Skip to Contact an Expert Skip to Main Content
cardpointe logo
Developer Docs
Statuspage
Search Icon
Support
hamburger-menu
    Developer Docs
    Statuspage
  • Support
  1. Payment Industry Certifications and Compliance
  • Payment Industry Certifications and Compliance
    • Overview
    • Processor Certifications
    • Card-Not-Present Payment Certifications
    • EMV Payment Device Certifications
    • On This Page

      Overview
    • On This Page

      Processor Certifications
    • On This Page

      Card-Not-Present Payment Certifications
    • On This Page

      EMV Payment Device Certifications
      • Understanding PCI PTS Device Lifecycles
      • CardPointe Integrated Terminal PIN Debit Support
  • 3-D Secure 2.0
  • Merchant Surcharge Program
  • Public PGP Key
  • Refund Authorizations
  • Visa Decline Rules and Responses
  • Visa and Mastercard Stored Credential Transaction Framework Mandate
  • Fiserv ACH Account Validation

Overview 

 

Payment industry standards for securing cardholder data continually evolve in an effort to protect merchants and consumers. We work closely with the card brands to ensure that the CardPointe Gateway and related services are certified for compliance with industry standards and mandates. Each feature certification effort requires processor-specific development, testing, and validation before the feature can be made available for merchants using a given platform.

 

Additionally, all card-present payment terminals and point-of-interaction (POI) devices undergo EMV certification, PCI PIN Transaction Security (PTS), and P2PE Application certifications (for applicable P2PE devices) for use with the CardPointe Gateway and our P2PE Solution. 

 

Select a topic from the left pane for more information on our important compliance and certification initiatives. 

Processor Certifications 

 

Expand the following table to view all current processor certifications:

ProcessorFirst Data
Rapid Connect
First Data
North
First Data
South
First Data
Omaha
TSYS
Sierra
TSYS
First National
Paymentech
Salem
Paymentech
Tampa
VantivAmex
Apple Pay (in-app)Yes (US only)NoNoNoNoNoNoNoNoNo
MOTO/eCommerceYesYesYesYesYesNoYesYesYesYes
RetailYesYesYesYesYesNoYesYesYesYes
RestaurantYesYesYesYesYesNoNoYesYesNo
eCheck/InteracNoNoNoNoNoYesYesNoNoNo
EMV QuickChipYesYesNoNoYesNoNoYesYesNo
EMV ContactlessYesYesNoNoYesNoNoYesYesNo
EMV PinYesYesNoNoNoNoNoNoYesNo
Level 2 (V/MC/Amex)YesYesYesYesYesNoYesYesYesYes
Level 3 (V/MC/Amex 2.5)YesYesYesNoYesNoYesYesYesYes
Level 3 (Amex)NoNoNoNoNoNoNoNoNoNo
PIN DebitYesYesNoNoNoNoNoNoYesNo
PINless DebitYesYesNoNoNoNoYesNoNoNo
Partial AuthorizationYesYesYesYesYesNoYesYesYesNo
Balance InquiryYesNoNoNoNoNoNoYesNoNo
Single Bill PaymentYesYesYesYesYesNoYesNoYesNo
RecurringYesYesYesNoYesYesYesNoYesYes
FSA/HSAYesYesNoNoYesNoYesNoNoNo
AVSYesYesYesYesYesNoYesYesYesNo
CVVYesYesYesYesYesNoYesYesYesYes
NFC/RFIDYesYesNoNoYesNoNoYesNoNo
Soft DescriptorsYesYesNoNoNoNoYesNoNoNo

3-D Secure 1.0

YesYesNoNoNoNoYesYesNoYes
3-D Secure 2.0YesNoNoNoNoNoYesNoNoNo
Card Account UpdaterYesYesYesNoNoNoNoNoNoNo
Visa and Mastercard Stored Credentials Mandate (COF)YesYesNoYesYesNoYesNoNo

Yes

Refund Authorizations YesYesNoYesYesNoYesNoNoNo

Card-Not-Present Payment Certifications 

 

We are currently in the process of certifying the CardPointe Gateway for compliance with the following standards and mandates:

  • Visa and Mastercard Stored Credential Transaction Framework
  • 3-D Secure 2.0
  • Refund Authorizations 

EMV Payment Device Certifications 

All new EMV payment device certifications in progress are limited to merchants processing on the First Data Rapid Connect platform. To take advantage of new EMV-certified payment devices and terminals (for example, Ingenico Tetra series CardPointe Integrated Terminals), you or your merchants must be boarded to the First Data Rapid Connect processor.

