self-Assessment
Sunbelt Fulfillment Services Publication FulfillmentApril 30, 2008 Self-Assessment
T.K. Keith Company, Inc. (dba Primax)
Payment ProcessingJuly 31, 2008 CyberTrust
TCIM Services, Inc. Bill Payment ProcessingSeptember 30, 2007 Self-Assessment
Credit Card Account Servicing
TeleCheck International Inc., a First Data Company
Payment ProcessingAugust 31, 2007 Trustwave
Teleflora Payment ProcessingFebruary 28, 2008 Trustwave
Teleperformance Mexico Customer Relationship ManagementMarch 31, 2008 Tevora Business Solutions
Teleperformance USA Customer Relationship ManagementFebruary 28, 2008 Tevora Business Solutions
Telvista Payment ProcessingJanuary 31, 2008 Trustwave
TermNet Merchant Services Payment ProcessingJune 30, 2008 Trustwave
TERREMARK WORLDWIDE, INC. (Data Return)
Managed HostingOctober 31, 2007 Verisign
The Members Group Payment ProcessingJanuary 31, 2008 RSM McGladrey
Thermeon, Corporation Payment GatewayApril 30, 2008 Tevora Business Solutions
Ticketmaster, Inc Merchant Payment ProcessingJune 30, 2008 Trustwave
Tier Technologies Internet Payment ProcessingApril 30, 2008 VeriSign
IVR Payment Processing
Time Customer Service Order FulfillmentJuly 31, 2008 Symantec
TNS Smart Network Payment ProcessingFebruary 28, 2008 Trustwave
19 of 22
(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.
© 2008 Visa U.S.A. Inc.
Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.
Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.
SERVICE PROVIDERVALIDATION
DATESERVICES
COVERED BY REVIEW (1) ASSESSOR
Visa U.S.A. Cardholder Information Security Program (CISP)
List of Compliant Service Providers - All
Toccata April 30, 2008 PSC
Total Merchant Services Merchant Payment ProcessingFebruary 28, 2008 Information Exchange
TouchNet Internet Payment ProcessingApril 30, 2008 Trustwave
Town and North Bank Credit Card Services
Account Management ServicesFebruary 28, 2008 Trustwave
TPG TELEMANAGEMENT, INC Customer Relationship ManagementSeptember 30, 2007 Self-Assessment
TranLogix, Inc Federal, State, and County Tax Payments
April 30, 2008 Trustwave
Internet Payment Gateway
Loyalty Programs
Stored Value Card Processing
Transaction Network Services (Dialect)
Payment ProcessingJune 30, 2008 Vectra Corporation (AP Assessor)
Transaction Network Services (TNS)
Payment ProcessingJune 30, 2008 Trustwave
Payment Transmission Services
Transaction Payment Systems (TPS NJ)
Payment ProcessingSeptember 30, 2007 Trustwave
Transaction Transport Technologies (T3)
Payment GatewayJuly 31, 2008 Trustwave
Payment Processing
Payment Transmission Services
Transcontinental Direct Mail Gard Order FulfillmentApril 30, 2008 Crimson Security
TransFirst Merchant Payment ProcessingMay 31, 2008 Trustwave
TransVerse Systems April 30, 2008 INFORMATION EXCHANGE, INC
Tranzact Direct MarketingMay 31, 2008 Verisign
TrustCommerce Merchant Payment ProcessingApril 30, 2008 403 Labs
TSYS (Issuing Processing) Payment ProcessingJanuary 31, 2008 Trustwave
TSYS Acquiring Solutions (formerly Vital Processing Services)
Payment ProcessingApril 30, 2008 Trustwave
TSYS Debt Management Debt Collection AgencyJuly 31, 2008 Self-Assessment
TSYS Loyalty (IM Platform) Loyalty ProgramsJuly 31, 2008 Trustwave
TSYS Loyalty (TLP Platform) Loyalty ProgramsJuly 31, 2008 Trustwave
TSYS Prepaid Prepaid Card ProcessingJuly 31, 2008 Trustwave
TSYS Procard Expense ManagementJanuary 31, 2008 Trustwave
Twin Oaks Account Billing ServicesFebruary 28, 2008 Janus Associates
20 of 22
(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.
© 2008 Visa U.S.A. Inc.
Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.
Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.
