Cisp List of Pcidss Compliant Service Providers

62
Global List of PCI DSS Validated Service Providers The companies listed below were validated as being PCI DSS compliant by a QSA as of the "VALIDATION DATE". Service providers are required to revalidate their compliance to Visa on an annual basis, with the next annual Report on Compliance (ROC) due to Visa one year from the "VALIDATION DATE". ROCs that are from 1- 60 days late are noted in yellow and ROCs that are from 60-90 days late are noted in red. Entities with ROCs over 90 days past due are removed from this list. Entities are listed in each Visa region where they have been registered by at least one client, including: AP - Asia Pacific, CEMEA - Central Europe / Middle East / Africa, LAC - Latin America / Caribbean, NA - North America - Canada / United States. Visa client's are responsible for and are required to use compliant service providers and to follow up with service providers directly if there are any questions about their compliance status. As Of 11/3/2010 SERVICE PROVIDER VALIDATION DATE SERVICES COVERED BY REVIEW (1) ASSESSOR List of Compliant Service Providers - All AP CEMEA LAC NA 1ShoppingCart.com Other June 30, 2010 Security Metrics Payment Gateway 1st Americard Other March 31, 2010 Fortrex Technologies 1stPayGateway, LLC Authorization May 31, 2010 Internet Security Systems (a wholly owned IBM company) Payment Gateway 3dCart Hosting Provider March 31, 2010 SecurityMetrics Payment Gateway 3Delta Systems Authorization September 30, 2010 Fortrex Technologies MOTO Payment Processing Payment Gateway Process Magnetic-Stripe Transactions Switching 800 Call KC MOTO Payment Processing May 31, 2010 Accudata Systems Payment Gateway A3 IT Solutions Hosting Provider November 30, 2009 Trustwave AAFES IPSP (E-commerce) July 31, 2010 IBM Security Services Payment Gateway Process Magnetic-Stripe Transactions Switching Abanco, LLC Payment Gateway February 28, 2010 Trustwave Process Magnetic-Stripe Transactions 1 of 62 (1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers. © 2010 Visa Inc. Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list. * Current PCI DSS status is under review.

Transcript of Cisp List of Pcidss Compliant Service Providers

Global List of PCI DSS Validated Service Providers

The companies listed below were validated as being PCI DSS compliant by a QSA as of the "VALIDATION DATE". Service providers are required to revalidate their compliance to Visa on an annual basis, with the next annual Report on Compliance (ROC) due to Visa one year from the "VALIDATION DATE". ROCs that are from 1-60 days late are noted in yellow and ROCs that are from 60-90 days late are noted in red. Entities with ROCs over 90 days past due are removed from this list. Entities are listed in each Visa region where they have been registered by at least one client, including: AP - Asia Pacific, CEMEA - Central Europe / Middle East / Africa, LAC - Latin America / Caribbean, NA - North America - Canada / United States. Visa client's are responsible for and are required to use compliant service providers and to follow up with service providers directly if there are anyquestions about their compliance status.

As Of 11/3/2010

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

1ShoppingCart.com OtherJune 30, 2010 Security Metrics

Payment Gateway

1st Americard OtherMarch 31, 2010 Fortrex Technologies

1stPayGateway, LLC AuthorizationMay 31, 2010 Internet Security Systems (a wholly owned IBM company)

Payment Gateway

3dCart Hosting ProviderMarch 31, 2010 SecurityMetrics

Payment Gateway

3Delta Systems AuthorizationSeptember 30, 2010 Fortrex Technologies

MOTO Payment Processing

Payment GatewayProcess Magnetic-Stripe Transactions

Switching

800 Call KC MOTO Payment ProcessingMay 31, 2010 Accudata Systems

Payment Gateway

A3 IT Solutions Hosting ProviderNovember 30, 2009 Trustwave

AAFES IPSP (E-commerce)July 31, 2010 IBM Security Services

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

Abanco, LLC Payment GatewayFebruary 28, 2010 Trustwave

Process Magnetic-Stripe Transactions

1 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

ABC FINANCIAL SERVICES, INC

AuthorizationMay 31, 2010 Trustwave

Clearing & Settlement

Hosting Provider

IPSP (E-commerce)MOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

ABC Virtual Communications, Inc.

Hosting ProviderNovember 30, 2009 Lighthouse Computer Services

Payment Gateway

Accel Networks OtherJanuary 31, 2010 Trustwave

Accelerated Payment Technologies Inc

AuthorizationJuly 31, 2010 Trustwave

IPSP (E-commerce)

Loyalty Programs

MOTO Payment ProcessingOtherPayment Gateway

Process Magnetic-Stripe Transactions

ACCENT Marketing MOTO Payment ProcessingMay 31, 2010 Crowe Horwath

Accertify OtherFebruary 28, 2010 Halock Security Labs

Accesso, LLC Clearing & SettlementFebruary 28, 2010 Trustwave

Payment Gateway

AccountNow OtherJune 30, 2010 Trustwave

ACH Direct Payment GatewayNovember 30, 2009 RSM McGladrey

ACI Worldwide OtherApril 30, 2010 Solutionary, Inc

ACI Worldwide - Winn-Dixie Environment

Payment GatewaySeptember 30, 2010 Solutionary

Process Magnetic-Stripe TransactionsSwitching

ACS Government and Community Solutions

Hosting ProviderAugust 31, 2010 SecurityMetrics

Payment GatewayProcess Magnetic-Stripe Transactions

Adeptra OtherDecember 31, 2009 Protiviti

2 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Advanced Network, Inc. AuthorizationOctober 31, 2009 Information Exchange Inc.

Clearing & Settlement

Payment Gateway

Advantex Dining Corporation Loyalty ProgramsMarch 31, 2010 Datassurant, Inc.

Adyen B.V. Internet Payment ProcessingMay 31, 2010 Trustwave

Aegis Communications OtherDecember 31, 2009 K3DES

Affinion Loyalty Group (formerly Trilegiant)

Loyalty ProgramsFebruary 28, 2010 Trustwave

Affinity Solutions Loyalty ProgramsNovember 30, 2009 Solutionary

Agilysys, Inc. Payment GatewayJuly 31, 2010 Trustwave

Airlines Reporting Corporation

Clearing & SettlementFebruary 28, 2010 AT&T Consulting Solutions, Inc.

Akamai OtherSeptember 30, 2010 Neohapsis Inc.

Alacriti Payment GatewayDecember 31, 2009 IGX Global

Alaska Option Services AuthorizationApril 30, 2010 K3DES

Clearing & Settlement

Issuing ProcessingSwitching

Aliaswire MOTO Payment ProcessingSeptember 30, 2010 IGX Global

Payment Gateway

Alliance Data - Remittance Processing

OtherMay 31, 2010 Verizon Business Network Services Inc.

Alliance Data - Retail Services

AuthorizationJanuary 31, 2010 Verizon Business

Clearing & Settlement

Issuing Processing

Loyalty Programs

Alliance Entertainment AuthorizationAugust 31, 2010 Solutionary Inc.

IPSP (E-commerce)Payment Gateway

AllianceOne Inc. OtherMay 31, 2010 Tevora Business Solutions

Alta Resources OtherApril 30, 2010 IBM Internet Security Systems

Amazon.com OtherOctober 31, 2010 IOActive, Inc.

AmegyBank OtherDecember 31, 2009 Verizon Business

Payment Gateway

3 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

American Bancard OtherJune 30, 2010 Enterprise Risk Management, Inc.

Americaneagle.com Hosting ProviderNovember 30, 2009 Fortrex Technologies

Other

AOC Solutions, Inc OtherOctober 31, 2009 Fortrex Technologies

AOL, Inc. AuthorizationSeptember 30, 2010 IOActive

Clearing & SettlementMOTO Payment Processing

Payment Gateway

Apriva, LLC Clearing & SettlementJuly 31, 2010 Trustwave

IPSP (E-commerce)

Loyalty Programs

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

Arab Financial Services Company

Payment ProcessingJuly 31, 2010 SISA

Arcot Systems 3-D Secure Access Control Server

December 31, 2009 Payment Software company (PSC)

Argenbright – Skybridge Marketing Group - Customer Service

OtherAugust 31, 2010 Trustwave

Aria Systems Payment GatewayDecember 31, 2009 TrustWave

Ariba Inc OtherMay 31, 2010 Payment Software company (PSC)

Arise Virtual Solutions OtherMay 31, 2010 AT&T Consulting Solutions

Armenian Card CJSC AuthorizationDecember 31, 2009 Informzaschita

Clearing & Settlement

Issuing ProcessingSwitching

Art Technology Group (ATG) Hosting ProviderNovember 30, 2009 Payment Software company (PSC)

Payment Gateway

Artez Interactive Inc Payment GatewayDecember 31, 2009 Dyntek

Arvato Finance Services Limited

Clearing & SettlementJuly 31, 2010 Acertigo AG - An EXCELSIS Company

IPSP (E-commerce)

Payment Gateway

4 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

ASIAPAY (HONG KONG) LTD

IPSP (E-commerce)November 30, 2009 Trustwave

Payment Gateway

Asociacion Cibao de Ahorros y Prestamos

Issuing ProcessingSeptember 30, 2009 IBM Internet Security Systems

Assist Payment GatewayJuly 31, 2010 SRC Germany

ASUREPAY PTY LTD IPSP (E-commerce)July 31, 2010 Bridgepoint

AT&T Managed Hosting and Application Services

Hosting ProviderOctober 31, 2010 Trustwave

AT&T Managed Services - AT&T Encryption Services

OtherOctober 31, 2010 Trustwave

AT&T Managed Services - AT&T Enhanced VPN Services, AT&T VPN Services, AT&T Private Network Transport Services

OtherJuly 31, 2010 Trustwave

AT&T Managed Services - AT&T Network Based IP VPN Remote Access Service / AT&T VPN Tunneling Service

OtherMay 31, 2010 Trustwave

AT&T Managed Services - Endpoint Security

OtherJuly 31, 2010 Trustwave

AT&T Managed Services - Intrusion Detection Services/Intrusion Prevention Services

OtherJuly 31, 2010 Trustwave

AT&T Managed Services - IP Telephony and LAN Services

OtherJuly 31, 2010 Trustwave

AT&T Managed Services - Managed Router Services

OtherJuly 31, 2010 Trustwave

AT&T Managed Services - Network Based Firewall

OtherJuly 31, 2010 Trustwave

AT&T Managed Services - Premise Based Firewall

OtherJuly 31, 2010 Trustwave

AT&T Managed Services - Transaction Routing Service

OtherJuly 31, 2010 Trustwave

AT&T Managed Services - VoiceTone

OtherJuly 31, 2010 Trustwave

AT&T Synaptic Hosting Hosting ProviderOctober 31, 2010 Trustwave

5 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

ATCO I-TEK INC. OtherAugust 31, 2010 Control Gap

ATOS ORIGIN SERVICES (M) SDN BHD

AuthorizationApril 30, 2010 TUV Rheinland

Clearing & SettlementHosting Provider

Issuing Processing

AudienceView Ticketing Corporation

OtherAugust 31, 2010 NCI (Net Cyclops Inc.)

Auric Systems International OtherOctober 31, 2010 Payment Security Compliance

Authorize.NET Payment GatewayNovember 30, 2010 Trustwave

Autoscribe Corporation OtherJune 30, 2010 Fortrex Technologies

Payment Gateway

AVF Consulting, Inc. Payment GatewayJuly 31, 2010 igxglobal

B3 Corp Payment GatewayFebruary 28, 2010 Digital Resources Group (DRG)

Bankserv Payment GatewaySeptember 30, 2010 RSM McGladrey Inc.

Bankserv Credit Card Services, Inc.

