As of November 15, 2006 The companies listed below successfully completed a CISP review based on the PCI Data Security Standard. The VALIDATION DATE is the date of last compliance. CISP reviews are valid for one year, with the next annual report due to Visa one year from the VALIDATION DATE. Reports that are from 1-60 days late are noted in yellow and reports that are from 60-90 days late are noted in red. Entities with reports over 90 days past due will be removed from this list. It is the member s responsibility to use compliant service providers and to follow up with service providers if there are any questions about their compliance status. 1ShoppingCart.com March 31, 2006 Internet Payment Processing Security Metrics 1 st Americard June 30, 2006 Merchant Payment AmbironTrustWave 3Delta May 31, 2006 Merchant Payment Cybertrust Abanco International May 31, 2006 Merchant Payment Processing AmbironTrustWave ACH Direct October 31, 2005 Merchant Payment Processing VeriSign ACI Worldwide May 31, 2006 Merchant Payment Processing AmbironTrustWave Acxiom ICS/BNS Core & October 31, 2006 Bankruptcy Notification Cybertrust ISC/BNS Proprietary ADP Output September 30, 2005 Statement Processing Self-Assessment Adteractive, Inc. January 31, 2006 Merchant Digital Marketing Digital Resources Group AdvanceMe Merchant May 31, 2006 Merchant Payment Self-Assessment Affiliated Computer October 31, 2005 Payment Processing Jefferson Wells Airlines Reporting November 30, 2005 Payment Processing VeriSign Alaska Option September 30, 2006 EFT Processing Smart Card Auditors Alliance Data Network September 30, 2006 Merchant Payment Processing Cybertrust Amazon.com October 31, 2006 Internet Payment Processing AmbironTrustWave Applied Card May 31, 2006 Merchant Payment Processing Self-Assessment Andera, Inc. March 31, 2006 New Accounts Online Self-Assessment Aplus.Net May 31, 2006 Internet Payment Processing Security Metrics Apriva February 28, 2006 Merchant Payment Processing AmbironTrustWave Arcot October 31, 2005 Verified by Visa Access Control Fortrex Server AssureBuy April 30, 2006 Internet Payment Processing AmbironTrustWave AuBeta Network March 31, 2006 Payment Transmission AmbironTrustWave Authorize.Net October 31, 2006 Internet Payment Processing AmbironTrustWave B3 Corp July 31, 2006 Internet Payment Processing Digital Resources Group BA Merchant January 31, 2006 Payment Processing Cybertrust BankServ August 31, 2006 Merchant Payment Processing Payment Software Beanstream March 31, 2006 Internet Payment Processing DynTek BearingPoint epay August 31, 2006 Internet Payment Processing AmbironTrustWave BidPay, a First Data November 30, 2005 Merchant Payment Processing AmbironTrustWave following requirements proscribed for their CISP Level, based on the report of an independent security assessor. Visa does not endorse the service providers or their business processes or practices. any party required to submit a report, and Visa is not responsible to any party for the timeliness, accuracy or completeness of any report.
