Service Provider Name Region AOC Date Assessor DESV

Transcription

A company’s name appears on this Compliant Service Provider List if (i) Mastercard has received a copy of an Attestation of Compliance (AOC) by aQualified Security Assessor (QSA) reflecting validation of the company being PCI DSS compliant and (ii) Mastercard records reflect the company isregistered as a Service Provider by one or more Mastercard Customers. The date of the AOC and the name of the QSA are also provided. Each AOCis valid for one year. Mastercard receives copies of AOCs from various sources.This Compliant Service Provider List is provided solely for the convenience of Mastercard Customers and any Customer that relies upon or otherwiseuses this Compliant Service Provider list does so at the Customer’s sole risk. While Mastercard endeavors to keep the list current as of the date setforth in the footer, Mastercard disclaims any and all warranties of any kind, including any warranty of accuracy or completeness or fitness for anyparticular purpose. Mastercard disclaims any and all liability of any nature relating to or arising in connection with the use of or reliance on the CompliantService Provider List or any part thereof. Each Mastercard Customer is obligated to comply with Mastercard Rules and other Standards pertaining touse of a Service Provider.As a reminder, an AOC by a QSA provides a “snapshot” of security controls in place at a point in time.Compliant Service Provider1-60 Days Past AOC Due Date61-90 Days Past AOC Due DateService Provider NameRegionAOC DateAssessor“BPC Processing”, LLCEurope03/31/2017Informzaschita1&1 Internet SE (1&1, 1&1 ipayment,ipayment.de)Europe05/08/2017Security Research & Consulting GmbH1Shoppingcart.com (Web.com Group, lnc.)US04/29/2017SecurityMetrics2138617 Ontario Inc.Canada09/30/2017MNP LLP24 Solutions ABEurope06/15/2017CryptoNet Srl24/7 Customer, Inc.US03/25/2017ControlCase2C Processor USA, LLCUS05/15/2017Information Exchange Inc.2C2P Pte., Ltd.Asia Pacific12/19/2016Trustwave2Checkout.com (2CO E-CommercePayments LTD)US10/26/2016DirectDefense3C Payment Luxembourg S.A. (formerly SIXPayment Services Luxembourg SA)Europe12/15/2016Advantio Limited3C Payment USA CorpUS05/17/2017Advantio Limited3Cinteractive CorporationUS08/22/2016Online Enterprises3dCart (Informat 2000 Corp)US03/07/2017SecurityMetrics3Delta Systems, Inc.US09/12/2016Fortrex911 SOFTWARE, INC.US06/07/2017Dara SecurityA1PaymentsMEA06/05/2017Sysnet Ltd.ABC Financial Services, Inc.US05/23/2017Dara SecurityTuesday, October 17, 2017DESVPage 1 of 41

Service Provider NameRegionAOC DateAssessorAbila, Inc.US10/02/2017Dara SecurityAbtran Ltd.Europe10/01/2016RitsACCEO Solutions Inc.Canada08/31/2016UbitrakAcceptiva, LLCUS08/15/2017TrustwaveAccertify, Inc.US06/30/2017RSM McGladrey, Inc.Accesso, LLCUS03/29/2017TrustwaveAcculynk Inc.US02/26/2017Information Exchange Inc.ACI Worldwide, Inc.US01/13/2017TrustwaveACS Technologies Group, Inc.US11/15/2016Secure State ConsultingActive Network (Active Merchant Services)[formerly (Infospherix, ReserveWorld, AWO)]US10/31/2016K3DES LLCAcumera, Inc.US07/08/2017UHY Advisors TX, LLC05/24/2017Auditwerx, LLCAdastra CorporationDESVAdelante Software LimitedEurope05/09/2017Pentest Partners Consulting LLP (PTP)Adflex LimitedEurope07/12/2017Evolution LTDAdvam Pty Ltd.Asia Pacific05/03/2017TrustwaveAdyen B.V.Europe07/27/2017Payment Software Company (PSC)Affinion Benefits GroupUS04/05/2017Verizon/CybertrustAffinity Solutions LLCUS12/23/2016Coalfire Systems, Inc.Affirm Financial Services Inc. (CanaccedeFinancial Group Ltd.)Europe11/18/2016Control Gap Inc.AFONE PAIEMENTEurope11/07/2016SysdreamAimia Canada Inc. and Aimia ProprietaryLoyalty Canada IncCanada07/13/2017ControlCaseAimia Proprietary Loyalty U.S. Inc. (formerlyCarlson Marketing Group)US05/26/2017ControlCaseAirlines Reporting Corporation (ARC)US11/23/2016Schellman & Company, LLCAizan Technologies Inc.Canada08/20/2017DatassurantAkamai Technologies Inc.US06/21/2017Cisco Systems, Inc.Alacriti Payments, LLCUS08/07/2017Dara SecurityAlegeus Technologies, LLCUS05/01/2017SecurityMetricsAliaswire, Inc.US09/12/2017Dara SecurityAlignet SACLatin Americ02/24/2017ControlCaseAlinma Bank – Kingdom of Saudi ArabiaMEA12/05/2016ControlCaseTuesday, October 17, 2017Page 2 of 41