Payment GatewayOctober 31, 2010 Trustwave

Banque Misr AuthorizationJuly 31, 2010 ControlCase LLC

Clearing & Settlement

IPSP (E-commerce)Issuing Processing

MOTO Payment Processing

Payment Gateway

Switching

Beanstream IPSP (E-commerce)September 30, 2010 SPIGuard Security Solutions Inc

MOTO Payment Processing

Payment Gateway

Benson Records Management Center

OtherNovember 30, 2009 FishNet Security

Bill 1st, LLC OtherJuly 31, 2010 Chief Security Officers, LLC

BillMatrix Payment GatewayFebruary 28, 2010 Trustwave

Billtrust Payment GatewayOctober 31, 2010 Chief Security Officers, LLC

Blackbaud - eTapestry OtherSeptember 30, 2010 Trustwave

Blackbaud - Internet Services

OtherSeptember 30, 2010 Trustwave

6 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Blackbaud Payment Services

Payment GatewayFebruary 28, 2010 Trustwave

Blackhawk Network AuthorizationMay 31, 2010 Verizon Business

Clearing & SettlementHosting Provider

Issuing Processing

Payment GatewaySwitching

Blue Bamboo, Inc AuthorizationOctober 31, 2009 Digital Resources Group (DRG)

Payment Gateway

Bluefin Payment Systems Payment GatewayOctober 31, 2009 403 Labs

BluePay OtherMay 31, 2010 Trustwave

Payment Gateway

Braintree Payment Solutions OtherFebruary 28, 2010 Trustwave

Brinkman Financial AuthorizationJanuary 31, 2010 K3DES

MOTO Payment Processing

BSG Payments (formerly Billing Concepts)

Payment GatewayNovember 30, 2009 Trustwave

BTB Soft, Inc. DBA: B2B Soft

OtherOctober 31, 2009 IGX Global

Payment Gateway

Business Data Record Services

OtherNovember 30, 2009 RSM McGladrey

Cale Access AB (Cale Systems)

Payment GatewayAugust 31, 2009 Trustwave

Process Magnetic-Stripe Transactions

Caledon Card Services AuthorizationMay 31, 2010 SPIguard Security Solutions Inc.

Clearing & SettlementMOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe Transactions

Calypso Canada SwitchingJanuary 31, 2010 Trustwave

Capital Bankcard MOTO Payment ProcessingOctober 31, 2009 Trustwave

Payment Gateway

Capital Card Services MOTO Payment ProcessingApril 30, 2010 Trustwave

Other

7 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Card Management Corp. OtherAugust 31, 2010 Crowe Chizek

Card Tranz, Inc. Hosting ProviderSeptember 30, 2009 Trustwave

IPSP (E-commerce)

CardCana Corporation AuthorizationNovember 30, 2009 IGX Global

Payment Gateway

CARDFLEX INC. AuthorizationSeptember 30, 2010 K3DES LLC

MOTO Payment ProcessingOtherPayment Gateway

Cardinal Commerce Corp. Verified by Visa Merchant Services

December 31, 2009 Payment Software Company (PSC)

CARDLINK SERVICES LIMITED

Clearing & SettlementJune 30, 2010 Vectra

MOTO Payment ProcessingPayment Gateway

CardStandard AuthorizationApril 30, 2010 IBM Internet Security Systems

Clearing & Settlement

Issuing Processing

MOTO Payment ProcessingProcess Magnetic-Stripe Transactions

Cardtronics EFT OtherMay 31, 2010 K3DES

Process Magnetic-Stripe TransactionsSwitching

Cardworks Processing AuthorizationAugust 31, 2010 Trustwave

Clearing & Settlement

IPSP (E-commerce)

MOTO Payment Processing

Payment Gateway

Cardworks Servicing LLC OtherFebruary 28, 2010 Trustwave

Carlson Marketing Worldwide (Visa Data Track)

Loyalty ProgramsMarch 31, 2010 Trustwave

Carlson Marketing Worldwide (Visa Extras)

Loyalty ProgramsJune 30, 2010 Trustwave

Cart 32 Hosting ProviderAugust 31, 2009 Payment Software company (PSC)

IPSP (E-commerce)Payment Gateway

8 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Cart 32 Process Magnetic-Stripe Transactions

August 31, 2009 Payment Software company (PSC)

CartManager IPSP (E-commerce)February 10, 2010 Trustwave

Payment GatewayProcess Magnetic-Stripe Transactions

CashLINQ Group, LLC MOTO Payment ProcessingAugust 31, 2010 SecurityMetrics

Payment GatewayProcess Magnetic-Stripe Transactions

Cash'N Go Payment GatewayMay 31, 2010 Trustwave

Process Magnetic-Stripe Transactions

CASHNet IPSP (E-commerce)December 31, 2009 Trustwave

Process Magnetic-Stripe Transactions

CBC Companies, Inc OtherApril 30, 2010 Verizon Business, Inc

CBCInnovis, Inc. OtherApril 30, 2010 Verizon

CBORD Group Payment GatewayFebruary 28, 2010 Trustwave

Cboss Hosting ProviderNovember 30, 2009 SecurityMetrics

CCBill AuthorizationJanuary 31, 2010 Chief Security Officers

Clearing & Settlement

IPSP (E-commerce)

CDMS MERCHANT SERVICES, INC.

OtherDecember 31, 2009 Enterprise Risk Management

CDS Global, Inc. IPSP (E-commerce)August 31, 2009 RSM McGladrey

MOTO Payment Processing

CDW Hosting and Managed Services

Hosting ProviderOctober 31, 2009 Trustwave

CenPos Payment GatewayJanuary 31, 2010 Enterprise Risk Management

Center Partners OtherOctober 31, 2009 Coalfire

Central States Indemnity OtherOctober 31, 2010 Continuum Worldwide Corporation

Centrix Bank – LockBox Service

MOTO Payment ProcessingMay 31, 2010 SecurityMetrics

Payment Gateway

Century Bankcard Services Clearing & SettlementMay 31, 2010 Information Exchange

Other

9 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Certain Software Payment GatewayOctober 31, 2009 Payment Software Company (PSC)

CHARGE Anywhere Payment GatewayApril 30, 2010 Trustwave

Chase Loyalty Solutions AuthorizationDecember 31, 2009 Trustwave

Clearing & Settlement

Loyalty Programs

Payment Gateway

Switching

Chase Paymentech Solutions, LLC.

AuthorizationJanuary 31, 2010 Trustwave

Clearing & SettlementLoyalty Programs

Check21.com LLC Payment GatewayMay 31, 2010 Enterprise Risk Management

Chip Card Ad Beograd AuthorizationApril 30, 2010 VOC - Consultancy

Clearing & Settlement

Switching

Cintas Document Management Shredding

OtherJune 30, 2010 SecureState Consulting

Cintas Document Management Storage

OtherJune 30, 2010 SecureState Consulting

Clearent AuthorizationApril 30, 2010 Coalfire

Clearing & Settlement

Payment GatewaySwitching

ClearTran Payment GatewayJanuary 31, 2010 SecurityMetrics

Client Services OtherJanuary 31, 2010 Insight

Cobre Bem IPSP (E-commerce)June 30, 2010 ecipher

MOTO Payment Processing

Payment Gateway

Collections Marketing Center, Inc.

OtherDecember 31, 2009 403 Labs

Payment Gateway

Columbus Data AuthorizationJanuary 31, 2010 Information Exchange

Clearing & Settlement

OtherPayment Gateway

Commerce V3 Hosting ProviderNovember 30, 2009 Fortrex Technologies

Payment Gateway

10 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Complianthost.com, a GSI Service Offering

Hosting ProviderMay 31, 2010 SAS 70 Solutions

Computer Services, Inc. AuthorizationSeptember 30, 2010 Crowe Horwath

Clearing & SettlementIssuing Processing

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

Concur - Gelco OtherAugust 31, 2010 Verizon Business

Concur - Redmond OtherJune 30, 2010 Verizon Business

Consumer Benefit Services Loyalty ProgramsMarch 31, 2010 Trustwave

Convergys CCMS OtherApril 30, 2010 Fortrex Technologies

Convergys Encore Payment GatewayMarch 31, 2010 Fortrex Technologies

Convergys Home Agent Payment Transmission Service

July 31, 2010 Fortrex Technologies

Convergys Intervoice OtherJuly 31, 2010 Fortrex Technologies

Convio, Inc. Payment GatewayJanuary 31, 2010 Trustwave

CO-OP Financial Services AuthorizationApril 30, 2010 Tevora Business Solutions Inc

Clearing & Settlement

Loyalty ProgramsOther

Payment Gateway

Switching

CORE Business Technologies

AuthorizationJuly 31, 2010 Trustwave

Hosting ProviderIPSP (E-commerce)MOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe Transactions

CoreCommerce Payment GatewayDecember 31, 2009 Chief Security Officers

CRE Secure Payment GatewayJuly 31, 2010 Coalfire Systems, Inc.

Credibanco Visa Colombia AuthorizationApril 30, 2010 Xtrategies

Clearing & Settlement

IPSP (E-commerce)

Issuing ProcessingMOTO Payment Processing

11 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Credibanco Visa Colombia Payment GatewayApril 30, 2010 Xtrategies

Process Magnetic-Stripe Transactions

Switching

Credit Discovery Clearing & SettlementDecember 31, 2009 Information Exchange

Other

CreditCall Communications Ltd.

AuthorizationJanuary 31, 2010 Foregenix

Clearing & Settlement

MOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Crescent Processing Company

OtherOctober 31, 2009 SecurityMetrics

CROEM MOTO Payment ProcessingOctober 31, 2009 Trustwave

CSG Content Direct AuthorizationMarch 31, 2010 Solutionary

IPSP (E-commerce)Payment Gateway

CSG Systems - Data Prose IPSP (E-commerce)May 31, 2010 Solutionary

Other

CSG Systems, Inc. - Interactive Messaging

Payment GatewayApril 30, 2010 Solutionary

CSG Systems, Inc. – Statement and Account Billing Services

AuthorizationApril 30, 2010 Solutionary

IPSP (E-commerce)

Payment Gateway

CSI Software Hosting ProviderOctober 31, 2009 Trustwave

Payment Gateway

CSU CardSystem S.A. AuthorizationSeptember 30, 2010 Trustwave

Clearing & Settlement

Hosting Provider

Issuing ProcessingMOTO Payment Processing

Other

Payment GatewayProcess Magnetic-Stripe TransactionsSwitching

Cvent SwitchingAugust 31, 2009 FishNet Security

12 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Cyber City Teleservices OtherSeptember 30, 2009 CrimsonSecurity

Cybera SwitchingApril 30, 2010 FishNet Security

CyberSource (a Visa company)

Payment GatewayAugust 31, 2010 Trustwave

Cynergy Data IPSP (E-commerce)August 31, 2010 Coalfire Systems. Inc.

MOTO Payment Processing

Payment GatewayProcess Magnetic-Stripe Transactions

D.M.inSite Payment GatewayJuly 31, 2010 SecurityMetrics

Data Delivery Services OtherJuly 31, 2010 Coalfire

Data Paradigm OtherJuly 31, 2010 Crowe Horwath LLP

Data Stream AuthorizationFebruary 28, 2010 Information Exchange

Clearing & Settlement

OtherPayment Gateway

Dataline Systems OtherDecember 31, 2009 Trustwave

Datapak Services Corporation

AuthorizationMay 31, 2010 Trustwave

Hosting Provider

Payment Gateway

DataPipe Hosting ProviderSeptember 30, 2010 Trustwave

DAXKO IPSP (E-commerce)April 30, 2010 IBM Security Services

Debit Plus Technologies, LLC

OtherFebruary 28, 2010 Specialized Security Services

Debit Technologies, Inc Clearing & SettlementMay 31, 2010 Information Exchange

Other

Delphis Software AuthorizationNovember 30, 2009 Digital Resources Group (DRG)

Payment Gateway

Demandware Hosting ProviderJune 30, 2010 SecurityMetrics

IPSP (E-commerce)Payment Gateway

Denarii Systems AuthorizationJanuary 31, 2010 Security Works

Clearing & Settlement

IPSP (E-commerce)

Issuing ProcessingLoyalty Programs

13 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Denarii Systems MOTO Payment ProcessingJanuary 31, 2010 Security Works

Payment Gateway

Process Magnetic-Stripe Transactions

Switching

DHD Media Clearing & SettlementJune 30, 2010 Trustwave

Payment Gateway

Diamond Marketing Solutions

OtherSeptember 30, 2010 Halock Security Labs

Digital Network Solutions (DNS) DBA Moneytree ATM

AuthorizationApril 30, 2010 Information Exchange

Clearing & SettlementPayment Gateway

Digital Payment Technologies

Payment GatewayMay 31, 2010 Payment Software company (PSC)

Digital River IPSP (E-commerce)July 31, 2010 NetSPI

Payment Gateway

Direct Alliance Corp MOTO Payment ProcessingNovember 30, 2009 AT&T Consulting Solutions, Inc.

Other

Direct Mail Processors Payment GatewayJanuary 31, 2010 Fortrex Technologies

Donor.com AuthorizationJune 30, 2010 Coalfire

Hosting Provider

IPSP (E-commerce)MOTO Payment ProcessingOther

Duncan Professional Account Management (PAM)

Payment GatewayOctober 31, 2010 SecurityMetrics, Inc.

Duncan Technologies Payment GatewayJune 30, 2010 SecurityMetrics

Dydacomp Complete Commerce

IPSP (E-commerce)May 31, 2010 Coalfire Systems, Inc.

