SYSTEM INNOVATORS (4) - Laserfiche WebLink

Home Browse Search

Se uriN Standards Cnun<il Part 2b. Description of Payment Card Business Describe how and in what capacity your business stores, processes, and/or transmits cardholder data. Describe how and in what capacity your business is otherwise involved in or has the ability to impact the security of cardholder data. Bluefin Payment Systems LLC (Bluefin), designated and assessed as a Level 1 Service Provider, maintains payment gateway and independent sales organization (ISO) functions. Bluefin enables merchants to accept CHO transactions via a virtual terminal solution and facilitates the connection of merchants to payment processors for processing CHD transactions. Bluefin stores, processes, and transmits cardholder via: Card -Present: • Merchant -Owned POL Full Track Data Card -Not -Present: Virtual Terminal: PAN, Expiry, Cardholder Name, Card Validation Code E-Commerce: PAN, Expiry, Card Validation Code API: PAN, Expiry, Card Validation Code PIN / Debit: Merchant -Owned POI: Full Track Data, PIN / PIN Block Bluefin stores, processes, and transmits cardholder via: Card -Present: • Merchant -Owned POI: Full Track Data Card -Not -Present: Virtual Terminal: PAN, Expiry, Cardholder Name, Card Validation Code E-Commerce: PAN, Expiry, Card Validation Code API: PAN, Expiry, Card Validation Code PIN / Debit: Merchant -Owned POI: Full Track Data, PIN / PIN Block Part 2c. Locations List types of facilities (for example, retail outlets, corporate offices, data centers, call centers, etc.) and a summary of locations included in the PCI DSS review. Number of facilities Type of facility of this type Location(s) of facility (city, country) Corporate Office 3 Atlanta, GA US Tulsa, OK, US Waterford, Ireland (NOC, Dev) Data Center 2 Atlanta, GA US PC/ DSS v3.2.1 Attestation of Compliance for Onsite Assessments — Service Providers, Rev. 1.0 June 2018 © 2006-2018 PCI Security Standards Council, LLC. All Rights Reserved. Page 4