Verifone Bundled Solution
Supplemental Terms - Verifone Bundled Solution
These Supplemental Terms set forth the terms and conditions on which Merchant may access and use certain products that are made available as an all-in-one bundled solution referred to as the Verifone Bundled Solution (the "Bundled Solution"). The Bundled Solution is provided on a per-device basis and includes the software, cloud services, support services, and other components described below. Subject to the payment of the applicable Fees, Merchant may use the Bundled Solution during the Service Term for a Supported Device Model for its internal business purposes. Verifone hereby grants to Merchant a limited, non-exclusive, non-transferable, non-sublicensable license to access and use the software underlying or included in the Bundled Solution for the sole purpose of using the Bundled Solution in accordance with these Terms and Conditions. All other uses are prohibited.
Included Software
Verifone will provide Merchant with a payment application suitable for the applicable payment device model that is designed for payment processing, such as credit, debit, gift, and other electronic payments.
Verifone will provide Merchant with information regarding the supported functions of its payment applications from time to time upon request.
Note: Verifone updates its payment applications from time to time. Unless Verifone is providing Estate Manager Administration Services as part of your Bundled Solution, you are responsible for ensuring that you are using a current version of the payment application. Failure to update your payment application may result in the Verifone Bundled Solution not functioning properly. Verifone will provide you with information regarding the supported versions of its payment applications upon request. Verifone reserves the right to cause the Payment Application installed on your devices to be updated if it determines necessary or desirable for security, performance, or continuity of service reasons.
Verifone Cloud Services
Payment Gateway
Merchant will have access to Verifone's Payment Gateway, which provides transaction routing to enable various transaction types, as well as online reporting and other tools made available by the Payment Gateway portal.
Verifone's Payment Gateway has been validated as PCI DSS compliant.
Payment Gateway services are included with applicable Bundled Solution offerings only and are not included if the Direct Bundled Solution option or similar non-gateway offering is selected in the Order Form.
Data Decryption Services
Verifone's Data Decryption Services involve the decryption of sensitive credit/debit card track data elements ("Sensitive Card Data Elements") that were encrypted on the Device using Verifone's VeriShield Protect terminal application or other supported encryption software and the transfer of decrypted Sensitive Card Data Elements to the applicable processor or third-party gateway (provided that Verifone supports such processor or gateway) for processing.
Verifone's VeriShield Protect terminal application or other supported encryption software must be installed in each Verifone payment device to enable the encryption functionality. Merchant must separately procure a license to the VeriShield Protect terminal application or other supported encryption software; such license is not included in the Verifone Bundled Solution.
Verifone's Decryption Service has been validated as PCI DSS compliant.
Data Decryption Services are included with applicable Bunded Solution offerings only and are not included if the Direct Bundled Solution or similar non-gateway offering option is selected in the Order Form.
Virtual Terminal
You will be given access to a virtual terminal hosted in Verifone's IT Environment via a Verifone portal that provides a virtual interface for Merchant to enter a customer's payment information and submit for processing.
Virtual Terminal is included with applicable Bunded Solution offerings only and is not included if the Direct Bundled Solution or similar non-gateway offering option is selected in the Order Form.
Verifone payment devices can be managed via Verifone's Estate Management Service, which permits key loading, and the deployment and installation of software (and software updates) on, and downloading of content to, Verifone payment devices.
Merchant Responsibilities. You are solely responsible for (i) enabling the features in, and setting the parameters you wish to use for, the applications that you download to Verifone payment devices using the Estate Manager Service, (ii) ensuring that you have the proper licenses and rights to the content that you download to Verifone payment devices using the Estate Manager Service, and (iii) ensuring that you are using a current version of all software on your payment devices, including deploying any mandatory updates as soon as practicable. If you procured the Bundled Solution through a Verifone Channel Partner, the Channel Partner may perform certain of these responsibilities on your behalf.