Billing Concepts April 30, 2006 Merchant Payment Processing AmbironTrustWave BillMatrix January 31, 2006 Bill Payment Processing AmbironTrustWave Blackboard February 28, 2006 Merchant Payment Processing AmbironTrustWave Bluefin Payment September 30, 2005 Merchant Payment Processing PRESIG CAPITAL Card April 30, 2006 Credit Card AmbironTrustWave Card Management Corp. August 31, 2006 Fraud and Chargeback Crowe Chizek Cardholder Management February 28, 2006 Merchant Payment Processing Jefferson Wells Cardinal Commerce Corp. December 31, 2005 Verified by Visa Merchant Fagan & Associates CardService International, a August 31, 2006 Merchant Payment Processing AmbironTrustWave First Data Cardtranz, Inc. April 30, 2006 Merchant Payment Processing Cybertrust Carlson Marketing Group June 30, 2006 Visa Preferred, Visa Data Track, AmbironTrustWave Visa Extras, and Visa Delta Program CashLINQ Group, LLC July 31, 2006 Merchant Payment SecurityMetrics Catalyst Payments January 31, 2006 Merchant Payment Processing AmbironTrustWave CCBILL/VSCRUB September 30, 2005 Internet Payment Processing Lockheed Martin Certegy December 31, 2005 Verified by Visa Access Control Internet Security Server Chase Paymentech November 30, 2005 Payment Processing AmbironTrustWave Chockstone June 30, 2006 Stored Value / Gift Card VeriSign Processing ChoicePay August 31, 2006 Internet Payment Gateway K3DES ClearCommerce April 30, 2006 Internet Payment Processing / AmbironTrustWave Verified by Visa Hosted Payer Authentication ClearTran September 30, 2005 Merchant Payment Processing Security Metrics Comdata Processing May 31, 2006 Payment Processing K3DES Complianthost.com, a GSI March 31, 2006 Managed Hosting, Co-location Solutionary Service Offering Hosting, and Physical Security Computer, Inc. June 30, 2006 Payment Processing Crowe Chizek Comstar Interactive April 30, 2006 Wireless POS, PDA, Mobile and AmbironTrustWave Internet Payment Processing Concord EFS, a First Data May 31, 2006 Payment Processing AmbironTrustWave Concord Emerging August 31, 2006 Merchant Payment Processing AmbironTrustWave Technologies, a First Data ( formerly EFSnet) Concord Financial May 31, 2006 Merchant Payment Processing AmbironTrustWave Technologies, a First Data (formerly Solspark) Concord Payment, a First Data May 31, 2006 Payment Processing AmbironTrustWave 2
Concord Processing, LP, a May 31, 2006 Merchant Payment Processing AmbironTrustWave First Data (formerly Core Data Resources) Corillian Payment February 28, 2006 Account Management Self-Assessment, Inc. CSG April 30, 2006 Account Billing Solutionary CROEM February 28, 2006 Merchant Payment Processing AmbironTrustWave Cybera November 30, 2005 Data Transmission Internet Security CyberSource June 30, 2006 Internet Payment Processing / Cybertrust Verified by Visa Hosted Payer Authentication Cynergy Data July 31, 2006 Merchant Payment Information Exchange Data Delivery May 31, 2006 Web-based Reporting K3DES DataPak September 30, 2006 Merchant Payment Processing AmbironTrustWave Datastream November 30, 2005 ATM Processing Information Exchange Datawire Communication December 31, 2005 Payment Transmission AmbironTrustWave Network DHD Media December 31, 2005 Internet Payment Processing VeriSign Dialect Payment Technologies May 31, 2006 Internet Payment Processing Vectra (Visa AP) Digital River July 31, 2006 Internet Payment Processing Savvis DinnerBroker March 31, 2006 Dining Enhancement Programs Self-Assessment Direct Mail Processors May 31, 2006 Merchant Payment Self-Assessment Dynamic Payments April 30, 2006 Web-based Reporting / Loyalty AmbironTrustWave Programs E-Data Financial July 30, 2006 Payment Processing PSC E-Funds August 31, 2006 Payment Processing Cybertrust Ebocom, LLC. April 30, 2006 Payment Processing Cybertrust EDS Commercial Card August 31, 2006 Payment Processing AmbironTrustWave EDS Consumer Card April 30, 2006 Payment Processing AmbironTrustWave EDS CRM/UI August 31, 2006 Payment