first data merchant services pci compliance

The Payment Card Industry Data Security Standard is a set of comprehensive requirements for enhancing cardholder data security. Custom DashboardGain control of treasury, finance and accounting with your own custom payments processing dashboard. Merchant Service Support & PCI Compliance. Merchant Services UNIVERSITY PCI COMPLIANCE MEMO Florida State University Credit Card Serve as the first point of contact for any credit card processing.

: First data merchant services pci compliance

First data merchant services pci compliance
Www ally com enroll


Payment industry standards for securing cardholder data continually evolve in an effort to protect merchants and consumers. We work closely with the card brands to ensure that the CardPointe Gateway and related services are certified for compliance with industry standards and mandates.

Historically, we have certified the CardPointe Gateway for features and devices across a wide-range of payment processors; however, to better scale and support the CardPointe Gateway, and to provide our merchants with peace of mind and compliance with industry standards and certifications, we have made the difficult decision to limit future development and certification efforts to the following processing platforms:

  • First Data Rapid Connect
  • First Data North
  • First Data Omaha
  • First Data South

Moving forward, all new card-not-present and e-commerce CardPointe Gateway features that require certification by the card brands (for example, the Visa and Mastercard Stored Credentials Mandate) will only be available for merchants processing on these First Data/Fiserv platforms.

Additionally, all new EMV-certified card-present payment devices (for example, Ingenico Tetra series Bolt terminals) will only be certified and available for merchants processing on the Rapid Connect platform.

Select a topic from the left pane for more information on our important compliance and certification initiatives. 

Expand the following table to view all current certifications:

Current CardPointe Gateway Processor Certifications

ProcessorFirst Data
Rapid Connect
First Data
First Data
First Data
First National
EMV QuickChipYesYesNoNoYesNoNoYesYesNoNo
EMV ContactlessYesYesNoNoYesNoNoYesYesNoNo
EMV PinYesYesNoNoNoNoNoNoYesNoNo
Level 2 (V/MC/Amex)YesYesYesYesYesNoYesYesYesYesYes
Level 3 (V/MC/Amex 2.5)YesYesYesNoYesNoYesYesYesNoYes
Level 3 (Amex)NoNoNoNoNoNoNoNoNoNoNo
PIN DebitYesYesNoNoNoNoNoNoYesNoNo
PINless DebitYesYesNoNoNoNoYesNoNoNoNo
Partial AuthorizationYesYesYesYesYesNoYesYesYesNoNo
Balance InquiryYesNoNoNoNoNoNoYesNoNoNo
Single Bill PaymentYesYesYesYesYesNoYesNoYesYesNo
Soft DescriptorsYesYesNoNoNoNoYesNoNoNoNo

3-D Secure 1.0

3-D Secure 2.0YesNoNoNoNoNoYesNoNoNoNo
Card Account UpdaterYesYesYesNoNoNoNoNoNoNoNo
Visa and Mastercard Stored Credentials Mandate (COF)YesNoNoYesNoNoYesNoNoNoNo
Refund Authorizations YesYesNoYesNoNoYesNoNoNoNo

Additional Processing Services

The CardPointe Gateway is certified for use with the following services:

  • PayPal - MOTO/eCommerce transactions with PayPal. Note that reversals are not supported.
  • ProfitStars - eCheck (ACH) payments from electronic checking and savings accounts. Note that settlement time is 8:00 PM ET.

All new card-not-present payment certifications in progress are limited to merchants processing on First Data/Fiserv platforms. To take advantage of these new features and the CardPointe Gateway's compliance with card brand and industry standards, you or your merchants must be boarded to one of these platforms.

Each feature certification effort requires processor-specific development, testing, and validation before the feature can be made available for merchants using a given platform. 

We are currently in the process of certifying the CardPointe Gateway for compliance with the following standards and mandates:

All new EMV payment device certifications in progress are limited to merchants processing on the First Data Rapid Connect platform. To take advantage of new EMV-certified payment devices and terminals (for example, Ingenico Tetra series Bolt terminals), you or your merchants must be boarded to the First Data Rapid Connect processor.

All new EMV payment devices must be tested and certified for data integrity and security compliance. PCI PTS payment devices require additional validation to ensure that they meet the standards defined by the PCI Council for use within a point-to-point encryption (P2PE) solution (for example, the Bolt Terminal solution).