Ebocom, LLC Clearing & SettlementApril 30, 2010 CyberTrust

EC Suite AuthorizationAugust 31, 2009 Chief Security Officers

Clearing & Settlement

Hosting ProviderIPSP (E-commerce)

Payment Gateway

EchoSat Communications OtherSeptember 30, 2009 Security Innovation

14 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

eCommLink AuthorizationNovember 30, 2009 RSM McGladrey

Hosting Provider

IPSP (E-commerce)

Issuing Processing

Loyalty Programs

Edhance Inc. Loyalty ProgramsJuly 31, 2010 PSC LLC

EFX AuthorizationMarch 31, 2010 T3i

Clearing & Settlement

Issuing Processing

Payment Gateway

Switching

Elan Financial Services AuthorizationApril 30, 2010 TrustWave

Clearing & Settlement

Issuing ProcessingSwitching

Elan Financial Services Credit Card Issuing

Issuing ProcessingDecember 31, 2009 Trustwave

Elavon (formerly NOVA) AuthorizationMay 31, 2010 TrustWave

Clearing & Settlement

Other

Payment GatewayProcess Magnetic-Stripe Transactions

Elavon (formerly Southern Datacomm)

AuthorizationSeptember 30, 2010 Trustwave

IPSP (E-commerce)

Process Magnetic-Stripe TransactionsSwitching

Elavon Canada (formerly Internet Secure)

Payment GatewayJuly 31, 2010 Trustwave

ELECTRA CARD SERVICES PVT. LTD.

AuthorizationMay 31, 2010 ControlCase

Clearing & Settlement

Issuing ProcessingLoyalty Programs

Process Magnetic-Stripe Transactions

Electronic Merchant Systems

OtherApril 30, 2010 Trustwave

Electronic Payments Inc AuthorizationJuly 31, 2010 Information Exchange

Clearing & Settlement

15 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Electronic Payments Inc Loyalty ProgramsJuly 31, 2010 Information Exchange

Other

Electronic Processing Services

Clearing & SettlementJanuary 31, 2010 Information Exchange

Other

Electronic Transaction Systems Corporation (ETS Corp.)

AuthorizationSeptember 30, 2009 Fortrex Technologies

Clearing & Settlement

IPSP (E-commerce)

Loyalty ProgramsMOTO Payment ProcessingOther

Payment Gateway

Payment Processing

Process Magnetic-Stripe Transactions

Switching

Element Payment Services Clearing & SettlementNovember 30, 2009 Information Exchange

OtherPayment Gateway

Emdeon IPSP (E-commerce)March 31, 2010 Lattimore Black Morgan and Cain

Process Magnetic-Stripe Transactions

EMN8 POS Managed Services

OtherNovember 30, 2009 Tevora Business Solutions

Payment Gateway

Enacomm, Inc. Hosting ProviderMarch 31, 2010 True Digital Security

Encircle OtherDecember 31, 2009 Enterprise Risk mangement

ENETS PTE LTD Payment GatewayNovember 30, 2009 Vectra

ePayData Clearing & SettlementOctober 31, 2009 Information Exchange

Payment Gateway

Epicor AuthorizationMarch 31, 2010 Trustwave

Payment Gateway

Epoch IPSP (E-commerce)November 30, 2009 Protiviti

eProcessing Network Payment GatewayApril 30, 2010 Trustwave

Epsilon Data Management Loyalty ProgramsAugust 31, 2010 Verizon Business

Escalate Retail Incorporated E-CommerceOctober 31, 2009 Trustwave

Order Fulfillment

16 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

EURONET SERVICES INDIA PVT. LTD.

Issuing ProcessingApril 30, 2010 ControlCase

Process Magnetic-Stripe Transactions

EuroPlanet AuthorizationApril 30, 2010 Trustwave

MOTO Payment Processing

Process Magnetic-Stripe Transactions

EVERTEC Latinoamerica / ATH Costa Rica

AuthorizationOctober 31, 2009 Xtrategies

Clearing & SettlementIssuing Processing

Loyalty ProgramsMOTO Payment Processing

Process Magnetic-Stripe TransactionsSwitching

EVO Merchant Services Clearing & SettlementOctober 31, 2010 Trustwave

Evolution Benefits OtherDecember 31, 2009 Lighthouse Computer Services

E-xact Transactions Payment GatewayMay 31, 2010 Trustwave

Excellence in Motivation AuthorizationNovember 30, 2009 Information Exchange

Clearing & Settlement

Issuing ProcessingPayment Gateway

Experian Information Solutions

IPSP (E-commerce)September 30, 2009 Verizon Business

Other

ExtraMeasures OtherMay 31, 2010 Coalfire

EZFacility.com Payment GatewayAugust 31, 2010 Trustwave

Ezic, Inc. AuthorizationJuly 31, 2010 Information Exchange

Clearing & Settlement

MOTO Payment ProcessingOther

Payment Gateway

Process Magnetic-Stripe Transactions

ezRez Software Hosting ProviderOctober 31, 2009 Payment Software company (PSC)

Fair Isaac - Card Alert OtherSeptember 30, 2009 Trustwave

17 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Faith Direct OtherJuly 31, 2010 CrimsonSecurity

Fédération des caisses Desjardins du Québec

AuthorizationAugust 31, 2010 Trustwave

Issuing ProcessingProcess Magnetic-Stripe Transactions

Fidelity Information Services - Australasia

AuthorizationNovember 30, 2009 IBM – Internet Security Systems (ISS

Clearing & Settlement

Payment Gateway

Switching

Fidelity Information Services - Card Services UK (Certegy)

AuthorizationNovember 30, 2009 IBM – Internet Security Systems (ISS)

Clearing & SettlementPayment Gateway

Switching

Fidelity Information Services - Certegy UK, Birmingham

AuthorizationSeptember 30, 2009 IBM Internet Security Systems

Clearing & Settlement

Payment Gateway

Switching

Fidelity Information Services - Chicago Authnet

AuthorizationDecember 31, 2009 IBM Internet Security Systems

Clearing & SettlementIssuing ProcessingPayment Gateway

Switching

Fidelity Information Services - Clear Commerce

Payment GatewayMay 31, 2010 IBM Internet Security Systems

Fidelity Information Services - eFunds Prepaid Solutions

Issuing ProcessingApril 30, 2010 Trustwave

Loyalty Programs

MOTO Payment Processing

Process Magnetic-Stripe Transactions

Fidelity Information Services - eZCard Charlotte

OtherMarch 31, 2010 IBM Internet Security Systems

Fidelity Information Services - GBS India

OtherSeptember 30, 2009 IBM Internet Security Systems

18 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Fidelity Information Services - Lisle Remittance Processing

OtherJanuary 31, 2010 IBM Internet Security Systems

Fidelity Information Services - Loyalty Card Processing

Loyalty ProgramsJune 30, 2010 Trustwave

Fidelity Information Services - Norcross Debit Card Processing

AuthorizationApril 30, 2010 Trustwave

Clearing & SettlementProcess Magnetic-Stripe Transactions

Fidelity Information Services - Output Solutions San Antonio

OtherFebruary 28, 2010 IBM Internet Security Systems

Fidelity Information Services - Payment Processing and Data Center Little Rock, AR

MOTO Payment ProcessingMay 31, 2010 Trustwave

Process Magnetic-Stripe Transactions

Fidelity Information Services - Plainview

OtherSeptember 30, 2010 IBM Internet Security Systems

Fidelity Information Services - Processadora e Servicos S.A. Brazil

AuthorizationApril 30, 2010 Trustwave

Issuing ProcessingMOTO Payment Processing

Process Magnetic-Stripe Transactions

Fidelity Information Services - PSS India

AuthorizationJanuary 31, 2010 IBM Internet Security Systems

Clearing & Settlement

Switching

Fidelity Information Services - St. Petersburg

Remittance ProcessingSeptember 30, 2009 IBM Internet Security Systems

Fidelity Information Services - St. Petersburg Check

AuthorizationMarch 31, 2010 IBM Internet Security Systems (ISS)

Clearing & Settlement

Fidelity Information Services - Web Vault

OtherJanuary 31, 2010 IBM Internet Security Systems (ISS)

Fidelity Information Services (FIS) Electronic Payments, New Berlin WI

AuthorizationSeptember 30, 2009 IBM Internet Security Systems

19 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Fidelity Information Services (FIS) Electronic Payments, New Berlin WI

Clearing & SettlementSeptember 30, 2009 IBM Internet Security Systems

Payment Gateway

Switching

Fifth Third Processing Solutions - Issuing and Switch-Providing Systems

3-D Secure Access Control Server

June 30, 2010 Trustwave

AuthorizationClearing & Settlement

Issuing Processing

Process Magnetic-Stripe TransactionsSwitching

Fifth Third Processing Solutions-Acquiring Systems

AuthorizationJune 30, 2010 Trustwave

Clearing & Settlement

Process Magnetic-Stripe Transactions

Financial Transmission Network Inc

Payment GatewayJanuary 31, 2010 Trustwave

Finexus International Sdn Bhd

AuthorizationJuly 31, 2010 Truswave

Clearing & Settlement

Hosting Provider

Issuing Processing

MOTO Payment ProcessingProcess Magnetic-Stripe Transactions

Switching

First American Payment Systems

Clearing & SettlementJune 30, 2010 IBM Internet Security Systems

Payment Gateway

First Atlantic Commerce, LTD.

Clearing & SettlementMarch 31, 2010 Coalfire

MOTO Payment Processing

Payment Gateway

Switching

First Data - Cono Sur S.R.L. AuthorizationMarch 31, 2010 Trustwave

Clearing & Settlement

IPSP (E-commerce)Issuing Processing

Loyalty Programs

MOTO Payment ProcessingOther

20 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

First Data - Cono Sur S.R.L. Payment GatewayMarch 31, 2010 Trustwave

Process Magnetic-Stripe Transactions

Switching

First Data - Integrated Payment Systems (IPS) Denver

OtherFebruary 28, 2010 Trustwave

First Data - Integrated Payment Systems (IPS) Westerville

OtherMay 31, 2010 Trustwave

First Data - Secure Transport (Datawire)

AuthorizationDecember 31, 2009 Trustwave

IPSP (E-commerce)

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

First Data Buypass (First Data Concord Payment Services)

AuthorizationSeptember 30, 2010 Trustwave

Clearing & Settlement

IPSP (E-commerce)

Issuing ProcessingMOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

First Data CAC (Processing Center, S.A.)

AuthorizationMarch 31, 2010 TrustWave

Clearing & Settlement

IPSP (E-commerce)

Issuing ProcessingMOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Switching

First Data Card Services International

AuthorizationSeptember 30, 2010 Trustwave

Clearing & SettlementIPSP (E-commerce)

Issuing ProcessingMOTO Payment Processing

Payment Gateway

21 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

First Data Card Services International

Process Magnetic-Stripe Transactions

September 30, 2010 Trustwave

Switching

First Data Clientline Reporting (First Data Concord Electronic Financial Systems)

Clearing & SettlementSeptember 30, 2010 Trustwave

First Data EFS Transportation Services

AuthorizationSeptember 30, 2010 Trustwave

Clearing & Settlement

IPSP (E-commerce)

Issuing ProcessingMOTO Payment Processing

Payment GatewayProcess Magnetic-Stripe TransactionsSwitching

First Data Global Gateway (First Data LinkPoint/First Data YourPay)

AuthorizationSeptember 30, 2010 Trustwave

Clearing & Settlement

IPSP (E-commerce)

Issuing ProcessingMOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

First Data Government Solutions

IPSP (E-commerce)December 31, 2010 Trustwave

Payment Gateway

First Data Integrated Payment Systems

OtherOctober 31, 2010 Trustwave

First Data International - ANZSA

AuthorizationSeptember 30, 2010 Trustwave

Clearing & Settlement

Issuing Processing

Loyalty ProgramsMOTO Payment Processing

Process Magnetic-Stripe TransactionsSwitching

First Data International - China

AuthorizationSeptember 30, 2010 Trustwave

Clearing & Settlement

22 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

First Data International - China

Issuing ProcessingSeptember 30, 2010 Trustwave

Loyalty Programs

Process Magnetic-Stripe Transactions

First Data International-OmniPay Limited

AuthorizationNovember 30, 2009 Trustwave

Clearing & Settlement

IPSP (E-commerce)Issuing ProcessingMOTO Payment Processing

Payment GatewayProcess Magnetic-Stripe Transactions

Switching

First Data Money Network AuthorizationSeptember 30, 2010 Trustwave

Clearing & Settlement

IPSP (E-commerce)

Issuing ProcessingMOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

First Data PayPoint Clearing & SettlementSeptember 30, 2010 Trustwave

IPSP (E-commerce)

MOTO Payment ProcessingProcess Magnetic-Stripe Transactions

First Data Prepaid Services (First Data Concord Financial Technologies)

AuthorizationSeptember 30, 2010 Trustwave

Clearing & Settlement

IPSP (E-commerce)Issuing Processing

MOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

First Data RemitCo OtherSeptember 30, 2010 Trustwave

Remittance Processing

First Data Resources AuthorizationJanuary 31, 2010 Trustwave

Clearing & SettlementIPSP (E-commerce)

23 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

First Data Resources Issuing ProcessingJanuary 31, 2010 Trustwave

Loyalty Programs

MOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

First Data Retail ATM AuthorizationSeptember 30, 2010 Trustwave

Clearing & Settlement

IPSP (E-commerce)

Issuing Processing

MOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Switching

First Data Slovakia and Serbia

AuthorizationOctober 31, 2010 Trustwave

Clearing & SettlementIssuing Processing

Loyalty Programs

MOTO Payment Processing

Payment GatewayProcess Magnetic-Stripe Transactions

Switching

First Data STAR (Networks, Processing and Systems Inc.)

