Site Data Protection (SDP) Program and PCI The Mastercard Compliant Service Provider List A company’s name appears on this Compliant Service Provider List if (i) Mastercard has received a copy of an Attestation of Compliance (AOC) by a Qualified Security Assessor (QSA) reflecting validation of the company being PCI DSS compliant and (ii) Mastercard records reflect the company is registered as a Service Provider by one or more Mastercard Customers. The date of the AOC and the name of the QSA are also provided. Each AOC is valid for one year. Mastercard receives copies of AOCs from various sources. This Compliant Service Provider List is provided solely for the convenience of Mastercard Customers and any Customer that relies upon or otherwise uses this Compliant Service Provider list does so at the Customer’s sole risk. While Mastercard endeavors to keep the list current as of the date set forth in the footer, Mastercard disclaims any and all warranties of any kind, including any warranty of accuracy or completeness or fitness for any particular purpose. Mastercard disclaims any and all liability of any nature relating to or arising in connection with the use of or reliance on the Compliant Service Provider List or any part thereof. Each Mastercard Customer is obligated to comply with Mastercard Rules and other Standards pertaining to use of a Service Provider. As a reminder, an AOC by a QSA provides a “snapshot” of security controls in place at a point in time. Compliant Service Provider 1-60 Days Past AOC Due Date 61-90 Days Past AOC Due Date Service Provider Name Region AOC Date Assessor DESV 1&1 Internet SE Europe 05/03/2018 Security Research & Consulting GmbH 1Link (Guarantee) Limited Asia Pacific 11/14/2017 Foregenix Limited 1Shoppingcart.com (Web.com Group, lnc.) US 05/25/2018 Payment Software Company (PSC) 2138617 Ontario Inc. Canada 09/30/2017 MNP LLP 24 Solutions AB Europe 06/15/2017 CryptoNet Srl 24/7 Customer Private Ltd. - Hyderabad Asia Pacific 02/28/2018 ControlCase Center 2C Processor USA, LLC US 05/15/2017 Information Exchange Inc. 2C2P Pte., Ltd. Asia Pacific 12/22/2017 Trustwave 2Checkout.com US 10/20/2017 DirectDefense 3C Payment Luxembourg S.A. (formerly SIX Europe 12/15/2017 Advantio Limited Payment Services Luxembourg SA) 3C Payment UK Ltd Europe 12/15/2017 Advantio Limited 3C Payment USA Corp US 05/17/2018 Advantio Limited 3dCart (Informat 2000 Corp) US 02/22/2018 SecurityMetrics 3Delta Systems, Inc. US 09/07/2017 Fortrex 800 Call–KC Inc. US 02/20/2018 Information Exchange Inc. 911 SOFTWARE, INC. US 06/07/2018 Dara Security A1Payments MEA 06/01/2018 Sysnet Ltd. ABC Financial Services, Inc. US 05/18/2018 Dara Security Wednesday, August 01, 2018 Page 1 of 44 Service Provider Name Region AOC Date Assessor DESV Abila, Inc. US 10/02/2017 Dara Security Acceptiva, LLC US 08/15/2017 Trustwave Accertify, Inc. US 06/29/2018 RSM McGladrey, Inc. Accertify, Inc. US 06/29/2018 RSM McGladrey, Inc. Accesso, LLC US 01/11/2018 Trustwave AccountNow/Ready Financial Group US 10/31/2017 Tevora Business Solutions Achieve Financial Services LLC US 10/31/2017 Tevora Business Solutions ACI Worldwide Germany GmbH Europe 05/02/2018 Adsigo AG ACI Worldwide, Inc. US 11/17/2017 Trustwave ACS Technologies Group, Inc. US 