R2012-169 ACCEPTING THE AGREEMENT WITH T2 SYSTEMS, INC.

Home Browse Search

For both the Standard and Payment Networks, T2 is responsible for the security of the data once it is inside the Hosting Environment and for using commercially reasonable data security practices to control and protect the transmission of data to and from the Hosting Environment. T2 Systems shall maintain the Payment Network in a validated PCI DSS compliant environment, including use of PCI PA-DSS validated software for processing credit card payments,the T2 Systems Credit Card Solution,configured as directed by its PA-DSS Implementation Guide. SUBSCRIBER RESPONSIBILITIES Subscribers are responsible for providing and maintaining a Payment Card Industry Data Security Standard(PCI DSS)compliant environment at their site(s) in which components of the T2 Systems Credit Card Solution may be installed,and for validation of that environment as required by their payment gateway, merchant bank, payment brand,or other entity with which the Subscriber is contracted to process payments. The Subscriber is responsible for configuring T2 Systems Credit Card Solution according to the PA-DSS Implementation Guide. Once the T2 Systems Credit Card Solution has been implemented at the Subscriber site(s), Subscribers are responsible for maintaining Non--Hosted Components of the T2 Systems Credit Card Solution, including implementation in a timely manner of any updates to the T2 Systems Credit Card Solution software and/or PA-DSS Implementation Guide provided by T2 Systems. Please note: Acceptance of a given payment application by the PCI Security Standards Council,LLC(PCI SSC)only applies to the specific version of that payment application that was reviewed by a PA-QSA and subsequently accepted by PCI SSC(the"Accepted Version"). If any aspect of a payment application or version thereof is different from that which was reviewed by the PA-QSA and accepted by PCI SSC—even if the different payment application or version (the "Alternate Version")conforms to the basic product description of the Accepted Version—then the Alternate Version should not be considered accepted by PCI SSC,nor promoted as accepted by PCI SSC. No vendor or other third party may refer to a payment application as"PCI Approved"or "PCI SSC Approved",and no vendor or other third patty may otherwise state or imply that PCI SSC has, in whole or part,accepted or approved any aspect of a vendor or its services or payment applications,except to the extent and subject to the terms and restrictions expressly set forth in a written agreement with PCI SSC,or in a PA-DSS letter of acceptance provided by PC1 SSC.All other references to PCI SSC's approval or acceptance of a payment application or version thereof are strictly and actively prohibited by PCI SSC. When granted, PCI SSC acceptance is provided to ensure certain security and operational characteristics important to the achievement of PCI SSC's goals, but such acceptance does not under any circumstances include or imply any endorsement or warranty regarding the payment application vendor or the functionality,quality, or performance of the payment application or any other product or service.PCI SSC does not warrant any products or services provided by third parties. PCI SSC acceptance does not, under any circumstances, include or imply any product warranties from PCI SSC, including, without limitation, any implied VEltsioN 080212 21