The following EMV payment devices were recently certified and are now available only for merchants on the Rapid Connect Platform:

  • Bolt Clover Flex terminal
  • Bolt Clover Mini terminal
  • Bolt Desktop/CardPointe Virtual Terminal card reader device (ID TECH Augusta)
  • Bolt Mobile/CardPointe Mobile card reader device (ID TECH VP3300)
  • CardPointe Terminal (Ingenico Desk 3500/Desk 5000) 

Additionally, we are currently in the process of certifying the following new devices:

  • Ingenico Tetra series terminals (Lane/3000, Lane/5000, and Lane/7000) for use with the Bolt Terminal solution 
  • Bolt Unattended card reader device (ID TECH VP5300)

Understanding PCI PTS Device Lifecycles

PTS payment devices that are validated by the PCI council for use within a P2PE solution are assigned a PCI version number, which corresponds to a validation period. In addition to each manufacturer's product support lifecycle, the PCI version and expiration date should play a significant role as you plan to support and upgrade your payment devices in the field.

Additionally, PCI PTS devices are granted a 5-year grace period, effective after the date of the PCI version expiry, in which the associated P2PE component (for example, the version of the Bolt Terminal application running on the device) can be revalidated. 

For example, a PCI v3.x device with an expiry of April 30, 2021 may remain in use until April 30, 2026 as long as the device is running a PCI-validated application.

As described in the Bolt Ingenico Telium End-of-Life Notice, Ingenico is ending support for the current Telium series of terminals, and these devices are no longer available from the manufacturer. Current devices in the field are supported through the PCI expiry date (dependent on the PCI version); however new Illinois central railroad Terminal and CardPointe Terminal orders will only be fulfilled with Ingenico Tetra series terminal devices, which are certified and available only to merchants on the First Data Rapid Connect platform.

The following table credit one platinum visa detailed lifecycle planning information on the available PCI PTS devices:

Hardware VendorPOI ApplicationModelPCI VersionPCI Version ExpiryLast Time to OrderVendor End of LifeVendor End of ServiceReplacement Device
CloverBolt (for Clover) 1.4.xClover Mini
(2nd Generation)
v5.xApril 30, 2026TBDTBDTBDTBD
Clover Flex
(2nd Generation)
v5.xApril 30, 2026TBDTBDTBDTBD
ID TECH-Augustav4.xApril 30, 2023TBDTBDTBDTBD
-SecuREDv3.xApril 30, 2021TBDTBDTBDAugusta
-SREDKeyv3.xApril 30, 2021TBDTBDTBDSREDKey 2


v5.xApril 30, 2026TBDTBDTBDTBD
IngenicoBolt 1.6.x - 2.0.0iPP310/iPP320/iPP350v3.xApril 30, 2021March 31, 2018June 30, 2018June 30, 2021Lane 3000 or 5000
v4.xApril 30, 2023December 31, 2019March 31, 2020March 31, 2023Lane 3000 or 5000
iSC250-Touchv4.xApril 30, 2023December 31, 2019March 31, 2020March 31, 2023Lane 7000
iSMP4v4.xApril 30, 2023TBDTBDTBDTBD
Bolt 2.0.1Lane 3000v5.xApril 30, 2026TBDTBDTBDTBD
Lane 5000v5.xApril 30, 2026TBDTBDTBDTBD
Lane 7000v5.xApril 30, 2026TBDTBDTBDTBD

Bolt Terminal PIN Debit Support

PIN Debit support is now available on Bolt Ingenico terminals for merchants processing on Rapid Connect.

Support for PIN Debit on the First Data North platform is now deprecated; all new or existing merchants who want to begin to accept PIN debit transactions must be boarded to the Rapid Connect platform. See Accepting PIN Debit Cards in the Bolt Terminal Developer Guide for detailed requirements.

Why is CardConnect making this change?

This decision was not something we took lightly, and we understand that changing your processor to match your gateway may have not been in your plans for the immediate future. We chose to move forward in this direction to provide the best possible experience for our merchants via updated technology and streamlined support.

Technology: Moving to the First Data Rapid Connect platform gives your business access to multiple upcoming products we'll be releasing within the next year. These products include our new line of Tetra devices, providing the latest in in-person payment technology. Additionally, you will get access to other updates like PIN Debit acceptance, Bolt Unattended devices, and the Card Account Updater API.

Support: With your current configuration, your business is reliant on two separate support teams: one for your gateway and one for your processor. By moving to First Data Rapid Connect, a Fiserv Platform, your support needs will be consolidated into one 24/7, award-winning support team for all of your processing questions and concerns.

Can I use my existing devices if I switch processors?

Yes, we can work to reprogram your current devices remotely once your account is set up.

What if I don't make this change?

