Mastercard is committed to processing personal information in a fair and transparent manner. This table describes Mastercard’s use of sub-processors (organizations Mastercard engages to process personal information) to handle, access, store, and otherwise process personal information received from our Customers or relating to Customers’ users and employees (“Customer Data”).
|Vendor||Location||Description of vendor activity|
|ACI - Retail Decisions||USA||Fraud services|
|Akamai||USA||Web hosting and security / protection services|
|FEXCO||Ireland||Dynamic Currency Conversion (DCC) Provider|
|Maxmind||USA||Supplier of IP location data. Utilized for Fraud rule sets.|
|Paymark Limited||New Zealand||Asia Pacific Gateway processing|
|PAYON||Germany||Connectivity provider to card acquirers and APMs.|
|Pennies||UK||Process charity donations via point of sale donation settlement files, invoice merchants and distribute funds.|
|Secure Retail Limited||UK||Card Holder Present (CHP) hardware distribution, software, terminals and associated support services|
|Travelex (Currency Select)||UK||Dynamic Currency Conversion (DCC) Provider|
|Verifone UK Ltd||UK||PIN Entry Device software, point to point encryption (P2PE) and Verifone VeriShield Project (VSP) solution|
Mastercard Payment Gateway Services utilizes a number of global sub-processors. These are managed centrally by Mastercard.
Links to this information are available via the Gateway URLS and can also be found here.