Payment Industry Certifications and Compliance

Support

Overview

Payment industry standards for securing cardholder data continually evolve in an effort to protect merchants and consumers. We work closely with the card brands to ensure that the CardPointe Gateway and related services are certified for compliance with industry standards and mandates. Each feature certification effort requires processor-specific development, testing, and validation before the feature can be made available for merchants using a given platform.

Additionally, all card-present payment terminals and point-of-interaction (POI) devices undergo EMV certification, PCI PIN Transaction Security (PTS), and P2PE Application certifications (for applicable P2PE devices) for use with the CardPointe Gateway and our P2PE Solution.

Select a topic from the left pane for more information on our important compliance and certification initiatives.

Processor Certifications

Expand the following table to view all current processor certifications:

Processor	First Data Rapid Connect	First Data North	First Data South	First Data Omaha	TSYS Sierra	TSYS First National	Paymentech Salem	Paymentech Tampa	Vantiv	Amex
Apple Pay (in-app)	Yes (US only)	No	No	No	No	No	No	No	No	No
MOTO/eCommerce	Yes	Yes	Yes	Yes	Yes	No	Yes	Yes	Yes	Yes
Retail	Yes	Yes	Yes	Yes	Yes	No	Yes	Yes	Yes	Yes
Restaurant	Yes	Yes	Yes	Yes	Yes	No	No	Yes	Yes	No
eCheck/Interac	No	No	No	No	No	Yes	Yes	No	No	No
EMV QuickChip	Yes	Yes	No	No	Yes	No	No	Yes	Yes	No
EMV Contactless	Yes	Yes	No	No	Yes	No	No	Yes	Yes	No
EMV Pin	Yes	Yes	No	No	No	No	No	No	Yes	No
Level 2 (V/MC/Amex)	Yes	Yes	Yes	Yes	Yes	No	Yes	Yes	Yes	Yes
Level 3 (V/MC/Amex 2.5)	Yes	Yes	Yes	No	Yes	No	Yes	Yes	Yes	Yes
Level 3 (Amex)	No	No	No	No	No	No	No	No	No	No
PIN Debit	Yes	Yes	No	No	No	No	No	No	Yes	No
PINless Debit	Yes	Yes	No	No	No	No	Yes	No	No	No
Partial Authorization	Yes	Yes	Yes	Yes	Yes	No	Yes	Yes	Yes	No
Balance Inquiry	Yes	No	No	No	No	No	No	Yes	No	No
Single Bill Payment	Yes	Yes	Yes	Yes	Yes	No	Yes	No	Yes	No
Recurring	Yes	Yes	Yes	No	Yes	Yes	Yes	No	Yes	Yes
FSA/HSA	Yes	Yes	No	No	Yes	No	Yes	No	No	No
AVS	Yes	Yes	Yes	Yes	Yes	No	Yes	Yes	Yes	No
CVV	Yes	Yes	Yes	Yes	Yes	No	Yes	Yes	Yes	Yes
NFC/RFID	Yes	Yes	No	No	Yes	No	No	Yes	No	No
Soft Descriptors	Yes	Yes	No	No	No	No	Yes	No	No	No
3-D Secure 1.0	Yes	Yes	No	No	No	No	Yes	Yes	No	Yes
3-D Secure 2.0	Yes	No	No	No	No	No	Yes	No	No	No
Card Account Updater	Yes	Yes	Yes	No	No	No	No	No	No	No
Visa and Mastercard Stored Credentials Mandate (COF)	Yes	Yes	No	Yes	Yes	No	Yes	No	No	Yes
Refund Authorizations	Yes	Yes	No	Yes	Yes	No	Yes	No	No	No

Card-Not-Present Payment Certifications

We are currently in the process of certifying the CardPointe Gateway for compliance with the following standards and mandates:

EMV Payment Device Certifications

All new EMV payment device certifications in progress are limited to merchants processing on the First Data Rapid Connect platform. To take advantage of new EMV-certified payment devices and terminals (for example, Ingenico Tetra series CardPointe Integrated Terminals), you or your merchants must be boarded to the First Data Rapid Connect processor.