AuthorizationSeptember 30, 2010 Trustwave

Clearing & SettlementIPSP (E-commerce)

Issuing Processing

MOTO Payment Processing

Payment GatewayProcess Magnetic-Stripe Transactions

Switching

First Data TeleCheck AuthorizationSeptember 30, 2010 Trustwave

Clearing & SettlementIssuing Processing

Loyalty ProgramsMOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

24 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

First Hawaiian Bank AuthorizationJune 30, 2010 Trustwave

Payment Gateway

First National Bank of Omaha

AuthorizationJanuary 31, 2010 Trustwave

Clearing & Settlement

Issuing Processing

MOTO Payment ProcessingProcess Magnetic-Stripe Transactions

Switching

First National Merchant Solutions

AuthorizationJanuary 31, 2010 Trustwave

Clearing & Settlement

Issuing Processing

MOTO Payment ProcessingProcess Magnetic-Stripe Transactions

Switching

First National Technology Solutions

Hosting ProviderMarch 31, 2010 Trustwave

FirstView Financial, LLC AuthorizationAugust 31, 2010 Trustwave

Clearing & SettlementIssuing Processing

Payment Gateway

Fiserv - ACCEL/Exchange Issuing ProcessingApril 30, 2010 Payment Software company (PSC)

Fiserv – Bank Solutions Lincoln

OtherJuly 31, 2010 PSC

Fiserv - CBS Lake Mary OtherAugust 31, 2010 PSC

Fiserv - CheckFreePay OtherJune 30, 2010 Payment Software company (PSC)

Fiserv - Club Solutions Hosting ProviderJuly 31, 2010 Payment Software company (PSC)

Other

Fiserv - CUSA OtherOctober 31, 2010 PSC

Fiserv - E Banking Hosting ProviderSeptember 30, 2010 PSC

Other

Fiserv - Electronic Document Delivery (EPSIIA)

OtherFebruary 28, 2010 Payment Software company (PSC)

Fiserv - Northeast Region Data Center

Issuing ProcessingJune 30, 2010 Payment Software Company (PSC)

25 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Fiserv - OnCU OtherJuly 31, 2010 Payment Software company (PSC)

Fiserv - SourceOne OtherJuly 31, 2010 Payment Software company (PSC)

Fiserv - Southeastern Region Data Center: Bowling Green

Issuing ProcessingOctober 31, 2010 PSC

FISERV Advantage AuthorizationSeptember 30, 2010 PSC

Hosting Provider

Other

Switching

Fiserv Bank Solutions (LBD) EMEA

OtherAugust 31, 2010 PSC

FISERV Credit Processing Services

OtherOctober 31, 2009 Payment Software Company (PSC)

Fiserv EFT Issuing ProcessingMarch 31, 2010 Payment Software Company (PSC)

FISERV Electronic Banking, Biller Solutions & Itech

Billing ManagementOctober 31, 2010 PSC

Other

Payment Gateway

FISERV Enterprise Technology - Johns Creek

OtherSeptember 30, 2009 PSC

FISERV FET Irving Hosting ProviderNovember 30, 2009 Payment Software company (PSC)

Fiserv Xroads Hosting ProviderFebruary 28, 2010 Payment Software company (PSC)

Other

Florists’ Transworld Delivery Inc.

Payment GatewayMarch 31, 2010 HALOCK Security Labs

Focus Payment Solutions OtherJanuary 31, 2010 Trustwave

Fore! Reservations Payment GatewaySeptember 30, 2009 Fortrex Technologies

Forward Information Technologies

AuthorizationJune 30, 2010 Trustwave

Hosting Provider

Payment Gateway

Fosdick Fulfillment Clearing & SettlementJuly 31, 2010 Trustwave

FreedomPay Inc. AuthorizationJuly 31, 2010 T3i

Clearing & SettlementLoyalty Programs

26 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

FreedomPay Inc. Payment GatewayJuly 31, 2010 T3i

Frontline Processing OtherJune 30, 2010 SecurityMetrics

Payment Gateway

FrontStream Fast Transact, LLC

AuthorizationMay 31, 2010 ControlCase

Fry Inc. Hosting ProviderMay 31, 2010 IBM Internet Security Systems

FSV Payment Systems Issuing ProcessingMay 31, 2010 K3DES

Other

Fujitsu America Inc. Hosting ProviderFebruary 28, 2010 Verizon Business

Fulfillment Technologies AuthorizationSeptember 30, 2010 SecureState

Clearing & Settlement

MOTO Payment Processing

Galileo Processing Issuing ProcessingJuly 31, 2010 Trustwave

GC Services MOTO Payment ProcessingOctober 31, 2009 K3DES

Process Magnetic-Stripe Transactions

GE Money - Americas, Retail Sales Finance

AuthorizationDecember 31, 2009 Symantec

IPSP (E-commerce)

Payment Gateway

GE Money - Retail Consumer Finance

AuthorizationAugust 31, 2010 Symantec

Clearing & Settlement

IPSP (E-commerce)

Issuing ProcessingLoyalty ProgramsOther

Payment Gateway

Process Magnetic-Stripe Transactions

GetNet Clearing & SettlementJuly 31, 2010 Cipher Informatica Ltda

Payment GatewaySwitching

Global Card Services (Elavon)

AuthorizationMay 31, 2010 CyberTrust

Clearing & SettlementOtherPayment Gateway

Process Magnetic-Stripe Transactions

27 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Global Cash Access AuthorizationJuly 31, 2010 Trustwave

Clearing & Settlement

IPSP (E-commerce)

MOTO Payment Processing

Payment GatewayProcess Magnetic-Stripe Transactions

Global Cash Card AuthorizationJanuary 31, 2010 Digital Resources Group (DRG)

Issuing Processing

Global Collect Services B.V. Clearing & SettlementJuly 31, 2010 Trustwave

IPSP (E-commerce)

Global Electronic Technology

Payment GatewayJanuary 31, 2010 403 Labs

Global Payments Direct, Inc. Payment GatewayJuly 31, 2010 Trustwave

Switching

Global Processing Centre AuthorizationJune 30, 2010 Information Exchange

Clearing & Settlement

Issuing Processing

Payment Gateway

GLOBAL REFUND HOLDINGS AB

Payment GatewayJanuary 31, 2010 Vectra Information Security Pte Ltd (branch office of Vectra Corp)

Global Technology Partners LLC

OtherJune 30, 2010 Coalfire

Go Daddy IPSP (E-commerce)October 31, 2009 Trustwave

GoEmerchant AuthorizationMay 31, 2010 IBM Internet Security Systems

Payment Gateway

Google Payment GatewayJanuary 31, 2010 Core Security

Govolution, Inc. AuthorizationMay 31, 2010 IBM Internet Security Systems

Payment Gateway

GP Network Corporation AuthorizationSeptember 30, 2010 BSI Japan

Clearing & Settlement

Green Dot Issuing ProcessingOctober 31, 2010 Protiviti Inc.

Greenwise Bankcard, LLC IPSP (E-commerce)January 31, 2010 Chief Security Officers, LLC

MOTO Payment Processing

Payment Gateway

28 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Greenwise Bankcard, LLC Process Magnetic-Stripe Transactions

January 31, 2010 Chief Security Officers, LLC

GSI Commerce Solutions IPSP (E-commerce)September 30, 2010 Trustwave

Hamer Enterprises Payment GatewayDecember 31, 2009 SecurityMetrics

Hanover Direct Payment GatewaySeptember 30, 2009 Fortrex Technologies

Harland Financial Solutions AuthorizationAugust 31, 2010 Crowe Horwath

MOTO Payment Processing

Payment Gateway

Switching

Harris Connect Payment GatewayDecember 31, 2009 Trustwave

Heartland Payment Systems AuthorizationApril 30, 2010 Coalfire

Clearing & SettlementMOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Switching

Helcim Inc. AuthorizationJune 30, 2010 SPIguard Security Solutions Inc.

IPSP (E-commerce)MOTO Payment Processing

Payment Gateway

Hewitt Associates LLC OtherAugust 31, 2010 Trustwave

Hewlett-Packard (TD Bank Environment)

Hosting ProviderJune 30, 2010 Telus

Hinda, Inc. Loyalty ProgramsJanuary 31, 2010 Tech Lock Inc

Hitachi Information Systems AuthorizationFebruary 28, 2010 Internet Secuirty Services

HostedPCI Hosting ProviderMarch 31, 2010 Net Cyclops Inc.

Switching

Hosting.com Hosting ProviderApril 30, 2010 Trustwave

Other

HP Commercial Card (EDS) Payment ProcessingMay 31, 2010 Trustwave

HP Consumer Card Services (EDS)

AuthorizationOctober 31, 2009 Trustwave

Issuing Processing

Loyalty Programs

HP Consumer Direct (EDS) AuthorizationSeptember 30, 2010 Trustwave

E-Commerce

29 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

HP Consumer Direct (EDS) Merchant SupportSeptember 30, 2010 Trustwave

MOTO Payment Processing

Order Fulfillment

Payment Gateway

HP Deposit Systems Clearing & SettlementOctober 31, 2009 Trustwave

Hosting ProviderPayment Gateway

HP Guidance Authorization Issuing ProcessingOctober 31, 2009 Trustwave

HP Merchant Acquirer Services

Clearing & SettlementOctober 31, 2009 Trustwave

HP Oregon eGovernment (EDS)

Managed Merchant HostingJune 30, 2010 Trustwave

HP Pay for Convenience (EDS)

Payment GatewayApril 30, 2010 Trustwave

HP Surveyor (EDS) New Accounts OnlineAugust 31, 2010 Trustwave

Hughes Network Systems SwitchingSeptember 30, 2009 IBM Internet Security Systems

Hypertec Availability Services

Hosting ProviderJuly 30, 2010 Net Cyclops Inc.

i2c Incorporated AuthorizationSeptember 30, 2009 Trustwave

IPSP (E-commerce)

Issuing Processing

Process Magnetic-Stripe Transactions

IATS Ticketmaster OtherDecember 31, 2010 Trustwave

Payment GatewayProcess Magnetic-Stripe Transactions

IC Systems Clearing & SettlementAugust 31, 2010 RSM McGladrey

iCongo IPSP (E-commerce)January 31, 2010 NetSPI

ICT Group OtherOctober 31, 2009 TruArx

ID Analytics, Inc. OtherJune 30, 2010 Computer Task Group

iMax Bancard OtherDecember 31, 2009 SecurityMetrics

InComm AuthorizationSeptember 30, 2010 IBM Internet Security Systems

Issuing Processing

Other

Industry Retail Group OtherDecember 31, 2009 Trustwave

30 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

INetU, Inc. Hosting ProviderJanuary 31, 2010 Trustwave

Infinity Data Clearing & SettlementOctober 31, 2009 Information Exchange

Other

InfoGroup OtherMarch 31, 2010 Solutionary, Inc.

