the mastercard compliant service provider list the mastercard compliant service provider list...

The Mastercard Compliant Service Provider List

Service Provider Name Region AOC Date Assessor

A company’s name appears on this Compliant Service Provider List if (i) MasterCard has received a copy of an Attestation of Compliance (AOC) by a Qualified Security Assessor (QSA) reflecting validation of the company being PCI DSS compliant and (ii) MasterCard records reflect the company is registered as a Service Provider by one or more MasterCard Customers. The date of the AOC and the name of the QSA are also provided. Each AOC is valid for one year. MasterCard receives copies of AOCs from various sources.

This Compliant Service Provider List is provided solely for the convenience of MasterCard Customers and any Customer that relies upon or otherwise uses this Compliant Service Provider list does so at the Customer’s sole risk. While MasterCard endeavors to keep the list current as of the date set forth in the footer, MasterCard disclaims any and all warranties of any kind, including any warranty of accuracy or completeness or fitness for any particular purpose. MasterCard disclaims any and all liability of any nature relating to or arising in connection with the use of or reliance on the Compliant Service Provider List or any part thereof. Each MasterCard Customer is obligated to comply with MasterCard Rules and other Standards pertaining to use of a Service Provider.

As a reminder, an AOC by a QSA provides a “snapshot” of security controls in place at a point in time.

DESV

1&1 Internet SE (1&1, 1&1 ipayment, ipayment.de)

05/09/2016 Security Research & Consulting GmbHEurope

1Link (Guarantee) Limited 11/17/2015 TrustwaveSAMEA

1Shoppingcart.com (Web.com Group, lnc.) 04/13/2016 SecurityMetricsUS

1stPayGateWay, LLC 05/27/2016 IBM Internet Security Systems (ISS)US

2138617 Ontario Inc. (HostedPCI Inc.) 10/13/2016 NCI Secured IntelligenceCanada

24 Solutions AB 06/15/2016 CryptoNet SrlEurope

24/7 Customer, Inc. 03/26/2016 ControlCaseUS

2C Processor USA, LLC 03/07/2016 Information Exchange Inc.US

2C2P Pte., Ltd. 01/06/2016 TrustwaveAsia Pacific

2Checkout.com (2CO E-Commerce Payments LTD)

10/26/2016 DirectDefenseUS

3C Payment Luxembourg S.A. (formerly SIX Payment Services Luxembourg SA)

12/15/2015 NTT Security Ltd.Europe

3Cinteractive Corporation 08/22/2016 Online EnterprisesUS

3dCart (Informat 2000 Corp) 03/10/2016 SecurityMetricsUS

3Delta Systems, Inc. 09/12/2016 FortrexUS

Wednesday, November 16, 2016 Page 1 of 66

The Mastercard Compliant Service Provider List

Service Provider Name Region AOC Date Assessor

A company’s name appears on this Compliant Service Provider List if (i) MasterCard has received a copy of an Attestation of Compliance (AOC) by a Qualified Security Assessor (QSA) reflecting validation of the company being PCI DSS compliant and (ii) MasterCard records reflect the company is registered as a Service Provider by one or more MasterCard Customers. The date of the AOC and the name of the QSA are also provided. Each AOC is valid for one year. MasterCard receives copies of AOCs from various sources.

This Compliant Service Provider List is provided solely for the convenience of MasterCard Customers and any Customer that relies upon or otherwise uses this Compliant Service Provider list does so at the Customer’s sole risk. While MasterCard endeavors to keep the list current as of the date set forth in the footer, MasterCard disclaims any and all warranties of any kind, including any warranty of accuracy or completeness or fitness for any particular purpose. MasterCard disclaims any and all liability of any nature relating to or arising in connection with the use of or reliance on the Compliant Service Provider List or any part thereof. Each MasterCard Customer is obligated to comply with MasterCard Rules and other Standards pertaining to use of a Service Provider.

As a reminder, an AOC by a QSA provides a “snapshot” of security controls in place at a point in time.

DESV

ABC Financial Services, Inc. 07/29/2016 SecurityMetricsUS

Abila, Inc. (formerly Avectra) 08/01/2016 Coalfire Systems, Inc.US

Abtran Ltd. 10/01/2016 RitsEurope

Accelerated Payment Technologies: a division of Global Payments Direct, Inc. (OpenEdge Payments LLC)

07/14/2016 Payment Software Company (PSC)US

Accenture LLP 09/26/2015 Verizon/CybertrustUS

ACCEO Solutions Inc. 08/31/2016 UbitrakCanada

Acceptiva, LLC 09/15/2016 TrustwaveUS

Accertify, Inc. 06/17/2016 Halock Security LabsUS

Accesso, LLC 02/08/2016 TrustwaveUS

AccountNow, Inc. 10/31/2015 TrustwaveUS

Accumulate AB 09/30/2015 24 Solutions ABEurope

ACI Worldwide - Retail Decisions Inc. 12/29/2015 TrustwaveUS

ACI Worldwide, Inc. 11/20/2015 TrustwaveUS

Acquired Limited 01/22/2016 Coalfire Systems, Inc.Europe

ACS@Xerox, LLC (Xerox FPS Lockbox SunTrust Service)

