Laserfiche WebLink
EXHIBIT: PCI AND PA DSS COMPLIANCE; <br /> 1. DEFINITIONS <br /> A Self Hosted Subscriber's instance of T2 Flex and the T2 Credit Card Solution is <br /> installed entirely on the Subscriber's site(s). A T2 Hosted Subscriber's instance of T2 Flex and <br /> the hosted components of the T2 Systems Credit Card Solution are installed and run in the T2 <br /> Hosting Environment. A T2 Hosted Subscriber has both hosted and Non-Hosted Components. <br /> The Standard Network is part of the T2 Hosting Environment and contains 72 Flex <br /> servers,T2 e-Business Solutions Servers,and other equipment.T2 Hosted Subscribers who do <br /> not process payments through the Hosting Environment use only the Standard Network. The <br /> Standard Network uses standard,commercially reasonable security practices to control and <br /> protect the transmission of data to and from the Hosting Environment. <br /> The Payment Network is part of the 12 Hosting Environment and is used solely for <br /> payment processing.T2 Hosted Subscribers who process payments through the Hosting <br /> Environment use the Standard Network for routine Flex T2 e-Business Solutions operational <br /> processes and the Payment Network for payment processing,The Payment Network is secured to <br /> the Payment Card Industry Data Security Standard(PCI DSS) . 12 Systems is responsible for <br /> maintaining PCI DSS compliance of the T2 Hosting Environment Payment Network. <br /> Non-Hosted Components are considered to be any software components of T2 Flex, <br /> T2 e-Business Solutions,and/or the T2 Systems Credit Card Solution installed on hardware <br /> located at the Subscriber site(s)and any hardware located at the Subscriber site(s).Non-Hosted <br /> Components are not part of the T2 Hosting Environment,the Standard Network,or the Payment <br /> Network, and are not the responsibility of T2 Systems. <br /> The T2 Hosting Environment includes the T2 servers,networking equipment,and <br /> related devices located at T2's data center,and the software and data that reside on that <br /> equipment. There are two networks within the T2 Hosting Environment: Standard and Payment. <br /> II. T2 SYSTEMS RF,SPONSMILITIES <br /> T2 Systems shall provide Payment Card Industry Payment Application Data Security <br /> Standard(PCI PA-DSS)validated software for processing credit card payments(T2 Systems <br /> Credit Card Solution), including a PA-DSS Implementation Guide containing guidelines for <br /> installing and configuring the T2 Systems Credit Card Solution to support Payment Card Industry <br /> Data Security Standard(PCI DSS)compliance.T2 Systems shall maintain the PCI PA-DSS <br /> validation of the T2 Systems Credit Card Solution its PA-DSS Implementation Guide. <br /> Note: Use of PCI PA-DSS validated software and its PA-DSS <br /> Implementation Guide does not guarantee merchant's PCI <br /> DSS compliance. For complete and current PCI DSS <br /> requirements, Subscribers should reference the Payment <br /> Card Industry Security Standards Council"I (PCI SSC)website <br /> at www.pcisecuritystandards.org. <br /> VERSION 080212 20 <br />