Infonox AuthorizationDecember 31, 2009 Digital Resources Group (DRG)

Payment Gateway

Innotrac Corporation August 31, 2010 Trustwave

Innovative Gateway Solutions (IGS)

Payment GatewayOctober 31, 2009 Trustwave

Innovative Merchant Solutions (IMS)

AuthorizationOctober 31, 2009 Trustwave

Clearing & SettlementIPSP (E-commerce)Process Magnetic-Stripe Transactions

Innovis Data Solutions, Inc OtherJanuary 31, 2010 Verizon Business

IN-SOLUTIONS GLOBAL PVT LIMITED

Clearing & SettlementApril 30, 2010 SISA Information Security

Hosting Provider

InstaMed Communications AuthorizationFebruary 28, 2010 Trustwave

Clearing & Settlement

Payment Gateway

Integrated Printing Solutions OtherOctober 31, 2009 Raven Eye

Integrity Payment Systems OtherMarch 31, 2010 K3DES

Intellipay Clearing & SettlementFebruary 28, 2010 Trustwave

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

Intercept Payment GatewaySeptember 30, 2010 Coalfire

Interface Security Secure - Managed Broadband

OtherJune 30, 2010 SecurityMetrics

INTERNATIONAL CARD SYSTEMS AD (CASYS AD)

Clearing & SettlementAugust 31, 2010 Acertigo

IPSP (E-commerce)Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

31 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

International Industrial Bank AuthorizationOctober 31, 2010 Jet Inforsystems

Clearing & Settlement

IPSP (E-commerce)

MOTO Payment ProcessingProcess Magnetic-Stripe Transactions

Switching

Internet Payment Exchange AuthorizationJuly 31, 2010 TruArx

Process Magnetic-Stripe Transactions

Internet Ticketing Systems, Inc

MOTO Payment ProcessingJuly 31, 2010 SecurityMetrics

Other

Payment Gateway

Process Magnetic-Stripe Transactions

Interpro Group, Inc. OtherOctober 31, 2009 K3DES

Payment Gateway

Intersections AuthorizationFebruary 28, 2010 Control Case

Intrix Technology Inc. IPSP (E-commerce)March 31, 2010 Trustwave

Payment GatewayProcess Magnetic-Stripe Transactions

Intuit Electronic Clearing House (ECHO, Inc.)

AuthorizationApril 30, 2010 Trustwave

Clearing & Settlement

IPSP (E-commerce)Payment GatewayProcess Magnetic-Stripe Transactions

Intuit QuickBooks Online Processor

IPSP (E-commerce)February 28, 2010 Trustwave

Intuition Systems Payment GatewayOctober 31, 2009 SecurityMetrics

IP Commerce OtherOctober 31, 2010 Coalfire

Payment Gateway

IP PAYMENTS PTY LTD AuthorizationAugust 31, 2010 Vectra Corporation

Payment GatewaySwitching

iPayment OtherJune 30, 2010 Trustwave

IPS Group Inc. Payment GatewayOctober 31, 2010 Tevora Business Solutions

32 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

iQor OtherAugust 31, 2009 CrimsonSecurity

IRN Payment Systems Clearing & SettlementFebruary 28, 2010 Information Exchange

Other

Iron Mountain OtherMay 31, 2010 Neohapsis Inc.

iTransact MOTO Payment ProcessingMay 31, 2010 Specialized Security Services, Inc.

Payment GatewayProcess Magnetic-Stripe Transactions

ITS Inc. / Shazam Inc. AuthorizationApril 30, 2010 Trustwave

Clearing & Settlement

Issuing ProcessingPayment Gateway

Process Magnetic-Stripe TransactionsSwitching

Iveri Payment Technology AuthorizationMarch 31, 2010 Trustwave

Clearing & Settlement

IPSP (E-commerce)

Switching

J.J. MacKay Canada Limited/MacKay Meters, Inc. (MacKay Meters)

Payment GatewayNovember 30, 2009 Trustwave

JetPay, LLC Clearing & SettlementApril 30, 2010 Trustwave

Payment Gateway

jha Payment Processing Solutions

Clearing & SettlementJune 30, 2010 Coalfire

Issuing ProcessingLoyalty Programs

Payment Gateway

JSA Technologies Clearing & SettlementSeptember 30, 2009 Trustwave

JSC Chronopay IPSP (E-commerce)August 31, 2009 SRC Security Research & Consulting GmbH (SRC)

JSC GE MoneyBank AuthorizationOctober 31, 2010 Sysnet

Issuing Processing

Payment Gateway

Process Magnetic-Stripe Transactions

JSC Georgian Card AuthorizationOctober 31, 2010 Trustwave

Clearing & SettlementIPSP (E-commerce)

33 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

JSC Georgian Card Issuing ProcessingOctober 31, 2010 Trustwave

MOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

JSC RUSSIAN STANDARD BANK

AuthorizationAugust 31, 2010 Self-Assessment

Clearing & Settlement

JSC TRANSCREDITCARD AuthorizationOctober 31, 2010 Evraas.I.T

E-Commerce

Issuing ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Kount, Inc (A Division of Keynetics, Inc)

OtherMarch 31, 2010 Trustwave

Kubra Data Transfer, Inc. Payment GatewayJuly 31, 2010 Trustwave

Kudzu Interactive, Inc. AuthorizationSeptember 30, 2010 ControlCase

Payment Gateway

LesConcierges Loyalty ProgramsMarch 31, 2010 Digital Resources Group (DRG)

Lethoff, Inc. AuthorizationNovember 30, 2009 Trustwave

Clearing & SettlementIPSP (E-commerce)Loyalty Programs

MOTO Payment Processing

Payment GatewayProcess Magnetic-Stripe Transactions

Lighthouse1 OtherFebruary 28, 2010 Jefferson Wells

Link2Gov Payment GatewayFebruary 28, 2010 Trustwave

Litle & Co Payment GatewayJanuary 31, 2010 Payment Software Company (PSC)

LiveOps, Inc OtherJuly 31, 2010 Trustwave

LOTSolutions / Life of the South

OtherJune 30, 2010 Trustwave

Payment Gateway

Lundquist Consulting OtherDecember 31, 2009 Trustwave

M & T Bank Issuing ProcessingJuly 31, 2010 SecureState LLC

34 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Maas Global Solutions Corporation

AuthorizationOctober 31, 2010 Digital Resources Group (DRG)

Payment Gateway

Process Magnetic-Stripe Transactions

Magensa OtherAugust 31, 2010 403 Labs

Magic Wrighter Payment GatewayJuly 31, 2010 Trustwave

Maintech SwitchingNovember 30, 2009 IBM Internet Security Systems

Maritz Loyalty Marketing Loyalty ProgramsDecember 31, 2010 IBM Internet Security Systems

Maritz Travel OtherAugust 31, 2010 IBM Internet Security Systems

MarketLive Hosting ProviderOctober 31, 2009 AT&T Consulting Solutions

IPSP (E-commerce)

Maverick Network Solutions, Inc

AuthorizationJuly 31, 2010 Pointe Solutions

Clearing & Settlement

Issuing Processing

MBS Insight, Inc OtherMay 31, 2010 K3DES

MBS Textbook Exchange, Inc. - inSite

Payment GatewaySeptember 30, 2010 Trustwave

MBU d.o.o. 3-D Secure Access Control Server

August 31, 2010 Trustwave

Authorization

Clearing & SettlementIPSP (E-commerce)

Issuing Processing

MOTO Payment Processing

Payment GatewayProcess Magnetic-Stripe Transactions

Switching

McKesson Patient Compass Payment GatewayApril 30, 2010 Trustwave

Mediterranean Smart Cards Company

3-D Secure Access Control Server

December 31, 2009 Trustwave

AuthorizationClearing & Settlement

Issuing Processing

Payment Gateway

35 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Mediterranean Smart Cards Company

Process Magnetic-Stripe Transactions

December 31, 2009 Trustwave

Switching

MegaPath OtherJanuary 31, 2010 Trustwave

Mellon Transaction Solutions

AuthorizationOctober 31, 2009 Trustwave

Clearing & Settlement

Issuing ProcessingProcess Magnetic-Stripe Transactions

Switching

Member Solutions, Inc. Payment GatewaySeptember 30, 2010 Trustwave

Merchant e-Solutions AuthorizationJanuary 31, 2010 Digital Resources Group (DRG)

Clearing & SettlementMOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe Transactions

Merchant Link, LLC Payment GatewayJanuary 31, 2010 Trustwave

Merchant One, Inc. Clearing & SettlementMarch 31, 2010 Information Exchange

Other

Merchant Partners AuthorizationJuly 31, 2010 Information Exchange

Clearing & SettlementPayment Gateway

Merchant Plus Payment GatewayJuly 31, 2010 Trustwave

Merchant Service Center Clearing & SettlementNovember 30, 2009 Information Exchange

Other

Payment Gateway

MERCHANT SERVICES DE MEXICO S.A DE C.V

OtherDecember 31, 2009 Trustwave

Merchant Services LTD OtherApril 30, 2010 The Compliance and Audit Group

Merchant Services Processing at Bank of America, NA

Clearing & SettlementMarch 31, 2010 Trustwave

Payment GatewaySwitching

Merchant Warehouse MOTO Payment ProcessingOctober 31, 2009 Trustwave

Payment Gateway

36 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Merchants Billing Services AuthorizationNovember 30, 2009 Information Exchange

Clearing & Settlement

IPSP (E-commerce)

MOTO Payment Processing

Payment GatewayProcess Magnetic-Stripe Transactions

Merchants’ Choice Payment Solutions

OtherSeptember 30, 2009 K3DES

Mercury Payment Systems Payment GatewayMarch 31, 2010 Coalfire

Meridian Enterprises, Inc. AuthorizationDecember 31, 2009 Protiviti Inc.

Issuing Processing

Meritus Payment Solutions Payment GatewayAugust 31, 2009 403 Labs

Merkle Response Group OtherNovember 30, 2009 Verizon

Meta Payment Systems Clearing & SettlementApril 30, 2010 Trustwave

Metavante - Electronic Payment Presentment

AuthorizationJuly 31, 2010 Trustwave

Metavante Biller Solution Product (BSP)

Payment GatewaySeptember 30, 2010 Trustwave

Metavante Corporation-Acquiring Solutions, ATM Driving & Gateway Services

AuthorizationApril 30, 2010 Trustwave

Clearing & SettlementProcess Magnetic-Stripe Transactions

Switching

Metavante Corporation-Issuing Solutions, Debit Account, Healthcare Payment Card, and Prepaid Card Solutions

AuthorizationApril 30, 2010 Trustwave

Clearing & SettlementIssuing Processing

Process Magnetic-Stripe TransactionsSwitching

Metavante Healthcare Payment Solutions Group, Benefits Payment Systems

OtherFebruary 28, 2010 TrustWave

Metavante-Merchant Acquiring and Credit Card Account Processing Services

OtherApril 30, 2010 Trustwave

37 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

MHM Resources, LLC Issuing ProcessingJuly 31, 2010 RSM McGladrey

Micros Systems, Inc. OtherJanuary 31, 2010 Trustwave

Microsoft Dynamics Online AuthorizationMay 31, 2010 Trustwave

IPSP (E-commerce)

MOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe Transactions

Minacs Worldwide Inc. MOTO Payment ProcessingApril 30, 2010 Trustwave

Other

Mindbody Hosting ProviderSeptember 30, 2009 Payment Software company (PSC)

Payment Gateway

Mobile Bytes, LLC OtherJanuary 31, 2010 Chief Security Officers

MOBIPLAS LLC AuthorizationOctober 31, 2009 EVRAAS.IT

MOTO Payment Processing

Modern Payment Solutions IPSP (E-commerce)April 30, 2010 SRC Security Research & Consulting GmbH

MOTO Payment Processing

Moneris Clearing & SettlementJuly 31, 2010 Control Gap

Other

Monexa Solutions, Inc. IPSP (E-commerce)January 31, 2010 Verizon Business

Payment Gateway

MoneyGram Payment Systems / Property Bridge

IPSP (E-commerce)May 31, 2010 Verizon Business:

Issuing ProcessingOther

Monitise Americas OtherSeptember 30, 2010 Trustwave

Motionsoft Hosting ProviderDecember 31, 2009 Trustwave

IPSP (E-commerce)

MOTO Payment Processing

Motivational Fulfillment & Logistics Services

MOTO Payment ProcessingFebruary 28, 2010 Tevora Business Solutions

mPay Gateway Payment GatewaySeptember 30, 2009 SecurityMetrics

MPOWER Labs AuthorizationNovember 30, 2009 403 Labs

Msi - Merchant Services, Inc. NJ

Clearing & SettlementMarch 31, 2010 Information Exchange

38 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Mtrex (Vision Bankcard, Inc.)