07/16/2016 Cadence AssuranceUS

Active Network (Active Merchant Services) [formerly (Infospherix, ReserveWorld, AWO)]

10/31/2015 K3DES LLCUS

Acumera, Inc. 07/08/2016 Berkeley Research Group, LLCUS

Adelante Software Limited 04/23/2016 Pentest Partners Consulting LLP (PTP)Europe

Adflex Limited 07/29/2016 Evolution LTDEurope

Advam Pty Ltd. 04/26/2016 TrustwaveAsia Pacific

Wednesday, November 16, 2016 Page 2 of 66

The Mastercard Compliant Service Provider List

Service Provider Name Region AOC Date Assessor

A company’s name appears on this Compliant Service Provider List if (i) MasterCard has received a copy of an Attestation of Compliance (AOC) by a Qualified Security Assessor (QSA) reflecting validation of the company being PCI DSS compliant and (ii) MasterCard records reflect the company is registered as a Service Provider by one or more MasterCard Customers. The date of the AOC and the name of the QSA are also provided. Each AOC is valid for one year. MasterCard receives copies of AOCs from various sources.

This Compliant Service Provider List is provided solely for the convenience of MasterCard Customers and any Customer that relies upon or otherwise uses this Compliant Service Provider list does so at the Customer’s sole risk. While MasterCard endeavors to keep the list current as of the date set forth in the footer, MasterCard disclaims any and all warranties of any kind, including any warranty of accuracy or completeness or fitness for any particular purpose. MasterCard disclaims any and all liability of any nature relating to or arising in connection with the use of or reliance on the Compliant Service Provider List or any part thereof. Each MasterCard Customer is obligated to comply with MasterCard Rules and other Standards pertaining to use of a Service Provider.

As a reminder, an AOC by a QSA provides a “snapshot” of security controls in place at a point in time.

DESV

Adyen B.V. 08/16/2016 Payment Software Company (PSC)Europe

Affinity Solutions LLC 12/15/2015 Coalfire Systems, Inc.US

Aimia Canada Inc. and Aimia Proprietary Loyalty Canada Inc

06/17/2016 ControlCaseCanada

Airlines Reporting Corporation (ARC) 11/18/2015 Schellman & Company, Inc.US

Aizan Technologies Inc. 08/18/2016 DatassurantCanada

Akamai Technologies Inc. 06/28/2016 Cisco Systems, Inc.US

Alacriti Payments, LLC 08/08/2016 Dara SecurityUS

Alegeus Technologies, LLC 05/19/2016 TrustwaveUS

Aliaswire, Inc. 09/26/2016 Dara SecurityUS

Alignet SAC 12/24/2015 ControlCaseLatin Americ

Alipay.com Co., Ltd. (Alipay HangLv) 12/26/2015 atsec (Beijing) Information Technology CAsia Pacific

Alliance Bank Malaysia Berhad 03/11/2016 Worldline International (Malaysia) Sdn. BAsia Pacific

Alliance Data Card Services (formerly Alliance Data - Retail Services)

02/19/2016 Verizon/CybertrustUS

AllianceOne Incorporated 10/10/2016 A-Lign Security and Compliance ServicesUS

Allied Wallet Ltd. (GTBill, Baltic Bill) 02/05/2016 DirectDefenseUS

Allpay Limited 02/09/2016 Sysnet Ltd.Europe

Alorica Inc. 12/10/2015 K3DES LLCUS

Alpha Card Services Inc. 10/28/2016 Information Exchange Inc.US

Alpha Note, Inc. 12/09/2015 International Certificate Authority of Mgt Asia Pacific

Alpine Card Service Pvt. Ltd. 09/20/2016 TrustwaveAsia Pacific

Altapay A/S (formerly Pensio A/S) 09/21/2016 FortConsult A/SEurope

Wednesday, November 16, 2016 Page 3 of 66

The Mastercard Compliant Service Provider List

Service Provider Name Region AOC Date Assessor

A company’s name appears on this Compliant Service Provider List if (i) MasterCard has received a copy of an Attestation of Compliance (AOC) by a Qualified Security Assessor (QSA) reflecting validation of the company being PCI DSS compliant and (ii) MasterCard records reflect the company is registered as a Service Provider by one or more MasterCard Customers. The date of the AOC and the name of the QSA are also provided. Each AOC is valid for one year. MasterCard receives copies of AOCs from various sources.

This Compliant Service Provider List is provided solely for the convenience of MasterCard Customers and any Customer that relies upon or otherwise uses this Compliant Service Provider list does so at the Customer’s sole risk. While MasterCard endeavors to keep the list current as of the date set forth in the footer, MasterCard disclaims any and all warranties of any kind, including any warranty of a