Processing AmbironTrustWave EDS Deposit April 30, 2006 Payment Processing AmbironTrustWave EDS Guidance June 30, 2006 Payment Processing AmbironTrustWave Authorization EDS Merchant Acquirer April 30, 2006 Payment Processing AmbironTrustWave EDS Oregon Egovernment August 31, 2006 Managed Merchant Hosting AmbironTrustWave EDS Pay for Convenience August 31, 2006 Internet Payment Processing AmbironTrustWave EDS PeopleSoft August 31, 2006 Customer Relationship AmbironTrustWave Management EDS Surveyor August 31, 2006 Report Processing AmbironTrustWave Electronic Clearing House July 31, 2006 Payment Processing PRESIG (ECHO) Electronic Merchant October 31, 2005 Merchant Payment Processing Ernst & Young 3
Electronic Payment Exchange (EPX) April 30, 2006 Merchant Payment Processing Payment Software Electronic Payment April 30, 2006 Web-based Reporting Information Exchange Electronic Processing January 31, 2006 Merchant Payment Information Exchange Electronic Transaction May 31, 2006 Merchant Payment Processing Fortrex Technologies eprocessing Network March 31, 2006 POS, Mobile, and Internet AmbironTrustWave Payment Processing EVO Merchant April 30, 2006 Merchant Payment Information Exchange E-xact Transactions March 31, 2006 Merchant Payment Processing AmbironTrustWave Experian Information June 30, 2006 Credit Reporting Cybertrust Ezic October 31, 2005 POS, Mobile, & Internet ASA Consulting Payment Processing Fifth Third Processing May 31, 2006 Payment Processing Deloitte & Touche Acquiring FirstBank Data June 30, 2006 Payment Processing Cybertrust First American Payment May 31, 2006 Merchant Payment Specialized Security First Data Encompass May 31, 2006 Merchant Payment Processing AmbironTrustWave First Data Government November 30, 2005 Merchant Payment Processing AmbironTrustWave (formerly GovConnect) First Data International November 30, 2005 Merchant Payment Processing AmbironTrustWave Active Resources First Data International August 31, 2006 Merchant Payment Processing AmbironTrustWave ANZSA (Australia, New Zealand, & South Asia First Data International November 30, 2005 Merchant Payment Processing AmbironTrustWave CNA (China & North Asia) First Data International November 30, 2005 Merchant Payment Processing AmbironTrustWave EMEA (Europe, Middle East & Africa) First Data International November 30, 2005 Merchant Payment Processing AmbironTrustWave Greece (Hellas) First Data International November 30, 2005 Merchant Payment Processing AmbironTrustWave LAC (Latin America & Canada) First Data International - November 30, 2005 Payment Processing AmbironTrustWave OmniPay Service First Data International August 31, 2006 Merchant Payment Processing AmbironTrustWave TeleCash First Data Merchant November 30, 2005 Payment Processing AmbironTrustWave First Data Resources November 30, 2005 Payment Processing AmbironTrustWave First Data Technologies November 30, 2005 Merchant Payment Processing AmbironTrustWave First Hawaiian Bank April 30, 2006 Payment Processing AmbironTrustWave 4
First Horizon Merchant First National Bank of Omaha First National Merchant Fiserv Credit Processing December 31, 2005 Payment Processing Cybertrust November 30, 2005 Payment Processing AmbironTrustWave November 30, 2005 Payment Processing AmbironTrustWave June 30, 2006 Payment Processing Payment Software Florida Credit Union Leader February 28, 2006 Back Office Charge-backs Self-Assessment Fry Inc. June 30, 2006 Managed hosting for merchants Internet Security Galileo Processing (Not March 31, 2006 Merchant Payment Processing AmbironTrustWave affiliated with Cendant Travel Distribution ) Global Card March 31, 2006 Merchant Payment Processing Cybertrust Global Cash Access June 30, 2006 Payment Processing Digital Resources Group Global Electronic December 31, 2005 Internet Payment Processing 5PEG Technology Global Payments, Inc. May 31, 2006 Payment Processing AmbironTrustWave Goemerchant March 31, 2006 Internet Payment Processing Internet