IPSP (E-commerce)February 28, 2010 Trustwave

Payment Gateway

Process Magnetic-Stripe Transactions

MTXEPS MOTO Payment ProcessingOctober 31, 2010 Trustwave

Payment Gateway

Switching

Multi Service Corp Payment GatewayFebruary 28, 2010 Trustwave

MWEB BUSINESS AuthorizationMarch 31, 2010 Trustwave

Clearing & SettlementIPSP (E-commerce)

Other

Switching

MySchoolBucks, LLC IPSP (E-commerce)July 31, 2010 Tevora Business Solutions

National Bankcard Services AuthorizationOctober 31, 2010 RSM McGladrey

Clearing & SettlementLoyalty Programs

Payment Gateway

National Card Services AuthorizationSeptember 30, 2009 K3DES

Clearing & Settlement

Issuing Processing

Other

National Credit Cards AuthorizationJuly 31, 2010 Nvision Group

Issuing Processing

Payment Gateway

Switching

National Fulfillment Services (NFS)

AuthorizationOctober 31, 2009 SecurityMetrics

Clearing & Settlement

Hosting ProviderMOTO Payment Processing

Payment Gateway

National Information Solutions Cooperative

Payment GatewayMay 31, 2010 Trustwave

National Merchant Center AuthorizationDecember 31, 2009 Digital Resources Group (DRG)

Payment Gateway

National Processing Company

OtherSeptember 30, 2010 Trustwave

39 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

National Records Management

OtherAugust 31, 2009 403 Labs

National Systems Corporation / QuikOrder, Inc.

Hosting ProviderJuly 31, 2010 Trustwave

Nationwide Payment Solutions

AuthorizationNovember 30, 2009 Information Exchange

Clearing & SettlementPayment Gateway

NBS Payment Solutions IPSP (E-commerce)September 30, 2010 Control Gap

MOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

NCMIC Finance Corporation Clearing & SettlementOctober 31, 2009 SecurityMetrics

Loyalty Programs

NCO Group OtherNovember 30, 2009 Verizon Business – Security

Nebraska Electronic Transfer System, Inc.

AuthorizationNovember 30, 2009 Trustwave

Clearing & Settlement

Switching

Nelnet Business Solutions, Inc

AuthorizationApril 30, 2010 Trustwave

Payment Gateway

NETBilling Payment GatewayNovember 30, 2009 SecurityMetrics

NetDeposit LLC AuthorizationDecember 31, 2009 Verizon Business

OtherPayment Gateway

Netspend AuthorizationJune 30, 2010 Coalfire Systems. Inc.

Clearing & SettlementIssuing Processing

Payment Gateway

NetSpend Corporation AuthorizationDecember 31, 2009 AT&T Consulting Solutions

Clearing & Settlement

Issuing Processing

Payment Gateway

NetSuite Hosting ProviderJanuary 31, 2010 Trustwave

Payment Gateway

Network Merchants AuthorizationMarch 31, 2010 Trustwave

Clearing & Settlement

40 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Network Merchants MOTO Payment ProcessingMarch 31, 2010 Trustwave

Payment Gateway

Process Magnetic-Stripe Transactions

Network Solutions OtherNovember 30, 2009 Payment Software Company (PSC)

Payment Gateway

New Edge Networks OtherJuly 31, 2010 Neohapsis Inc.

Newegg, Inc. Payment GatewayNovember 30, 2009 Trustwave

Newtek Merchant Services Clearing & SettlementOctober 31, 2009 SecurityMetrics

Loyalty Programs

NEXUS, S.A. AuthorizationFebruary 28, 2010 403labs

Clearing & SettlementIssuing Processing

North American Bancard Clearing & SettlementOctober 31, 2009 Information Exchange

NPC Secure Payment GatewayMarch 31, 2010 Trustwave

NRT TECHNOLOGIES, INC.

AuthorizationFebruary 28, 2010 Trustwave

Clearing & SettlementProcess Magnetic-Stripe Transactions

Switching

Nuance Communications, Inc.

OtherJuly 31, 2010 Trustwave

Nurbank AuthorizationMarch 31, 2010 IBM Internet Security Systems

Clearing & Settlement

Issuing Processing

MOTO Payment ProcessingProcess Magnetic-Stripe Transactions

NYCE Payments Network, LLC

AuthorizationApril 30, 2010 Trustwave

Clearing & Settlement

Oak Leaf Systems, Inc. dba Data Hosting Solutions

Hosting ProviderFebruary 28, 2010 Raven Eye

Obopay Clearing & SettlementMay 31, 2010 Digital Resources Group, LLC

MOTO Payment Processing

Other

41 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Official Payments Corporation

Clearing & SettlementFebruary 28, 2010 Trustwave

IPSP (E-commerce)

MOTO Payment Processing

Payment GatewaySwitching

OMS Online, LLC Hosting ProviderAugust 31, 2010 ControlCase

IPSP (E-commerce)MOTO Payment Processing

Other

Payment Gateway

OneBridge, Inc. Issuing ProcessingOctober 31, 2010 Crowe Horwath LLP

Switching

Open Solutions Issuing ProcessingApril 30, 2010 K3DES

Other

Open Solutions Canada Payment GatewayJuly 31, 2010 K3DES

Switching

OpSource MOTO Payment ProcessingFebruary 28, 2010 Trustwave

Payment Gateway

Opticard Payment Services Inc.

AuthorizationApril 30, 2010 Information Exchange

Clearing & Settlement

Issuing Processing

Loyalty ProgramsMOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Optimal Payments Clearing & SettlementJune 30, 2010 Trustwave

Payment Gateway

Oracle EasyPay Hosting ProviderAugust 31, 2011 Coalfire

IPSP (E-commerce)

Oracle E-Billing Hosting ProviderAugust 31, 2010 Coalfire Systems

IPSP (E-commerce)

Oracle On Demand Hosting ProviderAugust 31, 2010 Coalfire

IPSP (E-commerce)

ORBIT Systems Inc. - PCI Hosted Services

Hosting ProviderFebruary 28, 2010 Raven Eye

ORCC - eCommerce Division: Columbus

OtherNovember 30, 2009 Trustwave

42 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

ORCC - eCommerce Division: Parsippany

OtherOctober 31, 2009 Trustwave

ORCC - eCommerce Division: Princeton

Payment GatewayMay 31, 2010 Trustwave

OrderMotion Payment GatewayMay 31, 2010 Trustwave

OrderTalk IPSP (E-commerce)September 30, 2010 Trustwave

MOTO Payment ProcessingPayment Gateway

OverDrive Inc Clearing & SettlementDecember 31, 2009 NetWorks Group

IPSP (E-commerce)Payment Gateway

Paciolan, Inc. Hosting ProviderOctober 31, 2009 Trustwave

Payment Gateway

Process Magnetic-Stripe Transactions

Palm Coast Data MOTO Payment ProcessingJanuary 31, 2010 K3DES

Payment Gateway

PAMS Lunchroom LLC IPSP (E-commerce)August 31, 2010 Trustwave

MOTO Payment Processing

Panasonic Avionics Corporation

Payment GatewayApril 30, 2010 Arsenal Security Group

Parkeon Payment GatewayDecember 31, 2009 Trustwave

Parkmobile US OtherDecember 31, 2009 Coalfire

Passkey International, Inc. Payment GatewayJuly 31, 2010 IOActive Inc.

PassPort EFT Solutions AuthorizationDecember 31, 2009 Trustwave

Switching

Passport Health Communications, Inc.

Payment GatewayFebruary 28, 2010 Trustwave

Pay DQ Payment GatewayNovember 30, 2009 Solutionary

PAY.ON IPSP (E-commerce)December 31, 2009 Acertigo AG

Payment Gateway

Paycom.net IPSP (E-commerce)November 30, 2009 Protiviti

PayConnexion Payment GatewayApril 30, 2010 Jefferson Wells

PAYjr Clearing & SettlementOctober 31, 2009 Information Exchange

Issuing ProcessingOther

43 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

PayJunction IPSP (E-commerce)April 30, 2010 Payment Software Company (PSC)

MOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe Transactions

PayLeap LLC Clearing & SettlementFebruary 28, 2010 Information Exchange

Payment Gateway

PayM8 Pty Ltd IPSP (E-commerce)January 31, 2010 Trustwave

Payment Gateway

Payment Data Systems AuthorizationMay 31, 2010 Information Exchange Inc.

Clearing & Settlement

Issuing Processing

Payment Gateway

Payment Processing, Inc. Payment GatewayApril 30, 2010 Trustwave

Process Magnetic-Stripe Transactions

Payment Service Network Payment GatewayDecember 31, 2010 Digital Resources Group (DRG)

Paymentus Corporation OtherOctober 31, 2009 SPIguard

Payment Gateway

Paymetric AuthorizationAugust 31, 2010 Trustwave

Clearing & Settlement

OtherPayment Gateway

PayOnline System LLC Payment GatewayJuly 31, 2010 Digital Security

PayPal IPSP (E-commerce)December 31, 2009 IBM Internet Security Systems

MOTO Payment Processing

Payment Gateway

PaySentinel Clearing & SettlementSeptember 30, 2009 Trustwave

IPSP (E-commerce)

Payment Gateway

Switching

PaySimple Payment GatewaySeptember 30, 2010 Coalfire

PayTrace AuthorizationAugust 31, 2010 Information Exchange

Clearing & Settlement

IPSP (E-commerce)

MOTO Payment Processing

Payment Gateway

44 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

PayTrace Process Magnetic-Stripe Transactions

August 31, 2010 Information Exchange

Payvision BV AuthorizationAugust 31, 2010 BT INS

Clearing & SettlementMOTO Payment Processing

Payment Gateway

PBD Worldwide Fulfillment Services

OtherJuly 31, 2010 Trustwave

PE Systems AuthorizationAugust 31, 2009 Trustwave

Payment GatewaySwitching

PeopleSupport-Costa Rica OtherMay 31, 2010 Verisign

PETROCARD LTD AuthorizationAugust 31, 2010 Inforzaschita

Clearing & SettlementIssuing Processing

Process Magnetic-Stripe TransactionsSwitching

PFSweb, Inc. IPSP (E-commerce)April 30, 2010 Trustwave

MOTO Payment Processing

Phoenix Management Networks

OtherAugust 31, 2010 igxglobal, Inc.

PhoenixNap, LLC Hosting ProviderJanuary 31, 2010 Coalfire

Pipeline Data IPSP (E-commerce)November 30, 2010 Coalfire Systems. Inc.

MOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Pitney Bowes Payment GatewayMarch 31, 2010 IBM Internet Security Systems

Pivotal Payments Clearing & SettlementFebruary 28, 2010 SecurityMetrics

Loyalty Programs

Payment Gateway

Planet eShop Clearing & SettlementOctober 31, 2009 Information Exchange

MOTO Payment Processing

Payment Gateway

Planet Payment AuthorizationMarch 31, 2010 Trustwave

Clearing & SettlementMOTO Payment Processing

Payment Gateway

45 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Planet Payment Process Magnetic-Stripe Transactions

March 31, 2010 Trustwave

Plug & Pay Technologies, Inc.

Clearing & SettlementJune 30, 2010 SecurityMetrics

Payment GatewayProcess Magnetic-Stripe Transactions

Portmone IPSP (E-commerce)December 31, 2009 SRC Germany

POS Portal OtherAugust 31, 2010 Coalfire Systems. Inc.

Posatel Inc. AuthorizationMarch 31, 2010 SPIguard Security Solutions Inc.

Clearing & Settlement

Issuing Processing

Process Magnetic-Stripe TransactionsSwitching

POST Integrations, Inc. (Ebocom)

Clearing & SettlementApril 30, 2010 CyberTrust

PowerPay, LLC OtherOctober 31, 2009 Payment Software company (PSC)

Preferred Health Technology Payment GatewayAugust 31, 2010 Trustwave

PREMIER TECHNOLOGIES PTY LTD

IPSP (E-commerce)March 31, 2010 Witham Laboratories

Payment Gateway

Presto - Publix Super Markets

OtherOctober 31, 2009 Solutionary

Switching

Primoris Services LLC Clearing & SettlementJuly 31, 2010 SecurityMetrics

IPSP (E-commerce)

MOTO Payment Processing

Payment Gateway

Priority Payment Systems OtherApril 30, 2010 SecurityMetrics

Procecard, a wholly owned BHD company

AuthorizationApril 30, 2010 Internet Security Systems,

Payment GatewaySwitching

Process America Clearing & SettlementSeptember 30, 2010 Information Exchange

Payment Gateway

ProfitStars Payment GatewaySeptember 30, 2010 Trustwave

46 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Promoción y Operación S.A. de C.V. (PROSA)

AuthorizationJuly 31, 2010 403 Labs

Clearing & Settlement

Issuing Processing

Switching

ProPay USA, Inc. AuthorizationJune 30, 2010 SecurityMetrics

Issuing ProcessingPayment GatewayProcess Magnetic-Stripe Transactions

Propco Marketing Loyalty ProgramsApril 30, 2010 Neohapsis, Inc.

Protocol Global Solutions OtherSeptember 30, 2010 Verizon Business Security Solutions

PSCU Financial Services, Inc.

