bid every 10 years Are there specific pain points or issues with your current processor you are trying to resolve by going out for RFP?

Transcription

1 Questions Why are you going out for RFP? Are there specific pain points or issues with your current processor you are trying to resolve by going out for RFP? How long have you been with your current processor for each line of business? When do your contracts expire? What is your expected implementation completion date? What type of customer support do you receive for each line of business? Please describe the existing structure? Is there anything you would change about the level of service you are currently receiving? What type of reporting tools are being received today? Are there any special reporting needs? Does Auburn receive Interchange Management services today? If so, please describe the current service? Answers State Law mandates income accounts go out for bid every 10 years 10 years April 5, 2015 / April 17, # for balancing 800# for technical help desk to First Data Dedicated employee from our current acquiring bank assists with setting up accounts, liaison with First Data, reactivating inactive accounts. Statements from First Data, interface called emerchant view, can view all batches and all items within the batch. Auburn works with Vizant Technology to manage our interchange fees on a monthly basis. How soon is Auburn receiving funds today? What time is the current batch transmitted? Does Auburn receive full/gross deposit of funds daily with fees and Interchange taken out at the end of the month? How many chargebacks are processed annually? Please differentiate between retail and ecommerce. Please provide the Bank Issuer for the Purchasing Card Program Stand-alone swipe terminals are closed by 6:00 pm and funds received next day. Touchnet-eCommerce-batches close at midnight, receive funds 2 days. Paciolan-batches close at midnight, funds received 2 days. Total Computing Solutions, batches close around 6:00, funds received 2 days. McKesson-closes at midnight, receive funds in 2 days. Yes Estimate-50 Our MCC code is for Education and 2 other MID s for Health SunTrust

2 Annual Purchasing Card spend in the form of dollar range. Is ACH part of the RFP, and if so, please share the annual ACH activity metrics by payment channel. Can you please provide the volume of micro payments? $38,900, t at this time What is your expected go live date? May 30, 2015 Can you provide the Proposal as a word document? Does Auburn plan on supporting ApplePay and or other NFC payment solutions? Does Auburn own its POS equipment or rent from its existing processor(s)? What Touchnet services is Auburn currently using? Does Auburn use TouchNet's convenience fee solution? Does Auburn accept convenience fees in any payment channel? Can you describe what payment types other than the 4 major credit cards you accept in each office or by solution? Please describe. Other than the 4 major credit cards, what other types of electronic payment are accepted using ecommerce? What additional payment types are you considering accepting in each solution, that you don t accept today? Please describe. What solutions do you accept ACH payments in? Please describe. What Pharmacy POS does Auburn use? Does Auburn currently use BIN files (BIN file management) to determine debit cards from credit cards? Please describe. Answered by PPS NFC Own EBill, Cashiering, Payment Gateway, Marketplace-UPay & Stores echeck for Tuition echeck for Tuition Open for suggestions N/A McKessons Enterprise POS At this time Auburn does not utilize BIN file management to determine debit from Credit cards. Please describe how Auburn is considering using BIN file management and in which solutions. We might choose to use least cost routing for debit cards in the future.

3 In the RFP you mention you use Total Computing Systems in AUM Bookstore. Is this correct or is it Total Computing Solutions? Does Auburn currently utilize Tokenization / Encryption? If so, what company is providing these services? Total Computing Solutions We use Index Sequence # Type Index and for encryption, we are using AES256 -Touchnet What is Auburn s strategy for using tokenization? (What channels, how implemented, what type?) What is Auburn s strategy for using encryption? (What channels, how implemented, what type?) What is Auburn s strategy to support Euro MasterCard Visa (EMV)? Please describe. What is Auburn s strategy for supporting mobile payments? Does Auburn have any mobile applications today? Please describe. Please describe any fraud screening techniques that are currently being utilized. We use Index Sequence # Type Index and for encryption, we are using AES256 -Touchnet t sure of channels We use Index Sequence # Type Index and for encryption, we are using AES256 -Touchnet t sure of channels Would like to be ready by Oct We will not allow until the PCI Council says that it is compliant. Our current acquiring bank monitors for fraud Is Auburn PCI compliant today? -estimate to be compliant Summer 2015 Who is your current PCI assessor? Please provide the make and model of your terminals. Are your current terminals EMV compliant? Do your current terminals support end-to-end (E2E) encryption? Do your existing terminals support contactless (NFC) transactions, such as Apple Pay? CampusGuard First Data - FD55 & FD400, Hypercom-Equinox- T4205 & T4220, Verifone - VX520DC & VX570 When our Acquiring bank tells us that First Data is ready, we will begin programming the terminals and adding the EMV peripherals on the terminals that need them. Currently no, but is available. The VX520 does but is not ready until First Data tells our Acquiring bank that we can turn on.