Security Golden Retriever April 30, 2006 Loyalty Programs KPMG, LLP Google February 28, 2006 Internet Payment Processing Cybertrust Govolution April 30, 2006 Internet Payment Processing Internet Security Green Dot July 31, 2006 Prepaid Card Processing 5PEG Harbor Payments May 31, 2006 Payment Processing Cybertrust Harte-Hanks January 31, 2006 Direct and Targeted Marketing Symantec Heartland Payment January 31, 2006 Payment Processing AmbironTrustWave HostMySite.com February 28, 2006 Co-location hosting / Physical Self-Assessment Security Hughes Network July 31, 2006 Payment Transmission Internet Security i2c Incorporated June 30, 2006 Stored Value Card Management AmbironTrustWave IC Group January 31, 2006 Visa Sweepstakes Administrator Self-Assessment ID Analytics, Inc. March 31, 2006 Predictive Scoring for Identity Computer Task Group, Inc. Risk Management IDM May 31, 2006 Visa Data Delivery AmbironTrustWave Infinet November 30, 2005 Merchant Payment Processing AmbironTrustWave Infinity Data November 30, 2005 Merchant Payment Information Exchange Infonox October 30, 2006 Merchant Payment Processing Digital Resources Group Informed Decisions January 31, 2006 Merchant Payment Processing AmbironTrustWave Innovative Gateway September 30, 2006 Merchant Payment Processing VeriSign Innovative Merchant September 30, 2006 Merchant Payment Processing VeriSign IntelliPay February 28, 2006 Merchant Payment Processing AmbironTrustWave International Card Establishment December 31, 2005 Fraud and Risk Analysis Self-Assessment 5
InternetSecure June 30, 2006 Internet Payment Processing AmbironTrustWave IP Merchant April 30, 2006 Payment Transmission Internet Security ipass, Inc. March 31, 2006 Data Transmission Digital Resources Group ipayment November 30, 2005 Merchant Payment AmbironTrustWave Iron Mountain March 31, 2006 Box and Tape Storage PriceWaterhouseCoopers, LLP ITA Software June 30, 2006 Merchant Payment Processing AmbironTrustWave itransact May 31, 2006 Internet Payment Processing AmbironTrustWave ITS Bank / SHAZAM April 30, 2006 Payment Processing AmbironTrustWave Network JetPay, LLC April 30, 2006 Payment Processing AmbironTrustWave Jettis February 28, 2006 Internet Payment Processing VeriSign Kincaid Technologies February 28, 2006 Merchant Payment Processing AmbironTrustWave Kubra Data Transfer, Inc. January 30, 2006 Merchant Payment Processing AmbironTrustWave Lethoff, Inc. March 31, 2006 Merchant Payment Processing Lockheed Martin Link2Gov February 28, 2006 Federal, State, and County Tax Payments LinkPoint International, a First Data Dynamics Research November 30, 2005 Merchant Payment Processing AmbironTrustWave Litle & Co April 30, 2006 Merchant Payment Processing Payment Software LOT / Life of the May 31, 2006 Merchant Payment AmbironTrustWave South Loyalty Labs February 28, 2006 Loyalty Programs Verisign Lundquist Consulting May 31, 2006 Bankruptcy Notification AmbironTrustWave Mellon Bank December 31, 2005 Payment Processing KPMG, LLP Merchant e- October 31, 2006 Merchant Payment Processing Digital Resources Group Merchant Link, LLC November 30, 2005 Merchant Payment Processing AmbironTrustWave Merchant Management March 31, 2006 Dispute Resolution Self-Assessment Group Merchant Partners October 31, 2005 Merchant Payment Processing PRESIG Merchant Service Center November 30, 2005 Merchant Payment Information Exchange Merchants Billing December 31, 2005 Merchant Payment Processing Information Exchange Mercury Payment June 30, 2006 Merchant Payment Processing Information Exchange Merlin, LLC April 30, 2006 Chargeback and Dispute KPMG, LLP Resolution Metavante November 30, 2005 Payment Processing Deloitte & Touche, LLP MHM Resources January 31, 2006 Employee Benefits Programs Self-Assessment Mighty Net August 31, 2005 Merchant Payment Processing Self-Assessment Motivano Card January 31, 2006 Prepaid Employee Benefits Self-Assessment Programs MonsterCommerce November 30, 2005 Merchant Payment Processing Payment Software mpay Gateway April 30, 2006 Prepaid Card Processing Security Metrics National Bankcard October 31, 2006 Payment Processing RSM McGladrey National Electronic April 30, 2006 Visa Cardholder Enhancement Self-Assessment Warranty Management 6