If you are not on a First Data/Fiserv processing platform, and you do not migrate to one, you will be subject to potential fines and downgrades, as well as limited access to future CardConnect products and services.

What fines could First data merchant services pci compliance incur? What downgrades?

Fines: These will be dependent on your current processor and how they choose to pass through fines they are assessed.

Downgrades: Just like any other downgrade, this will be dependent on how you are priced by your processor. Downgrades occur when a transaction does not include certain parameters correctly within the transaction data.

Will CardConnect cover those fines?

The potential fines are part of an industry-wide mandate. Should you choose to remain on a non-certified platform, CardConnect will not reimburse fees that occur as a result.


The Benefits of Payment Card Industry (PCI) Security Standards Council Point-to-Point Encryption (P2PE) Solutions

In today’s technologically advanced world, where personal information is virtually everywhere, fraud and data breaches are an all too common occurrence. Considering the financial impact a single incident can have, merchants must do everything they can to prevent it. So, how do you protect your business, brand, and cardholder data while reducing compliance measures? The answer: PCI P2PE.

What is PCI P2PE?

When it comes to payment processing, P2PE is the highest standard of data encryption and the best option for merchants. Using a PCI P2PE device not only protects sensitive customer data, but denali state bank fairbanks ak also tightens payment security, making compliance easier what is investment banking definition your business.

Payment solutions encrypt data in many ways, but only PCI P2PE devices are reviewed, approved and certified by the PCI Security Standards Council.

How does it work?

With P2PE, cardholder data is secure. From the first time a customer uses their card to when it hits the point of sale, the payment data is encrypted. The encrypted data moves from the processor to the acquirer, then back to the point of sale as a secure token, ensuring cardholder data never touches your system.

The Major Benefits of PCI P2PE

Here’s how PCI P2PE makes processing payments easier for your business:

Maximize data security

Cardholder data is encrypted, so it's nearly impossible to steal or intercept it. 

Simplify PCI compliance efforts

Make annual, or semi-annual compliance audits easier for your business.

Minimize liability

Lower your fraud liability by following all instructions in the P2PE manual.

Reduce PCI questionnaire

Cut the PCI self-assessment questionnaire sections from 12 to 4 during an audit.

Decrease PCI control questions

Reduce control questions during PCI audits from 329 to 35.

TSYS P2PE Instruction Manuals

If you are using a Genius Smart P2PE solution or Guardian P2PE device, you must install and maintain your device(s) according to the instructions on our P2PE Instruction Manuals. Click below to view your applicable PIM:


IndiaMART >Telecom Services, Engg & Maintenance >Payment Gateway Solutions

Product Description

Making Online Payments Simple first data merchant services pci compliance Secure

The First Data Payment Gateway enables you to offer customers an online payment facility that is convenient, robust and secure. It is a functionally rich solution that is PCI DSS level 1 compliant and is suitable for businesses of all sizes, from small to corporate.

Benefits at a glance

  • Global Gateway- Leverage First Data’s global network and expertise to stay ahead of your competitors by using the latest payment technology and features that we develop. You can also reduce your integration efforts if your business expands internationally, as our gateway is available in European, African, Latin American and other Asia Pacific markets
  • Convenient- We can address all your eCommerce needs by providing you with our gateway and merchant acquiring facilities, so you can avoid separate gateway fees and internet merchant account fees from other providers 
  • Robust- We offer reliable and fast card acceptance services with global, industry leading uptimes. 
  •  Keep your business protected as fraud rates continue to escalate, with our PCI DSS level 1 compliance and advanced fraud prevention tools.

Interested in this service?Get Latest Price from the seller

Contact Seller

Product Image

First Data Payment Gateway

Company Details

About the Company

Legal Status of FirmLimited Company (Ltd./Pvt.Ltd.)

Nature of BusinessManufacturer

Annual TurnoverRs. 100 - 500 Crore

IndiaMART Member SinceSep 2010


We are the payments specialist, focused on helping you grow your business

ICICI Merchant Services (ICICI MS) represents an alliance formed in 2009 between ICICI Bank – India’s largest private first data merchant services pci compliance bank, and First Data – a global leader in electronic commerce and payment services. ICICI Merchant Services is one of over 80 alliances First Data has launched with many of the world's premier banks.

ICICI Merchant Services offers tailor made payment solutions with local expertise and customer care for all business types with a comprehensive range of credit and debit solutions. ICICI Merchant Services enables businesses across India to securely and conveniently accept electronic payments whether the cardholder is present at the point of sale through cutting-edge POS terminal technology or purchasing over the internet from many miles away through its state-of-the-art payment gateway. Combined with its commitment to superior 24 x 7 dedicated customer service; ICICI Merchant Services is at the forefront of developments in the payment space.