Service Provider NameRegionAOC DateAssessorAlliance Data Card Services (formerlyAlliance Data - Retail Services)US12/15/2016Verizon/CybertrustAllianceOne IncorporatedUS10/10/2016A-Lign Security and Compliance ServicesAllied Wallet Ltd. (GTBill, Baltic Bill)US03/24/2017DirectDefenseAlpha Card Services Inc.US10/28/2016Information Exchange Inc.Alpha Payments Cloud PTE LTDAsia Pacific03/26/2017DatassurantAlpha Payments Cloud Pte. Ltd.Asia Pacific11/30/2016DatassurantAlpine Card Service Pvt. Ltd.Asia Pacific09/20/2016TrustwaveAltapay A/S (formerly Pensio A/S)Europe09/21/2016FortConsult A/SAltech Card Solutions (Division of Altron TMT(Pty) Ltd)MEA08/30/2017Sysnet Ltd.Altech NuPay (Pty) LtdMEA10/31/2016Sysnet Ltd.Alternative Payments LtdEurope07/14/2017SecuriCentrixAmadeus IT Group S.A. (Spain)Europe12/14/2016Security Research & Consulting GmbHAmazon Web Services, IncUS06/30/2017Coalfire Systems, Inc.Amazon.com, Inc.US05/26/2017Coalfire Systems, Inc.Amdocs Software System, Ltd.US09/30/2016GRSee ConsultingAmerican Bancard, LLC (Touchsuite)US08/25/2016Enterprise Risk ManagementAmericaneagle.com (Svanaco, Inc.)US10/05/2016FortrexAOC Solutions, Inc.US09/01/2017FortrexAOL Inc.US10/21/2016IOActive, Inc.APCO Systems Ltd.Europe12/01/2016Kyte Consultants, Ltd.Aplitt S.A. (formerly Towarzystwo FinansoweSkok S.A. (TFSKOK))Europe07/30/2016Comsec Consulting, Ltd.Apriva, LLC (formerly APPSware Wireless,LLC)US07/06/2017Schellman & Company, LLCAPS Group Secure Solutions LimitedEurope10/26/2016NCC GroupArab Financial Services B.S.C.MEA07/17/2017SISA Information Security Inc.Arcelik T.A.S.Europe01/25/2017Biznet Information SystemsAria Systems, Inc.US07/13/2017TrustwaveArise Virtual SolutionsUS05/18/2017Online EnterprisesAsiaPay LimitedAsia Pacific08/22/2016TrustwaveAspect Software, Inc. (Voxeo, Voxeo EuropeLimited, Voxeo Germany GmbH)US07/19/2016SuneraAsseco SEE d.o.o.Europe07/24/2016VOC-Consultancy BVTuesday, October 17, 2017DESVPage 3 of 41