NBS Technologies, Inc. April 30, 2006 Merchant Payment Processing Cybertrust NCMIC Finance September 30, 2006 Merchant Payment Security Metrics Netifice Communications December 31, 2005 Payment Transmission Internet Security NetSpend October 31, 2005 Prepaid Card Processing Ernst & Young, LLP Network Merchants February 28, 2006 Internet Payment Processing AmbironTrustWave New Edge Networks May 31, 2006 Payment Transmission AmbironTrustWave Newtek Merchant September 30, 2005 Merchant Payment Security Metrics Nobel Electronic Transfer May 31, 2006 Payment Processing K3DES NoCheck May 31, 2006 Account Billing Digital Resources Group Nova Information March 31, 2006 Payment Processing VeriSign Official Payments October 31, 2005 Federal, State, and County Tax Payments Dynamics Research OneBridge, Inc. May 31, 2006 Payment Processing Crowe Chizek Optimal Payments June 30, 2006 Merchant Payment Processing AmbironTrustWave Outtask, Inc. February 28, 2006 Travel Profile VeriSign Paciolan, Inc. July 31, 2006 Merchant Payment AmbironTrustWave Pay By Touch Processing July 31, 2006 Payment Processing AmbironTrustWave Inc. Paycom Billing September 30, 2005 Internet Payment Processing Protiviti Paycom.net September 30, 2005 Internet Payment Processing Protiviti PayJunction March 31, 2006 Merchant Payment Processing Payment Software (PSC) Payment Online May 31, 2006 Internet Payment Processing 5PEG Payment Processing, Inc. March 31, 2006 Merchant Payment Processing AmbironTrustWave Payment Technologies, Inc. November 30, 2005 Merchant Payment Processing AmbironTrustWave PayPal-VeriSign April 30, 2006 Internet Payment Processing Internet Security Paypoint Electronic August 31, 2006 Payment Processing AmbironTrustWave Payment, a First Data PEMCO Technology May 31, 2006 Payment Processing Coalfire Inc. Penn Security Bank & Trust September 30, 2006 Payment Processing Fortrex Technologies Peppercoin March 31, 2006 Small Payment Processing AmbironTrustWave PhoneCharge, Inc. April 30, 2006 Merchant Payment Processing AmbironTrustWave Pipeline Data May 31, 2006 Merchant Payment Processing AmbironTrustWave Planet Group February 28, 2006 Multi-Currency Payment AmbironTrustWave Processing Plug n Pay Technologies March 31, 2006 Internet Payment Processing Savvis POS Portal February 28, 2006 Merchant Payment Coalfire POST Integrations, Inc. April 30, 2006 Payment Processing Cybertrust precharge Risk January 31, 2006 Fraud and Chargeback AmbironTrustWave Management Princeton ecom May 31, 2006 Merchant Payment Processing AmbironTrustWave Priority Payment March 31, 2006 Merchant Payment Security Metrics 7
ProPay February 28, 2006 Internet, Merchant, MOTO AmbironTrustWave Payment Processing PropertyBridge February 28, 2006 Merchant Payment Processing Security Metrics QS/1 April 30, 2006 Payment Processing AmbironTrustWave Quickbooks Merchant September 30, 2006 Merchant Payment Processing VeriSign RBA International April 30, 2006 Prepaid Payment Processing VeriSign RBS Lynk May 31, 2006 Payment Processing AmbironTrustWave RemitCo, A First Data August 31, 2006 Merchant Payment Processing AmbironTrustWave Retail Decisions March 31, 2006 Internet Payment Processing AmbironTrustWave Rewards Network July 31, 2006 Loyalty and Rewards Programs KPMG, LLP Sabre, Inc. April 30, 2006 Global Distribution System Jefferson Wells SafeMerchant Payment May 31, 2006 Internet Payment Gateway Solutionary Secure Electronic May 31, 2006 Payment Transmission Solutionary Transmissions Sequoia Retail March 31, 2006 Data center hosting / Physical Self-Assessment Security ServiceU March 31, 2006 Internet Payment Procssing K3DES Shift4 March 31, 2006 Merchant Payment Processing AmbironTrustWave