SERVICE PROVIDERVALIDATION
DATESERVICES
COVERED BY REVIEW (1) ASSESSOR
Visa U.S.A. Cardholder Information Security Program (CISP)
List of Compliant Service Providers - All
United Bank Card Credit Card ServicesJuly 31, 2008 Information Exchange
UniteU Technologies, Inc Payment GatewayAugust 31, 2008 SecurityMetrics
Universal Money Centers Inc. Payment ProcessingSeptember 30, 2007 Information Exchange
US Bank ATM Banking Payment ProcessingApril 30, 2008 K3DES
US Bank Credit Card Issuing Payment ProcessingNovember 30, 2007 Trustwave
US Bank E-Payment Service Internet Payment ProcessingJanuary 31, 2008 Trustwave
US Bank Gaming Services Payment ProcessingApril 30, 2008 K3DES
USA ePay Internet Payment ProcessingApril 30, 2008 Trustwave
USA Fulfillment, Inc. Order FulfillmentDecember 31, 2007 Verisign
USA Payment Systems Payment ProcessingDecember 31, 2007 K3DES
ValetPay Merchant Payment ProcessingSeptember 30, 2007 Fortrex Technologies
Vanco Services Merchant Payment ProcessingJanuary 31, 2008 SecurityMetrics
vCommerce Internet Payment GatewaySeptember 30, 2007 403 Labs
Ventanex April 30, 2008 Self-Assessment
VERePAY (formerly VEReFIED) Merchant Payment ProcessingOctober 31, 2007 Solutionary
Verifi ChargebacksJune 30, 2008 Trustwave
Risk Management
Verified by Visa Merchant Services
Verifone Merchant Payment ProcessingJune 30, 2008 Trustwave
Verifone Transportation Systems Mobile Payment ProcessingApril 30, 2008 Fortrex Technologies
Verizon Business (formerly MCI) Payment Transmission ServicesJanuary 31, 2008 Trustwave
Vesta Corporation Payment GatewayJune 30, 2008 Verisign
Vindicia Online Fraud Protection ServicesMarch 31, 2008 Payment Software Company (PSC)
VIPGift Gift Card ProcessingJuly 31, 2007 Self-Assessment
Stored Value Card Management
Visa, Inc. & Visa Data Processing Payment ProcessingAugust 31, 2008 Trustwave
Voice Data Solutions Payment ProcessingSeptember 30, 2007 Trustwave
Volusion Internet Payment GatewayJanuary 31, 2008 Payment Software Company (PSC)
WageWorks Prepaid Employee Benefits ProgramsApril 30, 2008 RSM McGladrey
Washington Metropolitan Area Transit Authority
Passenger TransportJune 30, 2008 ControlCase
Way Systems Mobile Payment ProcessingOctober 31, 2007 Jefferson Wells
WayPort Payment Transmission ServicesDecember 31, 2007 Trustwave
21 of 22
(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.
© 2008 Visa U.S.A. Inc.
Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.
Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.
SERVICE PROVIDERVALIDATION
DATESERVICES
COVERED BY REVIEW (1) ASSESSOR
Visa U.S.A. Cardholder Information Security Program (CISP)
List of Compliant Service Providers - All
West Business Services: WBS Data Vault
Call Center ServicesApril 30, 2008 Trustwave
Payment Gateway
West Direct - Direct Response Call Center ServicesApril 30, 2008 Trustwave
West Direct - Smartsell Direct MarketingOctober 31, 2007 Trustwave
West Interactive DataGuard IVR Payment ProcessingApril 30, 2008 Trustwave
West Telemarketing Corporation Call Center ServicesDecember 31, 2007 CyberTrust
World Access Service Corporation Visa Cardholder Enhancement Management Services
February 28, 2008 Trustwave
Worldspan Payment ProcessingOctober 31, 2007 BT INS
Xtec Managed HostingApril 30, 2008 Information Exchange
Yahoo! Stores Internet Payment ProcessingNovember 30, 2007 Symantec
YourPay, a First Data Company Merchant Payment ProcessingDecember 31, 2007 Trustwave
Zarlenga & Seltzer Inc Credit Card ServicesJuly 31, 2008 SecurityMetrics
Managed Hosting
22 of 22
(1) CISP reviews represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.
© 2008 Visa U.S.A. Inc.
Inclusion on this list indicates only that the service provider successfully completed a CISP assessment following requirements prescribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices.
Visa has no duty to Members, merchants, processors or other third parties to obtain or review reports from any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.