4 Who is the Processor for your Chartwells and Paciolan transactions? TouchNet, Chartwells and Paciolan, are specifically designed for supporting specific industries and provide functionality beyond the processing of payments, can we assume that the University intends to retain these providers? How are your Chartwells dining service transactions processed? How are recurring and installment billing services provided today? Who provides your online bill and ebill (tuition) presentment? Does TouchNet process card present transactions? If so, in what locations? First Data for Chartwells and CyberSource for Paciolan Yes. AUM Dining uses First Data and is our MID but AU Chartwells is not our MID but a connected system and uses Merchant Link Recurring and thru Touchnet. Touchnet They do at 55 locations, but these locations have a thin-client on their PC to obtain authorization and are connected to our secure PCI network. The primary supported platform for these type and/or swipe computer requirements is the Virtual Desktop Infrastructure (VDI). The VDI solution provides a centrally managed, single-purpose, compliant card processing environment on a secure PCI network. Locations-Outreach, Call Center, Distance Learning, Graduate School, Housing, Engineering Outreach, Student Financial Services, Auburn University Foundation Describe how convenience fees are supported today (if applicable.) We do not charge convenience fees at this time. Is check processing in scope for this RFP? Do your existing terminals have check readers? Would the University be open to solutions that provide for secure cost effective transaction processing, but does not have all the functionality provided by TouchNet, Chartwells and Paciolan? For example: If the solution can accept the payment but cannot deliver the tickets for download, or if the solution can process tuition payments, but cannot present the tuition bill. How are your Paciolan transactions processed? Open for discussion. Batched at midnight, then passed on to CyberSource then passed on to First Data.

5 Do your Ratex transactions process through TouchNet? Per the RFP requirements, Auburn University states that it would like to have an open standard, non-proprietary interface to the provider, is this possible with your system? Can you explain? How will changes to terminals- such as merchant name and locks on transaction amounts be processed? Please provide clarify what is meant by locks on transaction amounts? Please provide a volume break out for debit vs. credit card and check volumes. Currently, our Acquiring Bank has an interface with First Data where we can view credit card information (we cannot see exp. Date or CVV #) and batches; this is very useful to help departments with out of balance situations or research. Will a designated AU employee be able to lock an account or will it need to be done with the processor. Also, if a merchant name is changed, can this be done by a designated AU employee or the processor? V/M/DSC Checkcard 16.0% 42,300, V/M/DSC Credit 55.8% 147,600, AMEX 28.0% 74,100, PIN-Debit 0.2% 600, Total Payment Card Volume 264,600, If we need further clarification once responses are received, can we submit additional questions? Please confirm the 48 terminals are stand alone and do not go through TouchNet or any other software. Can you elaborate what you mean by the question in Section E, under Implementation; question #2 What transaction services will you provide if you are selected as the vendor? General, Compensation and Fees, paragraph g: Are you saying that fees cannot be charged for these? Section VII, General Terms and Conditions, paragraph 1.12, "Successful bidder agrees to replace, free of charge, all defective items delivered under contract..." Is there a specific timeframe for this? Is the Total Computing Systems product used Totallink and if so what is the version of the Totallink application used by AUM Bookstores? If not please provide the product name and version. t after March 11, of those terminals are internet connected. TYPO-should say transition services This means do not charge for batch fees, statement fees, avs fees, etc. These fees should be built into the processor fee. One week. Total Computing Solutions (see addendum) and they are using Totallink 3.0.

6 Background and Objectives, Section III, Paragraph B, mentions that the University's goal is "to move toward processing all credit card and e-commerce operations, even those using traditional POS terminals, through our e-commerce framework. Can you explain what that framework is? With the AU ticket office & Tickets Algiers utilizing Paciolan as their payment interface, typically Paciolan utilized a third-party application, Elavon Protobase which will be sunset in 2016 for PCI Compliance reasons. Is the intention to utilize the Elavon replacement product Fusebox gateway or will another product be utilized? Please provide the company name and product name of the payment processing interface currently utilized, if not Protobase, and the future intended payment processing product. Can Auburn provide a current sample of a monthly merchant statement? Auburn University implemented a PCI infrastructure/domain for cardholder data; it has implemented Intrusion Detection System, Firewall/WAF, Limited access & control, Logging/Monitoring/Change Control, Technologies implemented to support PCI requirements. We are now using CyberSource- ICommerce Suite 2.0. Please see Appendix E.