Simmons First National May 31, 2006 Payment Processing AmbironTrustWave Bank Skipjack Financial December 31, 2005 Internet Payment Processing / AmbironTrustWave County Tax Payments Skylight Financial, Inc. May 31, 2006 Debit Card Processing Information Exchange SlimCD June 30, 2006 Merchant POS Payment Security Metrics Processing Source, Inc. May 31, 2006 Loyalty Programs Self-Assessment Southern DataComm April 30, 2006 Merchant Payment Processing AmbironTrustWave Sunbelt Fulfillment August 31, 2006 Payment Processing Self-Assessment Stamps.com March 31, 2006 Internet Payment Processing Security Metrics Star Networks (Northeast May 31, 2006 Payment Processing AmbironTrustWave Platform), a First Data Star Networks (Southeast Platform), a First Data May 31, 2006 Payment Processing AmbironTrustWave Sterling Payment Technologies June 30, 2006 Merchant Payment Processing / Web-based Reporting AmbironTrustWave Strategic Profits Inc March 31, 2006 Merchant Payment DynTek Synchronics June 30, 2006 Merchant Payment Processing AmbironTrustWave Telecheck International May 31, 2006 Payment Processing AmbironTrustWave Inc., a First Data Teleservices, a First Data November 30, 2005 Merchant Payment Processing AmbironTrustWave TermNet Merchant March 31, 2006 Merchant Payment Processing AmbironTrustWave 8
Tier Technologies March 31, 2006 Internet & IVR Payment VeriSign Processing TK Keith April 30, 2006 Merchant Payment Processing Cybertrust Total (TSYS) January 31, 2006 Payment Processing KPMG, LLP TSYS Acquiring April 30, 2006 Payment Processing KPMG, LLP (formerly Vital Processing ) TSYS Debt Management February 28, 2006 Debt Collection Agency Self-Assessment TSYS Prepaid April 30, 2006 Prepaid Card Processing Cybertrust TouchNet March 31, 2006 Internet Payment Processing AmbironTrustWave Transaction Payment July 31, 2006 Merchant Payment Processing Information Exchange LLC Transaction Transport April 30, 2006 Payment Transmission AmbironTrustWave Technologies (T3) TransFirst March 31, 2006 Merchant Payment Processing AmbironTrustWave TransWorld Payment March 31, 2006 Multi-Currency Payment Processing AmbironTrustWave TrustCommerce January 31, 2006 Merchant Payment Processing 5PEG USA Payment September 30, 2006 Payment Processing K3DES USAePay January 31, 2006 Internet Payment Processing AmbironTrustWave Valet Pay June 30, 2006 Merchant Payment Processing Fortrex Technologies Vanco January 31, 2006 Merchant Payment Processing Security Metrics VeriFone May 31, 2006 Merchant Payment Processing AmbironTrustWave Verus Card May 31, 2006 Merchant Payment Processing Cybertrust Vindicia January 31, 2006 Online Fraud Protection Visa Debit Processing Service Vision Bankcard, Inc. / CartManager Payment Software August 31, 2006 Payment Processing Cybertrust September 30, 2005 Merchant Payment Processing AmbironTrustWave Way September 30, 2006 Merchant Payment Processing Self-Assessment Western Union Payment May 31, 2006 Merchant Payment Processing AmbironTrustWave, a First Data (formerly Ecommerce Group) WildCard April 30, 2006 Payment Processing AmbironTrustWave WillowCSN March 31, 2006 Merchant Payment VeriSign World Access Service January 31, 2006 Visa Enhancement Self-Assessment Management Yahoo! Stores September 30, 2005 Internet Payment Processing VeriSign Yodlee August 31, 2005 Bill Payment VeriSign YourPay, a First Data November 30, 2005 Merchant Payment Processing AmbironTrustWave Zion s Bancorporation / Modern Payment Technology May 31, 2006 Billing Cybertrust 1 CISP reviews represent only a snapshot of security in place at the time of the review, and do not guarantee that those security 9
The following Service Providers have undergone a review with the TrustKeeper methodology, determined by Visa to be an acceptable alternative to the CISP validation: RESPONSIBLE NCO Group October 31, 2005 Merchant Payment Processing TrustWave Transaction Network October 31, 2005 Merchant Payment Processing TrustWave 10