11/15/2017 Secure State Consulting Active Network (Active Merchant Services) US 10/31/2017 K3DES LLC [formerly (Infospherix, ReserveWorld, AWO)] Acumera, Inc. US 07/08/2018 UHY Advisors TX, LLC Adastra Corporation Canada 05/24/2017 Auditwerx, LLC Adelante Software Limited Europe 05/09/2017 Pentest Partners Consulting LLP (PTP) Adflex Limited Europe 07/12/2018 Evolution LTD Administradora de Tarjetas de Credito, S.A. Latin Americ 11/30/2017 Sikich LLP (ATC Red Enlace) Advam Pty LTD Asia Pacific 05/03/2017 Trustwave Advam Pty Ltd. Asia Pacific 05/03/2018 Vectra Corporation Adyen B.V. Europe 05/14/2018 Payment Software Company (PSC) AffiniPay LLC US 05/15/2017 ControlScan Affinity Solutions LLC US 12/20/2017 Coalfire Systems, Inc. AGS Transact Technologies Limited Asia Pacific 06/12/2018 Network Intelligence India Pvt. Ltd. AI Corporation Europe 01/08/2018 SecuriCentrix AIMIA Australia Asia Pacific 08/25/2017 Shearwater Solutions Pty Ltd Aimia Canada Inc. and Aimia Proprietary Canada 07/13/2017 ControlCase Loyalty Canada Inc Aimia Proprietary Loyalty U.S. Inc. (formerly US 05/26/2017 ControlCase Carlson Marketing Group) Airlines Reporting Corporation (ARC) US 11/30/2017 Schellman & Company, LLC AirPay Private Limited 09/14/2017 LE Global Services Sdn. Bhd. Aizan Technologies Inc. Canada 08/20/2017 Datassurant Akamai Technologies Inc. US 06/21/2017 Cisco Systems, Inc. Wednesday, August 01, 2018 Page 2 of 44 Service Provider Name Region AOC Date Assessor DESV Alacriti Payments, LLC US 08/07/2017 Dara Security Alegeus Technologies, LLC US 06/27/2018 CompliancePoint, Inc. Alert Communications Ltd. Europe 06/27/2017 Kyte Consultants, Ltd. Aliaswire, Inc. US 09/12/2017 Dara Security Alignet SAC Latin Americ 04/30/2018 Insside Information Inteligente SRL Alipay Financial Services (HK) Limiied Asia Pacific 06/03/2017 atsec (Beijing) Information Technology C Alipay Hong Kong Limited (Branded as Asia Pacific 06/03/2018 atsec (Beijing) Information Technology C “Alipay Hongkong”) Alipay US Inc (Branded as "Alipay US") US 06/03/2018 atsec (Beijing) Information Technology C AllianceOne Incorporated US 10/23/2017 A-Lign Security and Compliance Services Allinpay Network Services Co., Ltd. (Branded 12/26/2017 atsec (Beijing) Information Technology C as “Allinpay”) Alorica Direct, LLC (Alorica Direct II, LLC) US 12/12/2017 K3DES LLC Alpha Card Services LLC US 10/31/2017 Information Exchange Inc. Altapay A/S Europe 09/21/2017 CrimsonSecurity Altech Card Solutions (Division of Altron TMT MEA 06/28/2018 Sysnet Ltd. (Pty) Ltd) Altech NuPay (Pty) Ltd MEA 12/15/2017 Sysnet Ltd. Alternative Payments Ltd Europe 07/13/2018 SecuriCentrix Amadeus IT Group S.A. (Spain) Europe 01/24/2018 Security Research & Consulting GmbH Amazon Web Services, Inc US 06/29/2018 Coalfire Systems, Inc. Amazon.com, Inc. US 06/15/2017 Coalfire Systems, Inc. American Bancard, LLC (Touchsuite) US 11/27/2017 SISA Information Security Inc. Americaneagle.com (Svanaco, Inc.) US 10/20/2017 Fortrex AmeriCommerce, LP US 10/04/2017 Tevora Business Solutions Anderson Zaks Ltd. Europe 05/30/2018 Convergent Network Solutions, Ltd AO Raiffeisenbank Europe 08/12/2017 Digital Security AOC Solutions, Inc. US 09/01/2017 Fortrex ApacPay PTE. LTD. Asia Pacific 02/24/2018 atsec (Beijing) Information