Procedure for Credit Card and ACH Data Transfer Request (export)
This guide provides a comprehensive overview for merchants on how to effectively initiate and finalize the transfer of credit card data to a new processor, while adhering to PCI-DSS standards and maintaining secure data transfer protocols.
1. Initiating the Transfer Request
To initiate a data transfer, the merchant must contact Zift directly and provide the following details:
- Required Information:
- List of customers and associated tokens (including expiration dates and/or routing numbers) from the current platform.
- New platform and payment processor to which the data will be transferred.
- Contact Information for the New Platform and Processor:
- New Platform Contact: Company name, contact person, phone number, and email address.
- New Processor Contact: Company name, contact person, phone number, and email address.
2. PCI Compliance Requirement for Target Processor
Zift will only transfer data to processors that meet PCI-DSS compliance standards.
- The target processor must have a Level 1 or Level 2 PCI Attestation of Compliance (AOC) audit conducted by an independent third party.
- Self-Assessment Questionnaires (SAQs) will not be accepted as valid proof of compliance for the target processor.
3. Export Fees and Payment
An export fee will be charged by Zift for processing the data transfer request.
- The merchant will receive an invoice for the export fee, which must be paid in full before Zift will release the data to the new processor.
- Fee Schedule
- 1-10k tokens: $200
- 10k-50k tokens: $300
- 50k-100k tokens: $500
- > 100k: Quote
4. Processor Compliance Verification and Data Encryption Setup
Once Zift receives the necessary customer token data and contact information, Zift will verify the PCI Attestation of Compliance with the new processor and obtain their public PGP key for secure data encryption.
5. Data Transfer Process
Zift will prepare and securely transfer the credit card data to the new processor according to their specified standards and data transfer protocols.