Agenda Packet_2023-02-07 - Laserfiche WebLink

Home Browse Search

Tulsa, OK, US Part 2d. Payment Application r Does the organization use one or more Payment Applications? ❑ Yes ® No Provide the following information regarding the Payment Applications your organization uses: Payment Application Version Application Is application PA-DSS Listing Expiry Name Number Vendor PA-DSS Listed? date (if applicable) N/A N/A N/A ❑ Yes ® No N/A Part 2e. Description of Environment Provide a high-level description of the environment covered by this assessment. For example: • Connections into and out of the cardholder data environment (CDE). • Critical system Components within the CDE, such as POS devices, databases, web servers, etc., and any other necessary payment components, as applicable. Bluefin provides (4) applications specific to the storage, process, and transmit payment card transactions: PayConex provides stand-alone or integrated payment processing with P2PE for direct merchants and software vendors. The P2PE decryption environment is included in the scope of this assessment. PayConex additionally supports E2EE and e-Commerce transactions (hosted e-commerce), and tokenization services • Decryptx enables acquirers, processors, and gateways to offer Bluefin's P2PE solution on their platform and direct to their merchants through an API connection with Bluefin • QuickSwipe Mobile is a payment application installed on mobile devices • ShieldConex provides tokenization of non -card branded data For the purposes of this assessment cardholder data (CHD) is stored encrypted (AES-256 bit) within MySQL databases in accordance with the Bluefin retention policy. Bluefin maintains in -scope data centers located in Atlanta, GA and Tulsa, OK. All vendor, merchant, and partner connections utilize TLS 1.2, IPsec VPN, and / or VPLS network connections. PCI O9yvtZt' AMikation of Compliance for Onsite Assessme2g—&Hiice Providers, Rev. 1.0 2/7/28M2018 © 2006-2018 PC/ Security Standards Council, LLC. All Rights Reserved. Page 5