Clearing & SettlementFebruary 28, 2010 Verizon Business

Loyalty Programs

Other

Payment GatewaySwitching

PSI Gate Payment GatewayApril 30, 2010 Trustwave

PSOnline, LLC OtherAugust 31, 2010 ControlCase

Pulse Network LLC AuthorizationJuly 31, 2010 K3DES

Clearing & SettlementMOTO Payment ProcessingProcess Magnetic-Stripe Transactions

Switching

PURE COMMERCE PTY LTD

AuthorizationMarch 31, 2010 IBM Internet Security Systems

Clearing & Settlement

Hosting ProviderIPSP (E-commerce)

OtherPayment Gateway

Qgiv Payment GatewayMay 31, 2010 SecurityMetrics

QS/1 AuthorizationJune 30, 2010 Trustwave

Payment Gateway

QuanComm, Inc. Payment GatewayJuly 31, 2010 Trustwave

Quantum Services Payment GatewaySeptember 30, 2010 Raven Eye

47 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Quickbooks Merchant Services

IPSP (E-commerce)October 31, 2009 Trustwave

Process Magnetic-Stripe Transactions

Rackspace Hosting Hosting ProviderJuly 31, 2010 Trustwave

Radiant Systems - ALOHA TAKEOUT

Payment GatewayOctober 31, 2009 Coalfire

RADIANT SYSTEMS - CPGATEWAY

Payment GatewayOctober 31, 2009 Coalfire

Radiant Systems - CPOnline IPSP (E-commerce)August 31, 2010 Coalfire Systems. Inc.

RADIANT SYSTEMS - PCI DATA CENTERS

Hosting ProviderOctober 31, 2009 Coalfire

Rainbow Rewards Loyalty ProgramsFebruary 28, 2010 Coalfire

RBS WorldPay - High Capacity Gateway

Payment GatewayMarch 31, 2010 Arsenal Secuirty Group

RBS WorldPay Inc. - Acquiring

AuthorizationMay 31, 2010 Verizon Business

Clearing & Settlement

IPSP (E-commerce)

Issuing ProcessingPayment GatewayProcess Magnetic-Stripe Transactions

Ready Financial Group OtherJuly 31, 2010 Trustwave

RealPage, Inc. Payment GatewayJune 30, 2010 Trustwave

Rearden Commerce IPSP (E-commerce)April 30, 2010 IBM Internet Security Systems

Other

Receivable Management Services

OtherSeptember 30, 2010 Trustwave

Redbanc, S.A. Clearing & SettlementJune 30, 2010 Xtrategies, LLC

Process Magnetic-Stripe TransactionsSwitching

Regions Bank Issuing ProcessingFebruary 28, 2010 Jefferson Wells

RegOnline AuthorizationApril 30, 2010 Coalfire

Clearing & Settlement

Payment Gateway

Results Technologies, Inc OtherSeptember 30, 2009 SecureWorks, Inc

48 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Resurgent Capital Services OtherAugust 31, 2010 Protiviti

Retail Decisions IPSP (E-commerce)October 31, 2010 Payment Software Company, LLC (PSC)

Payment Gateway

Revelex Corporation OtherSeptember 30, 2010 Trustwave

RevTrak, Inc AuthorizationMay 31, 2010 Coalfire Systems. Inc.

Payment Gateway

Rewards Network Loyalty ProgramsJuly 31, 2010 Sunera

RewardsNow Loyalty ProgramsMarch 31, 2010 AT&T Consulting Solutions, Inc.

ROAM Data, Inc. Payment GatewayDecember 31, 2009 igxglobal, Inc.

RocketGate AuthorizationOctober 31, 2009 403 Labs

Clearing & Settlement

Payment Gateway

RSI International IPSP (E-commerce)January 31, 2010 Coalfire

Payment Gateway

RT Lawrence Payment GatewayApril 30, 2010 Trustwave

S1 Corp. - Postilion Retail POS Environment

Clearing & SettlementOctober 31, 2009 Trustwave

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

Sage Payment Solutions (formerly Verus Card Services)

Payment GatewayJuly 31, 2010 Verizon Business Network Services Inc.

Sallie Mae Issuing ProcessingApril 30, 2010 Specialized Security Services

Payment Gateway

SATELLITE RECEIVERS, LTD. (Cash Depot)

OtherDecember 31, 2009 K3DES

Switching

Savvis Communications Corporation

Hosting ProviderAugust 31, 2010 COALFIRE SYSTEMS

SBI VERITRANS CO., LTD Payment GatewayDecember 31, 2009 ICMS

School-Link Technologies AuthorizationApril 30, 2010 Coalfire

IPSP (E-commerce)

Other

SecureNet AuthorizationJune 30, 2010 Arsenal Security Group

49 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

SecureNet Clearing & SettlementJune 30, 2010 Arsenal Security Group

Hosting Provider

IPSP (E-commerce)

Loyalty Programs

MOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Switching

SegPay Clearing & SettlementApril 30, 2010 Trustwave

Payment Gateway

Semtek Innovative Solutions OtherJuly 31, 2010 SecurityMetrics

Payment Gateway

Sequoia Retail Systems AuthorizationJuly 31, 2010 Digital Resources Group (DRG)

Hosting Provider

Servebase 3-D Secure Access Control Server

January 31, 2010 Foregenix

AuthorizationClearing & Settlement

IPSP (E-commerce)

MOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

ServiceU Corporation Hosting ProviderApril 30, 2010 K3DES

MOTO Payment Processing

Payment Gateway

Servicios Electrónicos Globales S.A. de C.V. (E-Global)

AuthorizationOctober 31, 2009 403 Labs

Clearing & SettlementIssuing Processing

Process Magnetic-Stripe Transactions

Switching

SHC Direct Loyalty ProgramsApril 30, 2010 Trustwave

Shift4 Clearing & SettlementMay 31, 2010 Verizon Business

Loyalty ProgramsPayment Gateway

Switching

Signature Card Services Loyalty ProgramsOctober 31, 2009 SecurityMetrics

Other

50 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Simmons First National Corp.

Clearing & SettlementSeptember 30, 2010 Trustwave

Issuing Processing

Simply Easier Payments Payment GatewayOctober 31, 2009 Trustwave

SITA Information Networking Computing, USA Inc.

AuthorizationApril 30, 2010 IBM Internet Security Systems

Switching

Six Card Solutions Luxembourg S.A.

AuthorizationApril 30, 2010 VOC - Consultancy B.V.

Clearing & SettlementIPSP (E-commerce)

Payment GatewayProcess Magnetic-Stripe Transactions

Skipjack Financial Services AuthorizationFebruary 28, 2010 Trustwave

Clearing & Settlement

Process Magnetic-Stripe Transactions

SlimCD Payment GatewaySeptember 30, 2009 Enterprise Risk Management

Smart Business Technology, Inc

AuthorizationMarch 31, 2010 T3i

Clearing & Settlement

Loyalty Programs

Payment GatewaySwitching

SmartEtailing, Inc Hosting ProviderSeptember 30, 2010 Digital Resources Group (DRG)

Payment Gateway

SOCIETE GENERALE - SPLITSKA BANKA D.D.

Clearing & SettlementMay 31, 2010 Acertigo

Payment Processing

SoftHotel Payment GatewayOctober 31, 2009 Trustwave

SoundBite Communications Hosting ProviderSeptember 30, 2009 K3DES

Other

Spacenet OtherMay 31, 2010 Trustwave

Speedpay (AKA Western Union Payment Services)

OtherDecember 31, 2009 Trustwave

Spendvision OtherApril 30, 2010 Symantec

Springbok Issuing ProcessingSeptember 30, 2009 K3DES

51 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Square, Inc. IPSP (E-commerce)May 31, 2010 Coalfire

Payment Gateway

Process Magnetic-Stripe Transactions

Stafford Associates Hosting ProviderOctober 31, 2009 CrimsonSecurity

Stamps.com IPSP (E-commerce)August 31, 2010 Trustwave

MOTO Payment ProcessingPayment Gateway

StarCite, Inc. Payment GatewayFebruary 28, 2010 RSM McGladrey

Sterling Payment Technologies

AuthorizationAugust 31, 2010 Trustwave

Clearing & SettlementIPSP (E-commerce)

Loyalty ProgramsMOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe Transactions

Sterling Valley Systems, Inc.- Inntopia

Payment GatewayJuly 31, 2010 Trustwave

StoneEagle Services, Inc. AuthorizationOctober 31, 2009 Information Exchange Inc.

Clearing & Settlement

Payment Gateway

StoresOnline, Inc. / iMergent, Inc

Hosting ProviderJanuary 31, 2010 SecurityMetrics

Payment Gateway

Strategic Fulfillment Group / Dynamic Resource Group (SFG/DRG)

IPSP (E-commerce)August 31, 2010 Trustwave

MOTO Payment Processing

Payment Gateway

Strategic Profits AuthorizationApril 30, 2010 SPIguard Security Solutions Inc.

Clearing & SettlementMOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe Transactions

SunGard Availability Services

Hosting ProviderFebruary 28, 2010 Fortrex Technologies

SunGard Public Sector Hosting ProviderOctober 31, 2009 SecurityMetrics

Payment Gateway

52 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Superior Financial Systems, LLC

OtherSeptember 30, 2009 Trustwave

Synapse Group, Inc. OtherOctober 31, 2010 Neohapsis Inc.

SystemPay, LLC AuthorizationApril 30, 2010 Digital Resources Group (DRG)

IPSP (E-commerce)

Payment Gateway

T.K. Keith Company, Inc. (dba Primax)

OtherJuly 31, 2010 Verizon Business Network Services Inc.

TalentBeat, Inc Payment GatewaySeptember 30, 2009 K3DES

Switching

Tangible Software Payment GatewayFebruary 28, 2010 Arsenal Security Group

TD Merchant Services AuthorizationMarch 31, 2010 Telus Security Solutions

Tecnicard Inc AuthorizationMay 31, 2010 Xtrategies

Clearing & SettlementIssuing ProcessingMOTO Payment Processing

Process Magnetic-Stripe Transactions

Switching

Teleflora Hosting ProviderFebruary 28, 2010 Trustwave

Payment Gateway

Telekenex, Inc. OtherJune 30, 2010 Trustwave

Teleperformance Mexico Loyalty ProgramsMarch 31, 2010 Tevora Business Solutions

MOTO Payment Processing

Teleperformance USA Hosting ProviderFebruary 28, 2010 Tevora Business Solutions

MOTO Payment Processing

Tellme, A Microsoft Subsidiary

MOTO Payment ProcessingSeptember 30, 2010 Trustwave

Other

Telus Health and Financial Service Solutions (Emergis)

AuthorizationJune 30, 2010 Trustwave

Payment Gateway

Telvista - Grupo Tecnico de Servicios

MOTO Payment ProcessingJanuary 31, 2010 Trustwave

Tempus Technologies Payment GatewayMay 31, 2010 Fortrex Technologies

Teranet Enterprises Inc. IPSP (E-commerce)April 30, 2010 Trustwave

53 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

TermNet Merchant Services OtherJune 30, 2010 Trustwave

Terremark North America, Inc.

Hosting ProviderOctober 31, 2009 AT&T Consulting Solutions

T-Gate LLC Payment GatewayApril 30, 2010 Trustwave

The Bancorp Bank IPSP (E-commerce)April 30, 2010 FishNet Security

Loyalty Programs

Payment Gateway

The Jay Group IPSP (E-commerce)September 30, 2009 K3DES

Payment Gateway

The Members Group OtherJanuary 31, 2010 RSM McGladrey

Ticketmaster, LLC OtherJune 30, 2010 Trustwave

Payment GatewayProcess Magnetic-Stripe Transactions

TicketNetwork, Inc. Payment GatewayNovember 30, 2009 403 Labs

Tickets.com AuthorizationNovember 30, 2010 Trustwave

Payment Gateway

Process Magnetic-Stripe Transactions

TIES AuthorizationJanuary 31, 2010 Trustwave

IPSP (E-commerce)

MOTO Payment ProcessingPayment Gateway

Time Customer Service AuthorizationJuly 31, 2010 Neohapsis, Inc

Other

Payment Gateway

TIO Networks Corp Payment GatewayOctober 31, 2010 SPIguard Security Solutions Inc.

Total Card, Inc. OtherMay 31, 2010 SecurityMetrics, Inc.