Spread across 700 cities and towns, ICICI Merchant Services combines deep local market insight with First Data's global expertise in merchant acquiring. ICICI Merchant Services first data merchant services pci compliance committed to making electronic payment acceptance fast, easy and secure for merchants of all sizes and business sectors.

Back to Top

Have a requirement?
Get Best Price


Have a requirement?
Get Best Price


Merchant First data merchant services pci compliance and Agreements/
PCI Compliance

Merchant Terms and Agreements
Merchant Data Services provides the Merchant Terms and Agreements documents linked above for your reference. Please contact us should you have any questions regarding this information.
• First Data North Terms and Agreements
• First Data Omaha Terms and Agreements
PCI Compliance
first data merchant services pci compliance Payment Card Industry Data Security Standards Whether you are a small store with a dial-up terminal or a large store with a POS system, you are required to be PCI compliant. PCI Compliance has become a term that has spread throughout the Credit Card Industry from the card issuing banks all the way down to the merchant level. First data merchant services pci compliance DSS Compliance or Payment Card Industry Data Security Standards is the Assessing, Remediation and Reporting of your payment card transaction environment. This environment consists of the Handling, Transmitting, and Storage of credit card data in all aspects of your business. PCI DSS and related security standards are administered by the PCI Security Standards Council, which was founded by American Express, Discover Financial Services, JCB International, MasterCard Worldwide and Visa Inc. Participating organizations include merchants, payment card issuing banks, processors, developers and other vendors. Card Associations such as Visa and MasterCard are issuing fines to all participating organizations up to and not limited to $250,000 for the compromise of card data. You, as a merchant accepting credit card transactions, are considered first data merchant services pci compliance participating organization. Qualified Security Assessors or QSA’s have been established to help facilitate the assessment of compliance with PCI DSS. Most but not all QSA’s are certified by the card associations to assess compliance. Whether you are a small store with a dial-up terminal or a large store with a POS system, you are required to be PCI compliant. However being PCI compliant does not immunize you from being fined by a card association. For more first data merchant services pci compliance please refer to the PCI Security Standards Council website at or call Merchant Data Services. 770-936-8779.

PCI Compliance

First Data holds cardholder security as our first priority. We continually invest in tools and technology to protect data and assist you in becoming PCI compliant to minimize fraud and avoid penalties.

Benefits for Business

First Data PCI Compliance solutions help merchants quickly and easily validate PCI first data merchant services pci compliance complete annual assessments to ensure they are meeting compliance requirements, identify security gaps, and recommend solutions.

  • Identify risk with PCI Self-Assessment Questionnaire (SAQ)
  • Fully comply with industry encryption standards
  • Maintain PCI compliance with quarterly scans (if applicable)*
  • Validate complete transaction process
  • Easily complete annual SAQ utilizing an intuitive online tool, First Data® PCI Rapid Comply®

*A quarterly scan is required if you have any public IP address that connects to or can indirectly connect to the cardholder data environment.

Key Components

  • Compliance with all industry standards including: Cardholder Information Security Program (CISP), Payment Card Industry (PCI) Data Security Standard (DSS)
  • The necessary third party tools are provided to ensure merchant compliance
  • Solutions designed by security experts specifically to meet the needs of our customers
  • Online access lets you utilize tools to achieve PCI compliance anytime
  • Comprehensive support including online and via chat, email and phone
  • Offers integrated scanning for merchants that first data merchant services pci compliance required to pass quarterly scans to achieve PCI DSS compliance

PCI DSS Compliance Programme

The Payment Card Industry Data Security Standard (PCI DSS) is a worldwide mandate from the PCI Security Standards Council (PCI SSC). The Council consists of VISA®, Mastercard®, American Express®, Discover® Global Network, and JCB® (the Card Schemes). PCI DSS was established to help organisations that process card payments prevent credit and debit card fraud through increased controls around data and its exposure to compromise. The standard applies to all organisations that store, process, or pass cardholder information from any card branded with the logo of one of the Card Schemes.

Keep in step with the latest card data security standards. Everyday businesses like yours are encountering threats from criminals intent on obtaining customers’ credit and debit card details. Being PCI compliant, you protect your customers from losing valuable card data and safeguard yourself from possible legal issues and certain fines from the credit card companies.

PCI portal login


4 Replies to “First data merchant services pci compliance”

  1. carlos morales I think so. I’ve done it before in the past. But I can’t anymore.

Leave a Reply

Your email address will not be published. Required fields are marked *