Agenda Packet_2023-02-07 - Laserfiche WebLink

Home Browse Search

Part 2b. Description of Payment Card Business Describe how and in what capacity your business stores, processes, and/or transmits cardholder data. Describe how and in what capacity your business is otherwise involved in or has the ability to impact the security of cardholder data. Part 2c. Locations Bluefin Payment Systems LLC (Bluefin), designated and assessed as a Level 1 Service Provider, maintains payment gateway and independent sales organization (ISO) functions. Bluefin enables merchants to accept CHD transactions via a virtual terminal solution and facilitates the connection of merchants to payment processors for processing CHD transactions. Bluefin stores, processes, and transmits cardholder via: Card -Present: • Merchant -Owned POI: Full Track Data Card -Not -Present: Virtual Terminal: PAN, Expiry, Cardholder Name, Card Validation Code E-Commerce: PAN, Expiry, Card Validation Code API: PAN, Expiry, Card Validation Code PIN / Debit: Merchant -Owned POI: Full Track Data, PIN / PIN Block Bluefin stores, processes, and transmits cardholder via: Card -Present: • Merchant -Owned POI: Full Track Data Card -Not -Present: Virtual Terminal: PAN, Expiry, Cardholder Name, Card Validation Code E-Commerce: PAN, Expiry, Card Validation Code API: PAN, Expiry, Card Validation Code PIN / Debit: Merchant -Owned POI: Full Track Data, PIN / PIN Block List types of facilities (for example, retail outlets, corporate offices, data centers, call centers, etc.) and a summary of locations included in the PCI DSS review. Number of facilities Type of facility of this type Location(s) of facility (city, country) Corporate Office 3 Atlanta, GA US Tulsa, OK, US Waterford, Ireland (NOC, Dev) Data Center 2 Atlanta, GA US PCI O9yVEZOAMikation of Compliance for Onsite Assessme2g-6 .fvice Providers, Rev. 1.0 2/7/28M2018 © 2006-2018 PC/ Security Standards Council, LLC. All Rights Reserved. Page 4