Overview

Payment industry standards for securing cardholder data continually evolve in an effort to protect merchants and consumers. We work closely with the card brands to ensure that the CardPointe Gateway and related services are certified for compliance with industry standards and mandates. Each feature certification effort requires processor-specific development, testing, and validation before the feature can be made available for merchants using a given platform.

Additionally, all card-present payment terminals and point-of-interaction (POI) devices undergo EMV certification, PCI PIN Transaction Security (PTS), and P2PE Application certifications (for applicable P2PE devices) for use with the CardPointe Gateway and our P2PE Solution. 

Select a topic from the left pane for more information on our important compliance and certification initiatives. 

Processor Certifications

Expand the following table to view all current processor certifications:

Current CardPointe Gateway Processor Certifications

Processor First Data
Rapid Connect
First Data
North
First Data
South
First Data
Omaha
TSYS
Sierra
TSYS
First National
Paymentech
Salem
Paymentech
Tampa
Vantiv Amex
Apple Pay (in-app)Yes (US only)NoNoNoNoNoNoNoNoNo
MOTO/eCommerce Yes Yes Yes Yes Yes No Yes Yes Yes Yes
Retail Yes Yes Yes Yes Yes No Yes Yes Yes Yes
Restaurant Yes Yes Yes Yes Yes No No Yes Yes No
eCheck/Interac No No No No No Yes Yes No No No
EMV QuickChip Yes Yes No No Yes No No Yes Yes No
EMV Contactless Yes Yes No No Yes No No Yes Yes No
EMV Pin Yes Yes No No No No No No Yes No
Level 2 (V/MC/Amex) Yes Yes Yes Yes Yes No Yes Yes Yes Yes
Level 3 (V/MC/Amex 2.5) Yes Yes Yes No Yes No Yes Yes Yes Yes
Level 3 (Amex) No No No No No No No No No No
PIN Debit Yes Yes No No No No No No Yes No
PINless Debit Yes Yes No No No No Yes No No No
Partial Authorization Yes Yes Yes Yes Yes No Yes Yes Yes No
Balance Inquiry Yes No No No No No No Yes No No
Single Bill Payment Yes Yes Yes Yes Yes No Yes No Yes No
Recurring Yes Yes Yes No Yes Yes Yes No Yes Yes
FSA/HSA Yes Yes No No Yes No Yes No No No
AVS Yes Yes Yes Yes Yes No Yes Yes Yes No
CVV Yes Yes Yes Yes Yes No Yes Yes Yes Yes
NFC/RFID Yes Yes No No Yes No No Yes No No
Soft Descriptors Yes Yes No No No No Yes No No No

3-D Secure 1.0

YesYesNoNoNoNoYesYesNoYes
3-D Secure 2.0YesNoNoNoNoNoYesNoNoNo
Card Account UpdaterYesYesYesNoNoNoNoNoNoNo
Visa and Mastercard Stored Credentials Mandate (COF)YesYesNoYesYesNoYesNoNo

Yes

Refund Authorizations YesYesNoYesYesNoYesNoNoNo

Additional Processing Services

The CardPointe Gateway is certified for use with the following services:

  • PayPal - MOTO/eCommerce transactions with PayPal. Note that reversals are not supported.
  • ProfitStars - eCheck (ACH) payments from electronic checking and savings accounts. Note that settlement time is 8:00 PM ET.

Card-Not-Present Payment Certifications

We are currently in the process of certifying the CardPointe Gateway for compliance with the following standards and mandates:

EMV Payment Device Certifications

All new EMV payment device certifications in progress are limited to merchants processing on the First Data Rapid Connect platform. To take advantage of new EMV-certified payment devices and terminals (for example, Ingenico Tetra series CardPointe Integrated Terminals), you or your merchants must be boarded to the First Data Rapid Connect processor.

All new EMV payment devices must be tested and certified for data integrity and security compliance. PCI PTS payment devices require additional validation to ensure that they meet the standards defined by the PCI Council for use within a point-to-point encryption (P2PE) solution (for example, the CardPointe Integrated Terminal solution).

The following EMV payment devices are certified available only for merchants on the Rapid Connect Platform:

  • CardPointe Integrated Terminal 
    • Clover Flex and Clover Mini
    • Ingenico Lane/3000, Lane/5000, Lane/7000, and Lane/8000
  • CardPointe Desktop SDK/CardPointe Virtual Terminal
    • ID TECH Augusta
  • CardPointe Mobile SDK/CardPointe Mobile App
    • ID TECH VP3300
  • CardPointe Retail Terminal 
    • Ingenico Desk 3500 and Desk 5000
    • Ingenico Desk 1500 PIN Pad 

Understanding PCI PTS Device Lifecycles

PTS payment devices that are validated by the PCI council for use within a P2PE solution are assigned a PCI version number, which corresponds to a validation period. In addition to each manufacturer's product support lifecycle, the PCI version and expiration date should play a significant role as you plan to support and upgrade your payment devices in the field.

Additionally, PCI PTS devices are granted a 5-year grace period, effective after the date of the PCI version expiry, in which the associated P2PE component (for example, the version of the CardPointe Integrated Terminal application running on the device) can be revalidated. 

For example, a PCI v3.x device with an expiry of April 30, 2021 may remain in use until April 30, 2026 as long as the device is running a PCI-validated application.

Hardware Vendor POI Application Model PCI Version PCI Version Expiry Last Time to Order Vendor End of Life Vendor End of Service Replacement Device
Clover Bolt (for Clover) 1.4.x Clover Mini
(2nd Generation)
v5.x April 30, 2026 TBD TBD TBD TBD
Clover Flex
(2nd Generation)
v5.x April 30, 2026 TBD TBD TBD TBD
ID TECH - Augusta v4.x April 30, 2023 TBD TBD TBD TBD
- SecuRED v3.x April 30, 2021 TBD TBD TBD Augusta
- SREDKey v3.x April 30, 2021 TBD TBD TBD SREDKey 2
-

SREDKey 2

v5.xApril 30, 2026TBDTBDTBDTBD
Ingenico Bolt 1.6.x - 2.0.0 iPP310/iPP320/iPP350 v3.x April 30, 2021 March 31, 2018 June 30, 2018 June 30, 2021 Lane 3000 or 5000
v4.x April 30, 2023 December 31, 2019 March 31, 2020 March 31, 2023 Lane 3000 or 5000
iSC250-Touch v4.x April 30, 2023 December 31, 2019 March 31, 2020 March 31, 2023 Lane 7000
iSMP4 v4.x April 30, 2023 TBD TBD TBD TBD
Bolt 2.0.1 Lane 3000 v5.x April 30, 2026 TBD TBD TBD TBD
Lane 5000 v5.x April 30, 2026 TBD TBD TBD TBD
Lane 7000 v5.x April 30, 2026 TBD TBD TBD TBD

CardPointe Integrated Terminal PIN Debit Support

PIN Debit is supported for merchants using Ingenico CardPointe Integrated Terminal devices processing on First Data Rapid Connect.

Support for PIN Debit on the First Data North platform is now deprecated; all new or existing merchants who want to begin to accept PIN debit transactions must be boarded to the Rapid Connect platform. See Accepting PIN Debit Cards in the CardPointe Integrated Terminal Developer Guide for detailed requirements.