Total Merchant Services Clearing & SettlementFebruary 28, 2010 Information Exchange

Other

TouchNet Clearing & SettlementApril 30, 2010 Trustwave

Payment Gateway

Process Magnetic-Stripe Transactions

Town North Bank Credit Card Services

OtherFebruary 28, 2010 Trustwave

TranLogix, Inc IPSP (E-commerce)April 30, 2010 Trustwave

54 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

TranLogix, Inc Payment GatewayApril 30, 2010 Trustwave

TRANSACT24 LIMITED Payment GatewayDecember 31, 2009 Evolution Security Systems

Transaction Network Services (TNS)

OtherJune 30, 2010 Trustwave

Payment Gateway

Switching

Transaction Network Services (TNS) – TNSPay Gateway

Payment GatewayJune 30, 2010 Trustwave

Transaction Payment Systems (TPS NJ)

Process Magnetic-Stripe Transactions

September 30, 2010 Trustwave

Transaction Processing Partners

AuthorizationMay 31, 2010 Information Exchange

Clearing & SettlementPayment Gateway

Transactis Clearing & SettlementJune 30, 2010 INFORMATION EXCHANGE, INC

OtherPayment Gateway

Transbank, S.A. AuthorizationDecember 31, 2009 Xtrategies

Clearing & SettlementIPSP (E-commerce)

MOTO Payment Processing

Payment GatewayProcess Magnetic-Stripe Transactions

Switching

TransCore Hosting ProviderApril 30, 2010 Trustwave

Payment Gateway

TransFirst OtherMay 31, 2010 Solutionary, Inc.

Payment Gateway

TransVerse Systems AuthorizationApril 30, 2010 INFORMATION EXCHANGE, INC

Clearing & SettlementLoyalty Programs

MOTO Payment Processing

OtherPayment GatewayProcess Magnetic-Stripe Transactions

Tranzact Payment GatewayMay 31, 2010 Trustwave

55 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Travelport GDS IPSP (E-commerce)February 28, 2010 Trustwave

Tridata - DATALINK BANKCARD SERVICES CO.

OtherDecember 31, 2009 Trustwave

TriSource Solutions, LLC (formerly Nobel EFT)

Clearing & SettlementSeptember 30, 2010 COALFIRE SYSTEMS, INC.

Tropical Productions Clearing & SettlementJune 30, 2010 Information Exchange

Other

Payment Gateway

TrustCommerce Payment GatewayApril 30, 2010 403 Labs

Process Magnetic-Stripe Transactions

Switching

TRXSERVICES LLC Payment GatewayOctober 31, 2010 Coalfire Systems. Inc.

TSD Rental Payment GatewayJanuary 31, 2010 Coalfire

TSYS (Issuing Processing) Issuing ProcessingJanuary 31, 2010 Trustwave

TSYS Acquiring Solutions (formerly Vital Processing Services)

AuthorizationApril 30, 2010 Trustwave

Clearing & SettlementLoyalty Programs

TSYS Customer Insight (ProphIT)

Loyalty ProgramsJanuary 31, 2010 TrustWave

MOTO Payment Processing

TSYS Loyalty (IM Platform/TLP Platform)

Loyalty ProgramsJuly 31, 2010 Trustwave

TSYS Managed Services - Myersville (Merlin Solutions)

OtherApril 30, 2010 Trustwave

TSYS Prepaid AuthorizationJuly 31, 2010 Trustwave

Issuing ProcessingMOTO Payment Processing

Prepaid Card Processing

TSYS Procard OtherJanuary 31, 2010 Trustwave

Twin Oaks MOTO Payment ProcessingFebruary 28, 2010 Janus Associates

TxVia AuthorizationJanuary 31, 2010 403 Labs

Clearing & Settlement

Issuing Processing

OtherPayment GatewaySwitching

56 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

U.S. Bank - ATM Banking AuthorizationApril 30, 2010 TrustWave

Clearing & Settlement

Issuing Processing

Switching

U.S. Bank - Gaming Services

AuthorizationApril 30, 2010 TrustWave

Clearing & SettlementIssuing ProcessingSwitching

Ukrainian Processing Center (UPC)

AuthorizationMarch 31, 2010 SRC Germany

Clearing & Settlement

IPSP (E-commerce)

Issuing Processing

MOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Ukranian Financial Network AuthorizationAugust 31, 2009 Security Innovation

Clearing & Settlement

Issuing Processing

Process Magnetic-Stripe Transactions

Unirush, LLC (Rush Card) Payment GatewayDecember 31, 2009 Fortrex Technologies

UNITED CARD SERVICE AuthorizationJanuary 31, 2010 Jet Infosystems

Clearing & Settlement

Issuing Processing

Payment GatewaySwitching

United Merchant Services, Inc. (UMSI)

AuthorizationApril 30, 2010 Arsenal Security Group

Payment Gateway

United Payment Services AuthorizationJanuary 31, 2010 Accudata Systems

Clearing & Settlement

MOTO Payment ProcessingPayment Gateway

United States Department of The Treasury, Financial Management Service

Payment GatewayMarch 31, 2010 SecureState

UniteU Technologies, Inc Hosting ProviderAugust 31, 2010 SecurityMetrics

Payment Gateway

57 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Universal Money Centers Inc.

AuthorizationSeptember 30, 2010 Information Exchange

Clearing & Settlement

Payment Gateway

US Bancorp - Retail Payment Solutions - Integrated Card Systems (ICS)

Issuing ProcessingDecember 31, 2009 TrustWave

US Bank - Access Online OtherJuly 31, 2010 TrustWave

US Bank - Voyager OtherJuly 31, 2010 TrustWave

US Bank E-Payment Service

Internet Payment ProcessingJanuary 31, 2010 Trustwave

US Bank Multiservice Aviation

AuthorizationDecember 31, 2009 Trustwave

Payment Gateway

Switching

USA ePay AuthorizationApril 30, 2010 Trustwave

Clearing & Settlement

Payment Gateway

USA Fulfillment, Inc. AuthorizationNovember 30, 2009 AT&T Consulting

Clearing & SettlementHosting Provider

MOTO Payment Processing

Payment Gateway

USA Payment Systems AuthorizationDecember 31, 2009 K3DES

Clearing & Settlement

OtherProcess Magnetic-Stripe Transactions

Switching

USA Technologies Payment GatewayJanuary 31, 2010 Trustwave

V.A.S.A. 3-D Secure Access Control Server

August 31, 2010 Xtrategies

AuthorizationClearing & Settlement

IPSP (E-commerce)

Issuing Processing

Loyalty ProgramsMOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

58 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

ValuCard Nigeria Plc 3-D Secure Access Control Server

October 31, 2010 Trustwave

Authorization

Issuing Processing

Payment GatewayProcess Magnetic-Stripe Transactions

Switching

VALUE PAY SERVICES LLC, AN IPC COMPANY

Clearing & SettlementNovember 30, 2009 Trustwave

Payment Gateway

Vanco Services Payment GatewayJanuary 31, 2010 SecurityMetrics

Process Magnetic-Stripe Transactions

Varolii Corporation OtherMarch 31, 2010 AT&T Consulting, Inc.

Payment Gateway

Vcommerce OtherOctober 31, 2009 403 Labs

Payment Gateway

Ventanex Payment GatewayApril 30, 2010 Chief Security Officers

VenTek International AuthorizationNovember 30, 2009 Digital Resources Group (DRG)

Payment Gateway

VENTURE INFOTEK GLOBAL PVT LTD

AuthorizationDecember 31, 2009 ControlCase

Clearing & Settlement

Issuing ProcessingLoyalty Programs

MOTO Payment ProcessingProcess Magnetic-Stripe Transactions

Switching

Ventus Networks ATM ProcessingOctober 31, 2009 Janus Associates

Veracity Payment Solutions OtherDecember 31, 2009 Trustwave

VERePAY (formerly VEReFIED)

AuthorizationOctober 31, 2009 Solutionary

MOTO Payment Processing

Payment Gateway

Verifi Clearing & SettlementJune 30, 2010 Trustwave

Hosting ProviderPayment Gateway

Verifone Payment GatewayJune 30, 2010 Trustwave

59 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Verifone Transportation Systems

Payment GatewayApril 30, 2010 Fortrex Technologies

Verizon Business (formerly MCI)

Payment GatewayNovember 30, 2009 TrustWave

Switching

Verizon Business Global Services System Integration (VB-GSSI)

Payment GatewayJanuary 31, 2010 Trustwave

Verizon Computing as a Service

Hosting ProviderJune 30, 2010 Trustwave

Verrus Mobile Technologies AuthorizationNovember 30, 2009 Trustwave

MOTO Payment Processing

Vesdia Loyalty ProgramsApril 30, 2010 Coalfire Systems. Inc.

Vesta Corporation IPSP (E-commerce)June 30, 2010 AT&T Consulting, Inc.

Vindicia OtherMarch 31, 2010 Payment Software Company (PSC)

Payment Gateway

Visa Argentina S A 3-D Secure Access Control Server

August 31, 2010 Xtrategies, LLC

AuthorizationClearing & SettlementIPSP (E-commerce)

Issuing Processing

Loyalty ProgramsMOTO Payment Processing

Payment Gateway

Process Magnetic-Stripe TransactionsSwitching

Visa Inc. (including Visa Debit Processing)

3-D Secure Access Control Server

June 30, 2010 Trustwave

Authorization

Clearing & Settlement

Hosting Provider

IPSP (E-commerce)Issuing Processing

Loyalty ProgramsMOTO Payment ProcessingPayment Gateway

Process Magnetic-Stripe Transactions

Switching

60 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Visa Intellilink OtherDecember 31, 2009 Trustwave

Voice Data Solutions Payment GatewayOctober 31, 2009 Trustwave

Volusion Hosting ProviderJanuary 31, 2010 Payment Software Company (PSC)

VXI Global Solutions, Inc MOTO Payment ProcessingOctober 31, 2009 Trustwave

Other

Washington Metropolitan Area Transit Authority

AuthorizationDecember 31, 2009 ControlCase

Payment Gateway

Way Systems Payment GatewayOctober 31, 2009 Jefferson Wells

WEB ACTIVE CORPORATION PTY LTD (eWay)

Payment GatewayAugust 31, 2010 Securus Global

West - Managed Call Center Services

OtherDecember 31, 2009 Continuum Worldwide Corporation

West at Home MOTO Payment ProcessingSeptember 30, 2009 Verizon Business

West Business Services: WBS Data Vault

MOTO Payment ProcessingApril 30, 2010 Trustwave

West Direct - Direct Response

MOTO Payment ProcessingApril 30, 2010 Trustwave

West Direct - Smartsell OtherOctober 31, 2009 Trustwave

West Interactive DataGuard MOTO Payment ProcessingApril 30, 2010 Trustwave

Wipro Limited - Best Buy OtherSeptember 30, 2009 SISA Information Security Pvt Ltd

Wiretrust Payment GatewayJuly 31, 2010 Coalfire Systems. Inc.

Xtec AuthorizationApril 30, 2010 Information Exchange

Clearing & Settlement

Payment Gateway

Yahoo! Stores IPSP (E-commerce)November 30, 2009 Accuvant

Yapstone Inc. MOTO Payment ProcessingApril 30, 2010 SecurityMetrics

Payment Gateway

Yes Group Limited Payment GatewayFebruary 28, 2010 Evolution Security System

Yes-Pay International Ltd. IPSP (E-commerce)July 31, 2010 Fortconsult

Young America Loyalty ProgramsJanuary 31, 2010 Trustwave

MOTO Payment Processing

Zagrebačka banka d.d. AuthorizationNovember 30, 2009 Internet Security Systems

61 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.

SERVICE PROVIDERVALIDATION

DATESERVICES

COVERED BY REVIEW (1) ASSESSOR

List of Compliant Service Providers - All

AP CEMEA LAC NA

Zagrebačka banka d.d. Clearing & SettlementNovember 30, 2009 Internet Security Systems

ZEUS Corporation AuthorizationOctober 31, 2010 NTT Data Security Corporation

Clearing & SettlementIPSP (E-commerce)

Payment Gateway

ZirMed, Inc. OtherApril 30, 2010 403 Labs

Payment Gateway

Zuora, Inc. AuthorizationJune 30, 2010 Digital Resources Group (DRG)

Payment Gateway

62 of 62

(1) PCI DSS assessments represent only a "snapshot" of security in place at the time of the review, and do not guarantee that those security controls remain in place after the review is complete. These reviews did not cover proprietary software solutions that may be used or sold by these service providers.

© 2010 Visa Inc.

Visa has no duty to clients, merchants, processors or other third parties to obtain or review reports from any party required to submit a report. Visa is not responsible to any party for the timeliness, accuracy or completeness of any report. Inclusion on this list indicates only that the service provider successfully validated PCI DSS compliance, based on the report of an independent Qualified Security Assessor (QSA). Visa does not endorse the service providers or their business processes or practices. Visa has sole discretion to include or exclude entities on this list.

* Current PCI DSS status is under review.