No Cardholder Data. The Estate Manager Service does not involve the accessing, storing, or processing of any Cardholder Data ("CHD") or Sensitive Authentication Data ("SAD"), each as defined in the PCI DSS rules, by Verifone. You agree to not store in the Estate Manager Service or Device Agent Software any data categorized as CHD or SAD. Any data sets uploaded or stored which can be categorized to be considered CHD or SAD may be deleted without notice. If you store in the Estate Manager Service or Device Agent Software data relating to cardholder information or data that could reasonably be captured within the scope of PCI DSS then you will ensure that all such data transferred to the Estate Manager Service or Device Agent Software will be compliant with PCI DSS requirements (including but not limited to encryption requirements).
Verifone's Estate Manager Service has been validated as PCI DSS compliant.
Technical and Other Data. You acknowledge and agree that Verifone may collect and use technical data and other information in connection with your use of the Estate Manager Service and Device Agent Software, including, without limitation, technical and usage information about devices on which the Estate Manager Service and Device Agent Software are used and any peripherals used therewith, which is gathered periodically by Verifone for data analytics and optimization, to facilitate the provision of the Estate Manager Service and Device Agent Software, updates, support, and other services, to improve the Estate Manager Service and Device Agent Software, and for other lawful purposes.
Content Retrieval. You will be responsible for retrieving any content provided by you for the Estate Manager Service prior to any expiration or termination of these Supplemental Terms - Verifone Bundled Solution or the Terms and Conditions using the applicable portal made available to you with the Estate Manager Service; Verifone does not provide content retrieval services.
Other Services
Optional Verifone Services
Verifone's Hosted Token Service is a Verifone Cloud Service that enables card-based tokenization capabilities such as authorization, reverse authorization, refund, post void (for transactions that have not been settled), capture, credit, settlement, balance inquiry, and other payment operations with a token. Sensitive Card Data Elements are tokenized either by your processor or by Verifone (as directed by you) and the applicable token is then returned.
Note: Additional fees may apply for token-based operations not related to payment, such as token storage or token lookup.
Verifone’s Tokenization Service has been validated as PCI DSS compliant.
Verifone will execute certain administrator functions for management of the Estate Manager services, acting as your administrator, as set forth below. All actions will be done only at your direction.
- Assist you in hierarchy design
- Create and modify hierarchy nodes
- Create and modify IP ranges in hierarchy structure to facilitate automated device assignment
- Setup and configure custom alerts as required by you to monitor various VHQ changes, statuses, and activities
- Add and remove devices
- Move devices into proper hierarchy nodes
- Create, remove, and maintain groups
- Remotely perform diagnostic actions on devices as needed, including gathering logs files, screen shots, and rebooting.
- Assign maintenance window time
- Device status – Report on changes of active, inactive, and pending devices
- Device application statistics – Report on application versions, encryption keys, and other vital device statistics
- Heartbeat and communication history – Report on devices checking in with VHQ
- Hierarchies – Report on all hierarchy nodes and the devices assigned to them
- Downloads – Report on all scheduled downloads and their current status
- Alerts – Report on VHQ device alerts
- Maintain file library with configuration, application, OS, encryption key, and media files
- Schedule downloads to devices
- Install signed debit keys as requested by you via the VeriShield Remote Key services (VRK) (subject to applicable fees)
- Create and maintain reference sets
- Open tickets for issues relating to the Estate Manager Service reported by you
- Monitor alerts and dispatch tickets to support
- Work with your helpdesk as needed for troubleshooting
- User creation
- Assigning user roles
- Managing Verifone payment device passwords
- Resetting passwords
- Managing Verifone payment device location (no tracking of the actual physical location of a device and its associated serial number)
- Assigning alert recipients
- Developing multi-media content
- Requests for configuration or application changes
- Request to package and sign customer created media files
Request to package and sign customer created media files
The Administration Services are provided as needed during business hours (Monday through Friday (8:00 to 5:00 ET). Verifone will provide you with a designated contact who will be generally available to you during such business hours.