All new EMV payment devices must be tested and certified for data integrity and security compliance. PCI PTS payment devices require additional validation to ensure that they meet the standards defined by the PCI Council for use within a point-to-point encryption (P2PE) solution (for example, the CardPointe Integrated Terminal solution).

 

The following EMV payment devices are certified and available only for merchants on the Rapid Connect Platform:

  • CardPointe Integrated Terminal 
    • Clover Flex (3, 4, and Pocket) and Clover Mini
    • Ingenico Lane/3000, Lane/5000, Lane/7000, Lane/8000, Link/2500
  • CardPointe Desktop SDK/CardPointe Virtual Terminal
    • ID TECH Augusta
  • CardPointe Mobile SDK/CardPointe Mobile App
    • ID TECH VP3300
  • CardPointe Retail Terminal 
    • Ingenico Desk 3500 and Desk 5000
    • Ingenico Desk 1500 PIN Pad 
  • CardPointe Unattended
    • ID TECH VP5300    

Understanding PCI PTS Device Lifecycles

PTS payment devices that are validated by the PCI council for use within a P2PE solution are assigned a PCI version number, which corresponds to a validation period. In addition to each manufacturer's product support lifecycle, the PCI version and expiration date should play a significant role as you plan to support and upgrade your payment devices in the field.

Additionally, PCI PTS devices are granted a 5-year grace period, effective after the date of the PCI version expiry, in which the associated P2PE component (for example, the version of the CardPointe Integrated Terminal application running on the device) can be revalidated. 

 

For example, a PCI v3.x device with an expiry of April 30, 2021 may remain in use until April 30, 2026 as long as the device is running a PCI-validated application.

Hardware VendorPOI ApplicationModelPCI VersionPCI Version ExpiryLast Time to OrderVendor End of LifeVendor End of ServiceReplacement Device
CloverCardPointe Integrated Terminal (for Clover) v1.x.xClover Flex
v5.xApril 30, 2026TBDTBDTBDTBD
Clover Mini
v5.xApril 30, 2026TBDTBDTBDTBD
ID TECH-Augustav4.xApril 30, 2024January 31, 2024December 14, 2022April 30, 2024TBD
-SecuREDv3.xApril 30, 2021January 31, 2020December 20, 2019April 30, 2020Augusta
-SREDKeyv3.xApril 30, 2021January 31, 2021April 6, 2020April 30, 2021SREDKey 2
-

SREDKey 2

v5.xApril 30, 2026January 31, 2026April 6, 2026April 30, 2027TBD
ID TECH Payment Application engine (PAE) v1.5.x.xVP5300v5.xApril 30, 2026

January 31, 2026April 6, 2026April 30, 2027TBD
IngenicoCardPointe Integrated Terminal v1.6.x - 2.0.0iPP310/iPP320/iPP350v3.xApril 30, 2021March 31, 2018June 30, 2018June 30, 2021Lane/3000 or Lane/5000
v4.xApril 30, 2023December 31, 2019March 31, 2020March 31, 2023Lane/3000 or Lane/5000
iSC250-Touchv4.xApril 30, 2023December 31, 2019March 31, 2020March 31, 2023Lane/7000
iSMP4v4.xApril 30, 2023December 31, 2022March 31, 2022March 31, 2026Link/2500
CardPointe Integrated Terminal v2.1.xLane/3000v5.xApril 30, 2026December 31, 2023May 31, 2024May 31, 2026Lane/3600
Lane/5000v5.xApril 30, 2026TBDDecember 31, 2023December 31, 2026Lane/3600
Lane/7000v5.xApril 30, 2026October 15, 2021December 31, 2021December 31, 2024TBD
Lane/8000v5.xApril 30, 2026October 15, 2021December 31, 2021December 31, 2024TBD
Link/2500v4.xApril 30, 2023December 31, 2024December 31, 2024March 31, 2028TBD
CardPointe Retail Terminal v3.1.xDesk/1500v5.xApril 30, 2026September 30, 2023December 31, 2023December 31, 2026Desk/1600
Desk/3500v5.xApril 30, 2026June 30, 2023June 30, 2023June 30, 2026Desk/2600
Desk/5000v5.xApril 30, 2026March 31, 2023June 30, 2023June 30, 2026Desk/2600

CardPointe Integrated Terminal PIN Debit Support

PIN Debit is supported for merchants using Ingenico CardPointe Integrated Terminal devices processing on First Data Rapid Connect.

 

Support for PIN Debit on the First Data North platform is now deprecated; all new or existing merchants who want to begin to accept PIN debit transactions must be boarded to the Rapid Connect platform. See Accepting PIN Debit Cards in the CardPointe Integrated Terminal Developer Guide for detailed requirements.

Site Selector