Important Sage PCI Information

Dear Valued Merchant:

In accordance with Payment Card Industry (PCI) regulations, annual Payment Card Industry Data Security Standard (PCI-DSS) certification is required by all merchants in order to continue processing credit card transactions. In addition, Visa has mandated that all processors (including Sage Payment Solutions) must ensure merchants that are storing, processing or transmitting credit card transactions/data via a software product are using a Payment Application Data Security Standard (PA-DSS) certified compliant application by July 1, 2010.

You have been or will be assessed a $50 PCI certification fee on your statement to cover expenses related to this annual requirement. Truswave's PCI Wizard will guide you through the PCI-DSS certification process. To activate your pre-registered account, please visit https://sagepayments.pci.trustwave.com and click Get Started. Please note that PCI-DSS Certification is required by Sage Payment Solutions by July 1, 2010 in order to prevent a monthly non-compliance fee of $15 beginning in your July statement period.

If you have already created your account with Trustwave, simply visit https://login.trustwave.com to continue your compliance efforts. If however you completed/passed your PCI-DSS certification and however have failed the PA-DSS portion, you must take action to upgrade your payment application to a compliant version. Please visit the following site for information on compliant payment applications: https://www.pcisecuritystandards.org/security_standards/vpa/

NOTE: You may be using an application that integrates with a compliant payment application (i.e. Peachtree Accounting 2011 with Sage Exchange). If so, the application integrated with the PA-DSS compliant application will not be listed on the above website. To confirm if your application is compliant you may contact us at pcicompliance@sagepayments.com.

Thank you for your attention to this time-sensitive matter. For questions regarding the program and your compliance requirements, please call 800-261-0240 and ask to speak to a Compliance representative. If you have any questions regarding the Trustwave Portal or the PCI process, you may contact Trustwave at 877-841-7014. You may also contact us via email at pcicompliance@sagepayments.com..

We appreciate your business and thank you for taking the appropriate steps to become compliant as soon as possible.

Sincerely,

Sage Payment Solutios
Compliance Group

Additional Security Resources:

• PCI DSS: www.pcisecuritystandards.org
• PA-DSS Compliant Applications: https://www.pcisecuritystandards.org/security_standards/vpa/vpa_approval_list.html
• PTS Approved Vendors: https://www.pcisecuritystandards.org/security_standards/ped/pedapprovallist.html