Service Provider NameRegionAOC DateAssessorAsseco SEE Teknoloji A.ŞEurope03/24/2017Evolution LTDAsseco See Teknoloji Anonim ªirketiEurope08/17/2017Compliance Control Ltd.ASSIST (LLC) (formerly Modern PaymentSolutions Ltd.)Europe05/24/2017Security Research & Consulting GmbHAT&T Cloud Storage (formerly AT&TSynaptic Storage as a Service (STaaS))US07/29/2017TrustwaveAT&T Managed Firewall Service - PremiseBasedUS07/29/2017ControlCaseAT&T Managed HostingUS10/21/2016ControlCaseAT&T Managed Services - AT&T ContentDelivery Network (ACDN)US07/20/2017TrustwaveAT&T Managed Services - AT&T EncryptionServices (AES)US08/22/2016ControlCaseAT&T Managed Services - AT&T NetworkUSBased IP VPN Remote Access Service/AT&TVPN Tunneling Service (ANIRAIAVTS)07/07/2017ControlCaseAT&T Managed Services - AT&T VirtualPrivate Network Service (AVPN)/EnhancedVirtual Private Network (EVPN)/PrivateNetwork Transport (PNT)US07/29/2017ControlCaseAT&T Managed Services - IntrusionDetection Services & Intrusion PreventionServices (IDS/IPS)US07/29/2017ControlCaseAT&T Managed Services – Managed LANServices (MLAN)US07/29/2017ControlCaseAT&T Managed Services - Managed RouterServices (MRS)US07/29/2017ControlCaseAT&T Managed Services - Network BasedFirewall (NBFW)US07/29/2017ControlCaseAT&T Managed Services - Network Securitywith Internet Access (NSIA)US07/29/2017ControlCaseAT&T Managed Services – Security Eventand Threat Analysis (SETA)US07/29/2017ControlCaseAT&T Managed Services VoiceTone/Interactive Voice ServicesAdvanced PlusUS07/28/2017ControlCaseAT&T Synaptic Hosting & ApplicationServices (AT&T SH&AS)US10/21/2016ControlCaseAT&T Ultravailable StorageUS06/07/2017TrustwaveAthenahealth, Inc.US08/25/2016Security Risk AdvisorsAtlanticus Holdings CorporationUS08/01/2016Coalfire Systems, Inc.Atlatl, Inc (First One Now, LLC; SimplyEasier Payments)US10/29/2016TrustwaveTuesday, October 17, 2017DESVPage 4 of 41

Service Provider NameRegionAOC DateAssessorAudienceView Ticketing CorporationCanada07/13/2017MNP LLPAurus Inc. (TalentBeat Inc.)US01/25/2017K3DES LLC03/14/2017Security Centric Pty LtdAuthenticate BVDESVAVF Consulting Inc. (ChargeLogic LLC)US12/02/2016Dara SecurityAypara Odeme Kurulusu A.S.Europe12/23/2016Biznet Information SystemsBambora Device AB (formerly SamportPayment Services AB)Europe06/21/2017KnowIT Secure ABBambora Inc.Canada07/07/2017Online EnterprisesBamcard d.d.Europe04/21/2017Kyte Consultants, Ltd.Banco de Crédito Social Cooperativo (BCC)Europe10/11/2016Internet Security Auditors, S.L.Banco del Austro S.A.Latin Americ01/16/2017TrustwaveBancTec, Inc.US02/28/2017TrustwaveBank Organization for Payments Initiated byCards Ltd (BORICA)Europe09/04/2017Security Research & Consulting GmbHBank WindhoekMEA07/29/2016Sysnet Ltd.Bankalararası Kart Merkezi A.Ş.Europe04/14/2017Biznet Information SystemsBankart - Procesiranje Placilnih Instrumentovd.o.o.Europe05/31/2017IBM Internet Security Systems (ISS)BankCard USA Merchant ServicesUS01/10/2017Information Exchange Inc.Bank-Verlag GmbHEurope05/24/2017Security Research & Consulting GmbHBASSILICHI CEE D.O.O BEOGRADEurope07/14/2017Advantio LimitedBassilichi SpAEurope06/19/2017KIMA Projects & ServicesBayern Card-Services GmbH (BCS)Europe03/10/2017usd AGBC Victoriabank SA (JSCB Victoriabank)Europe02/23/2017Compliance Control Ltd.Bendigo Community TelcoAsia Pacific09/29/2016K3DES LLCBenefitfocus.com Inc. (Benefitfocus)US06/29/2017FortrexBEPSA del Paraguay SAECALatin Americ03/26/2017CYBSEC Security SystemsBigcommerce Holdings Inc.US05/31/2017Coalfire Systems, Inc.Bill1st, LLCUS10/15/2016ControlScanBIS Global Inc.US12/23/2016FortrexBlackbaud Internet ServicesUS06/23/2017Schellman & Company, LLCBlackbaud Payment ServiceUS02/07/2017Schellman & Company, LLCBlended Bits, LLC (ShootProof, LLC)US07/29/2016CompliancePoint, Inc.Tuesday, October 17, 2017Page 5 of 41