All new EMV payment devices must be tested and certified for data integrity and security compliance. PCI PTS payment devices require additional validation to ensure that they meet the standards defined by the PCI Council for use within a point-to-point encryption (P2PE) solution (for example, the CardPointe Integrated Terminal solution).

The following EMV payment devices are certified and available only for merchants on the Rapid Connect Platform:

CardPointe Integrated Terminal
- Clover Flex and Clover Mini
- Ingenico Lane/3000, Lane/5000, Lane/7000, and Lane/8000
CardPointe Desktop SDK/CardPointe Virtual Terminal
- ID TECH Augusta
CardPointe Mobile SDK/CardPointe Mobile App
- ID TECH VP3300
CardPointe Retail Terminal
- Ingenico Desk 3500 and Desk 5000
- Ingenico Desk 1500 PIN Pad

Understanding PCI PTS Device Lifecycles

PTS payment devices that are validated by the PCI council for use within a P2PE solution are assigned a PCI version number, which corresponds to a validation period. In addition to each manufacturer's product support lifecycle, the PCI version and expiration date should play a significant role as you plan to support and upgrade your payment devices in the field.

Additionally, PCI PTS devices are granted a 5-year grace period, effective after the date of the PCI version expiry, in which the associated P2PE component (for example, the version of the CardPointe Integrated Terminal application running on the device) can be revalidated.

For example, a PCI v3.x device with an expiry of April 30, 2021 may remain in use until April 30, 2026 as long as the device is running a PCI-validated application.

Hardware Vendor	POI Application	Model	PCI Version	PCI Version Expiry	Last Time to Order	Vendor End of Life	Vendor End of Service	Replacement Device
Clover	Bolt (for Clover) 1.4.x	Clover Mini (2nd Generation)	v5.x	April 30, 2026	TBD	TBD	TBD	TBD
Clover	Bolt (for Clover) 1.4.x	Clover Flex (2nd Generation)	v5.x	April 30, 2026	TBD	TBD	TBD	TBD
ID TECH	-	Augusta	v4.x	April 30, 2023	TBD	TBD	TBD	TBD
	-	SecuRED	v3.x	April 30, 2021	TBD	TBD	TBD	Augusta
	-	SREDKey	v3.x	April 30, 2021	TBD	TBD	TBD	SREDKey 2
	-	SREDKey 2	v5.x	April 30, 2026	TBD	TBD	TBD	TBD
Ingenico	Bolt 1.6.x - 2.0.0	iPP310/iPP320/iPP350	v3.x	April 30, 2021	March 31, 2018	June 30, 2018	June 30, 2021	Lane 3000 or 5000
		iPP310/iPP320/iPP350	v4.x	April 30, 2023	December 31, 2019	March 31, 2020	March 31, 2023	Lane 3000 or 5000
		iSC250-Touch	v4.x	April 30, 2023	December 31, 2019	March 31, 2020	March 31, 2023	Lane 7000
		iSMP4	v4.x	April 30, 2023	TBD	TBD	TBD	TBD
	Bolt 2.0.1	Lane 3000	v5.x	April 30, 2026	TBD	TBD	TBD	TBD
		Lane 5000	v5.x	April 30, 2026	TBD	TBD	TBD	TBD
		Lane 7000	v5.x	April 30, 2026	TBD	TBD	TBD	TBD

CardPointe Integrated Terminal PIN Debit Support

PIN Debit is supported for merchants using Ingenico CardPointe Integrated Terminal devices processing on First Data Rapid Connect.

Support for PIN Debit on the First Data North platform is now deprecated; all new or existing merchants who want to begin to accept PIN debit transactions must be boarded to the Rapid Connect platform. See Accepting PIN Debit Cards in the CardPointe Integrated Terminal Developer Guide for detailed requirements.

Overview

Processor Certifications

Current CardPointe Gateway Processor Certifications

Card-Not-Present Payment Certifications

EMV Payment Device Certifications

Understanding PCI PTS Device Lifecycles

CardPointe Integrated Terminal PIN Debit Support

Site Selector