Technology C APCO Systems Ltd. Europe 11/28/2017 Kyte Consultants, Ltd. Aperia Solutions (formerly Data Delivery US 04/30/2018 Coalfire Systems, Inc. Services, Inc.) Aplitt S.A. (formerly Towarzystwo Finansowe Europe 07/31/2017 Comsec Consulting, Ltd. Skok S.A. (TFSKOK)) Appletree Communications Limited Europe 12/19/2017 IT Governance Ltd Wednesday, August 01, 2018 Page 3 of 44 Service Provider Name Region AOC Date Assessor DESV Appnit Technologies Pvt Ltd. Asia Pacific 05/18/2018 Panacea Infosec (P) Ltd. Apriva US 07/06/2017 Schellman & Company, LLC Apriva LLC US 07/06/2017 Schellman & Company, LLC Apriva, LLC (formerly APPSware Wireless, US 07/06/2017 Schellman & Company, LLC LLC) Arab Financial Services B.S.C. MEA 07/25/2018 SISA Information Security Inc. Arab Information Technology MEA 10/27/2017 NCC Group Aria Systems, Inc. US 07/13/2017 Trustwave Ariane Systems US 09/14/2017 Security Validation LLC Arise Virtual Solutions US 05/18/2018 Online Enterprises Arise Virtual Solutions, Inc. US 05/18/2018 Online Enterprises Ashburn International Europe 12/29/2017 Cognit Consult, UAB Aspect Software, Inc. (Voxeo, Voxeo Europe US 06/25/2018 ControlCase Limited, Voxeo Germany GmbH) Asseco SEE Croatia Europe 08/17/2017 Compliance Control Ltd. Asseco SEE Teknoloji A.Ş Europe 04/06/2018 Evolution LTD Asseco See Teknoloji Anonim ªirketi Europe 08/17/2017 Evolution LTD Asseco South Eastern Europe Europe 07/31/2017 Compliance Control Ltd. ASSIST (LLC) Europe 06/22/2018 Security Research & Consulting GmbH AT&T Cloud Storage (formerly AT&T US 07/29/2017 Trustwave Synaptic Storage as a Service (STaaS)) AT&T Managed Firewall Service - Premise US 07/29/2017 ControlCase Based AT&T Managed Services - AT&T Content US 07/20/2017 Trustwave Delivery Network (ACDN) AT&T Managed Services - AT&T Network US 07/07/2017 ControlCase Based IP VPN Remote Access Service/AT&T VPN Tunneling Service (ANIRAIAVTS) AT&T Managed Services - AT&T Virtual US 07/29/2017 ControlCase Private Network Service (AVPN)/Enhanced Virtual Private Network (EVPN)/Private Network Transport (PNT) AT&T Managed Services - Intrusion US 07/29/2017 ControlCase Detection Services & Intrusion Prevention Services (IDS/IPS) AT&T Managed Services – Managed LAN US 07/29/2017 ControlCase Services (MLAN) AT&T Managed Services - Managed Router US 07/29/2017 ControlCase Services (MRS) Wednesday, August 01, 2018 Page 4 of 44 Service Provider Name Region AOC Date Assessor DESV AT&T Managed Services - Network Based US 07/29/2017 ControlCase Firewall (NBFW) AT&T Managed Services - Network Security US 07/29/2017 ControlCase with Internet Access (NSIA) AT&T Managed Services – Security Event US 07/29/2017 ControlCase and Threat Analysis (SETA) AT&T Managed Services - US 07/28/2017 ControlCase VoiceTone/Interactive Voice Services- Advanced Plus AT&T Ultravailable Storage US 06/07/2017 Trustwave ATFBank JSC Europe 04/27/2018 DialogueScience CJSC Athenahealth, Inc. US 11/22/2017 Security Risk Advisors AudienceView Ticketing Corporation Canada 07/13/2017 MNP LLP Aurus Inc. (TalentBeat Inc.) US 01/16/2018 K3DES LLC Aypara Odeme Kurulusu A.S. Europe 12/22/2017 Biznet Information Systems Bambora Device AB (formerly Samport Europe 06/21/2017 KnowIT Secure AB Payment Services AB) Bambora Inc.