Service Provider NameRegionAOC DateAssessorBluepay Canada (formerly Caledon CardServices)Canada05/29/2017Secured Net Solutions Inc.BluePay Processing LLCUS02/28/2017TrustwaveBluesnap Inc. (Bluesnap International Ltd)Europe07/24/2017Comsec Consulting, Ltd.BNY Mellon (ClearTran; ElectronicReceivable Payment Services)US07/28/2017SecurityMetricsBora Payment Systems LLCUS11/01/2016Dara SecurityBPS Info Solutions, Inc. (UltraCart)US08/01/2017CompliancePoint, Inc.Braintree, a division of PayPal, Inc.US02/16/2017Terra Verde LLCBridgeline Digital, Inc.US11/16/2016TrustwaveBridgePay Network Solutions, Inc.US04/14/2017A-Lign Security and Compliance ServicesBrighterionUS03/03/2017KalioTek, Inc.Brightwell Payments Inc. (formerly PrepaidSolutions Inc.)US05/15/2017Information Exchange Inc.Brinkman Financial Company, L.P.US09/30/2016K3DES LLCBTB Soft, Inc. (B2B Soft)US02/03/2017Dara SecurityBuckaroo Online Payment Services B.V.Europe11/30/2016TrustwaveBypass Mobile, LLCUS08/31/2017SecurityMetricsByTechService (formerly Marco-Plus LLC)Europe12/19/2016Security Research & Consulting GmbHBytemark, Inc.US07/31/2017SecurityMetricsBZWBK SA (Bank Zachodni WBK SA)Europe09/04/2017Sysnet Ltd.C4U-Malta LimitedEurope10/10/2016usd AGCale Access ABEurope06/09/2017TrustwaveCantaloupe Systems, Inc.US07/31/2017Truvantis, Inc.Capital Bank (Jordan)MEA06/14/2017ControlCaseCapital Card Services, Inc.US08/01/2017RSM US LLPCapital Financial Services S.A. (Prioripay)Europe07/10/2017Sysnet Ltd.Capital Payments LLC (Bluefin PaymentSystems / Blue Financial Corporation)US05/20/2017Coalfire Systems, Inc.Card Access Services Pty Ltd.Asia 016SecurityMetricsCardFlex Inc.US10/24/2016K3DES LLCCardFlight, IncUS04/21/2017SecurityMetricsCardinal Commerce CorporationUS12/19/2016Payment Software Company (PSC)Tuesday, October 17, 2017DESVPage 6 of 41

Service Provider NameRegionAOC DateAssessorCardlink S.A.Europe08/14/2017Encode SACardProcess GmbHEurope10/13/2017usd AGCardSmith, LLCUS11/23/2016TrustwaveCardstream LimitedEurope08/04/2017Securious LimitedCardWorks Servicing, LLCUS02/23/2017TrustwaveCarlson Hotels, Inc.US11/26/2016Coalfire Systems, Inc.Carta WorldwideEurope03/07/2017TrustwaveCartaSi S.p.A. (formerly Key Client Cards &Solutions S.p.A.)Europe06/15/2017Bl4ckswan S.r.l.Cascade Financial Technology Corp.US09/30/2017Information Exchange Inc.Catalyst Corporate Federal Credit UnionUS01/31/2017Tevora Business SolutionsCATELLA Bank S.A.Europe02/06/2017Cognosec GmbHCayan LLCUS01/19/2017Payment Software Company (PSC)CBC Companies, Inc. (CBC Innovis, Inc. /Innovis Data Solutions, Inc., DataVerify)US05/10/2017Verizon/CybertrustCDS Global Inc. (PayDQ Gateway)US01/20/2017NTT Com Security (formerly Integralis)Cedar Document TechnologiesUS01/21/2017Dara SecurityCenPos Inc.US09/01/2017Dara SecurityCentral Payment Corp (Smartpay MerchantServices)US12/15/2016Coalfire Systems, Inc.Centre de Traitement Monetique (CTM)MEA08/31/2016ControlCaseCentrum Rozliczeń Elektronicznych PolskieePłatności S.A. (PeP)Europe04/25/2017Sysnet Ltd.CGI Bank and Card ServicesEurope11/22/2016TrustwaveC-GLOBAL SPAEurope11/15/201624 Solutions ABChange HealthcareUS03/10/2017Lattimore, Black, Morgan and Cain, P.C.Charge Anywhere, LLCUS04/28/2017SISA Information Security Inc.Chargify, LLCUS11/29/2016Schellman & Company, LLCChase Paymentech Solutions, LLC.US02/21/2017TrustwaveCheckout Technology LimitedEurope08/31/2017Sysnet Ltd.China Unionpay Data Services Co., Ltd(CUPData)Asia Pacific12/30/2016Beijing Unionpay Card Technology Co. LChip Card a.dEurope05/26/2017VOC-Consultancy BVChronopay Services LLCEurope09/06/2017Security Research & Consulting GmbHCITYLINE(HONG KONG) LIMITEDAsia Pacific03/02/2017BSI Management Systems Japan K.K.Tuesday, October 17, 2017DESVPage 7 of 41

