Agmt11 Infosend, Inc. - Laserfiche WebLink

Browse Search

11. Regularly test security systems and processes 12. Maintain a policy that addresses information security ii. In the event of a security intrusion, Merchant agrees to fully cooperate with a third party approved Payment Card Industry assessor and/or representative to conduct a thorough security review and validate compliance with the Payment Card Industry Data Security Standards (PCq for protecting Cardholder data; iii. Merchant is responsible for security of Cardholder data in possession; iv. Bank, EPX, Merchant and each payment card brand have ownership of Cardholder data and may use such data ONLY for assisting these parties in the completion of Transactions, supporting a loyalty program, providing fraud control services, or for other uses specifically required by law; v. In the event this Agreement is terminated by any of ihe parties, each party agrees to continue to treat account holder data as confidential; vi. Immediately �otify Visa USA Risk Management, through its acquirer, of the use of a Merchant Servicer; and vii. Ensure the Merchant Servicer implements and , maintains all of the security requirements, as specified in the PCI program. viii. Merchant must ensure PCI compliance of any residual data which may exist. Any residual data which is destroyed must be disposed of in a secure manner. InfoSend agrees to meet these requirements for itself and is a level 1 compliant and audited company. InfoSend takes on no warrantee for those situations where the City may be responsible for meeting these requirements on its own. 5.4 Use of EPX Svstems. Use of software programs approved by EPX and related equipment installed or improved by EPX for use with the EPX System, will be subject to the following: i. Merchant will use and operate the EPX Systems only in accordance with Manuals, as amended from time to time by EPX; ii. If Merchant is using EPX-provided soflware, Merchant will install, use and operate the Soflware only in accordance with the Manuals, as amended from time to time by EPX; iii. In processing Transactions, Merchant shall use only software programs, file formats and processing methods that have been approved and certified by EPX's Integration staff; and iv. Merchant shall be responsible for the custody and wntrol of all passwords provided by EPX to Merchant to access the EPX reporting system. 5.5 Compliance with Apolicable Law. Merchant represents and warrants that it has obtained all necessary regulatory approvals, certificates and licenses to provide any services it intends to offer and that it is in compliance with the regulations of the Federal Trade Commission and the Federal Communications Commission and shall comply with all present and future federal, . state and local laws and regulations pertaining to Transactions, including, without limitation, the Federal Fair Credit Reporting Act, the Federal Truth-in-Lending Act, the Electronic Fund Transfers Act, the Federal Equal Credit Opportunity Act, as amended, and the Telephone Disclosure and Dispute Resolution Act, as applicable. 5.6 Web Site Reauirements for E-Commerce Merchants. A web site operated by the Merchant that accepts Card Transactions must contain all of the following information: i. Complete description of the services offered; ii. Return merchandise and refund policy; which includes the communication of the retum policy during the order process and the requirement that the cardholder must be allowed to select a"click to accepY' option of other affirmative button to acknowledge the policy; iii. Terms and conditions must be displayed on the same screen view as the checkout screen used to resent the total urchase amount or .