PCI DSS Compliance [Only for Credit Card Interface]. If Vendor is directly involved in the processing, storage, or transmission of cardholder data on behalf of Xxxxxxxx as part of this Agreement, this Section applies. Any Vendor who provides or has access to software, systems, hardware, or devices which process and/or interact with payment card information or payment cardholder data, must be compliant with the current version of the Payment Card Industry Data Security Standard (PCI DSS). Vendor covenants and agrees to comply with Visa’s Cardholder Information Security Program (CISP), MasterCard’s Site Data Protection Rules (SDP), and with all other credit card association or National Automated Clearing House Association (NACHA) rules or rules of member organizations (“Association”), and further covenants and agrees to maintain compliance with the PCI DSS, SDP, and (where applicable) the Payment Application Data Security Standard (PA-DSS) (collectively, the “Security Guidelines”). Vendor represents and warrants that all of the hardware and software components utilized for Xxxxxxxx or used under this Agreement are now, and will be PCI DSS compliant during the term of this Agreement. All Vendors that Vendor uses under the Agreement must be recognized by Visa as PCI DSS compliant. Vendor further agrees to exercise reasonable due diligence to ensure that all of its Vendors (as defined by the PCI Security Council), agents, business partners, Vendors, Subcontractors and any person or entity that may have access to credit card information under this Agreement maintain compliance with the Security Guidelines and comply in full with the terms and conditions set out in this Section. Vendor further certifies that the Equipment, as described herein, will be deployed in a manner that meets or exceeds the PA DSS and/or PCI certification and will be deployed on a network that meets or exceeds PCI standards. Vendor shall demonstrate its compliance with PCI DSS by annually providing Xxxxxxxx an executed Attestation of Compliance (AOC). Vendor must provide verification to Xxxxxxxx, prior to start up and ongoing annually during the term of this Agreement, that all modules of Vendor’s System(s) that interface with or utilize credit card information in any manner or form of collection are PCI DSS compliant. If the Vendor is a Vendor involved in the processing, storage or transmission of cardholder data or sensitive authentication data (collectively “Data Handling”) on behalf of Xxxxxxxx that would result in Data Handling being in...
PCI DSS Compliance [Only for Credit Card Interface]. 1. If Vendor is directly involved in the processing, storage, or transmission of cardholder data on behalf of Xxxxxxxx as part of this Agreement, this Section applies. Any Vendor who provides or has access to software, systems, hardware, or devices which process and/or interact with payment card information or payment cardholder data, must be compliant with the current version of the Payment Card Industry Data Security Standard (PCI DSS).