Service Provider NameRegionAOC DateAssessorCivica UK LtdEurope07/28/2017TrustwaveCJSC "National Service Company" (RuRu)Europe02/10/2017Deiteriy Company Ltd.CJSC PC "CardStandard" (Previously WestSiberian Processing Center)Europe12/07/2016Card Security LLCClear Choice Merchant Services (ClearGate)US06/22/2017Information Exchange Inc.Clearent, LLCUS04/17/2017Brown Smith Wallace, LLCCleverbridgeUS03/15/2017Security Research & Consulting GmbHClick & Pledge, Inc (Payment as a ServiceCorporation)US04/14/2017ControlCaseCloudbuy PLCEurope06/26/2017Comsec Consulting, Ltd.CloudPayments, LLCEurope05/04/2017Deiteriy Company Ltd.ClubReady LLCUS12/28/2016Brown Smith Wallace, LLCCoKinetic Systems India Pvt LtdAsia Pacific04/20/2017SISA Information Security Inc.CollegeNET, Inc.US03/29/2017Moss Adams LLPComdata Inc.US09/30/2017K3DES LLCCommerceGate Ireland Ltd.Europe07/15/2017Compliance Control Ltd.Commercial Bank Mobiasbanca - GroupeSociete Generale S.A. (BRD GSG)Europe12/19/2016Endava LTDCommonpay GmbHEurope10/10/2016usd AGCommuniGate GmbHEurope12/16/2016usd AGCompany of Electronic Payments “ASSIST”LLC (Minsk, Republic of Belarus)Europe06/06/2017Security Research & Consulting GmbHCompass Plus GBEurope09/27/2017Foregenix LimitedCompass Plus Ltd. (Russia)Europe10/14/2016Foregenix LimitedComplete Merchant SolutionsUS04/07/2017SecurityMetricsComplete Payment Systems (Latvia)Europe10/13/2017Advantio LimitedComprise Technologies, Inc.US03/17/2017ControlCaseComputer Services, Inc.US08/04/2016Crowe Horwath LLPComputercentrum C.van de Velden B.V.(CCV Holland)Europe03/21/2017Adsigo AGCompuTop Wirtschaftsinformatik GmbHEurope02/23/2017Adsigo AGConductor Tecnologia S/ALatin Americ01/31/2017Cipher InformaticaConfederacion Espanola de Cajas de Ahorros Europe(CECABANK)05/31/2017S21sec Gestion, S.A.Conferma LimitedEurope01/09/2017NCC GroupConnexions Loyalty Travel Solutions (CLTS)US02/28/2017Verizon/CybertrustTuesday, October 17, 2017DESVPage 8 of 41

Service Provider NameRegionAOC DateAssessorConsorcio Credicard C.A.Latin Americ10/15/2016IQ Information QualityConsorcio de Tarjetas Dominicanas, S.A.(Cardnet.com)Latin Americ10/11/20161st Secure IT, LLCConsorzio Triveneto S.p.A.Europe01/12/2017KIMA Projects & ServicesContact Solutions Inc.US04/18/2017SecurityMetricsContinental Finance Company (CFC)US08/05/2016A-Lign Security and Compliance ServicesControlScan (formerly CRE Secure Payments USLLC)05/18/2017FortrexConvenient Payments, LLC (formerlyGovernment Payments LLC)US08/12/2016SecurityMetricsConVergence Technologies, Inc. (IPPAY)US02/03/2017Sikich LLP (403 Labs)Convergence, LLCUS02/24/2017Coalfire Systems, Inc.Convergys CorporationUS06/29/2017FortrexCorduro Inc. (Corduro Processing; CorduroMerchant Services)US04/18/2017TrustwaveCoreCard Software, Inc.US10/01/2017CompliancePoint, Inc.Cornerstone Group of Companies, A DeloitteLLP companyCanada04/20/2017The Herjavec Group Inc.Corvus Info d.o.o (ECS Croatia)Europe02/28/2017Sysnet Ltd.CosmoPay (Xiamen) Information TechnologyCo., Ltd.Asia Pacific02/23/2017atsec (Beijing) Information Technology CCredencial Argentina S.A.Latin Americ06/19/2017CYBSEC Security SystemsCredencial Processing S.A. de C.V.Latin Americ07/02/2017CYBSEC Security SystemsCredit Guard Ltd.Europe06/24/2017Comsec Consulting, Ltd.Creditcall LtdEurope04/12/2017Foregenix LimitedCredomatic of Florida, Inc.US11/30/20161st Secure IT, LLCCrosskey Banking Solutions LtdEurope08/14/2017Verizon/CybertrustCSCBank SAL (CSC Lebanon)MEA12/31/2016O-C GroupCSE-Consorzio Servizi Bancari Soc. Cons.a.r.l.Europe10/27/2016Verizon/CybertrustCSG Media, LLC (Ascendon)US03/31/2017AT&T Consulting Solutions, Inc. (VerisignCSG Systems, Inc. - Interactive MessagingUS05/30/2017AT&T Consulting Solutions, Inc. (VerisignCSID (CSIDentity)US11/17/2016Enterprise Risk ManagementCSU Cardsystem S.A.Latin Americ10/11/2017Foregenix LimitedCT-Paiement, Inc. / CTPayment, Inc.Canada09/14/2017UbitrakCubic Transportation Systems, Inc.(Vancouver Compass Program)US11/07/2016Payment Software Company (PSC)Tuesday, October 17, 2017DESVPage 9 of 41

Service Provider NameRegionAOC DateAssessorCurbstone CorporationUS12/30/2016CompliancePoint, Inc.Currency Select Pty LtdAsia Pacific11/30/2016TrustwaveCurvePay (formerly IRN Payment Systems)US11/25/2016Information Exchange Inc.Cuscal LimitedAsia Pacific04/15/2017Verizon/CybertrustCvent, Inc.US08/26/2016True Digital Security, Inc.CyberSource Corporation (CyberSource,Authorize.Net, CyberSource ManagedHosting, and Cybersource KK)US08/19/2016TrustwaveDalenys Payment (formerly RentabiliwebEurope - Be2bill)Europe05/18/2017ProvadysDanubePay, a.s.Europe07/28/2017FortConsult A/SDashPay (Pty) LtdMEA06/30/2017SecuriCentrixData OceansUS08/01/2017CompliancePoint, Inc.Data Paradigm, Inc. (DPI)US07/21/2017Specialized Security Services, Inc.Data StreamUS07/31/2017Information Exchange Inc.DataDividerUS09/11/2016K3DES LLCDataline Systems, Inc.US12/31/20161st Secure IT, LLCDataMatx, Inc.US12/19/2016A-Lign Security and Compliance ServicesDataPipe, Inc.US05/25/2017Coalfire Systems, Inc.Datatrans AGEurope05/26/2017Adsigo AGDatatrax Technologies, Inc.Canada09/21/2017SecurityMetricsDavis Henderson, Ltd. PartnershipCanada02/28/2017Aprio, LLPDeepCove Laboratories, Ltd.Canada09/20/2016Sikich LLP (403 Labs)Delego Software, Inc.Canada08/02/2017Coalfire Systems, Inc.DELTACARD ServicesUS02/08/2017K3DES LLCDemandware, Inc. (Demandware DigitalCenter)US08/26/2016Tevora Business SolutionsDesjardin Card Services (Fédération descaisses Desjardins du Québec)Canada08/19/2016NCI Secured IntelligenceDialog DirectUS04/14/2017A-Lign Security and Compliance ServicesDIBS Payment Services ABEurope06/15/2017FortConsult A/SDigital River Inc. (parent company of thefollowing): Digital River GmbHUS06/30/2017AppSec Consulting, Inc.Digital River World Payments AB Digital River USWorld Payments, Inc.06/15/2017AppSec Consulting, Inc.Dimebox03/20/2017FortytwoTuesday, October 17, 2017EuropeDESVPage 10 of 41

Service Provider NameRegionAOC DateAssessorDiPocket LimitedEurope03/09/2017Security Research & Consulting GmbHDirect Cash Management Inc.Canada01/27/2017Control Gap Inc.Direct Insite CorpUS09/09/2016Enterprise Risk ManagementDirect Mai

Payment Services Luxembourg SA) Europe 12/15/2016 Advantio Limited . American Bancard, LLC (Touchsuite) US 08/25/2016 Enterprise Risk Management Americaneagle.com (Svanaco, Inc.) US 10/05/2016 Fortrex . BankCard USA Merchant