Site Data Protection (SDP) Program - Mastercard

1 A company s name appears on this SDP Compliant Registered Service Provider List if (i) Mastercard records reflect the company is registered as a Service Provider by one or more Mastercard Customers and (ii) Mastercard has received a copy of an Attestation of Compliance (AOC) by an appropriate PCI SSC approved Qualified Security Assessor (QSA) reflecting validation of the company being PCI compliant. The date of the AOC and the name of the Assessor are also provided. Each AOC is valid for one year. Mastercard receives copies of AOCs from various sources.

2 This SDP Compliant Registered Service Provider List is provided solely for the convenience of Mastercard Customers and any Customer that relies upon or otherwise uses this SDP Compliant Registered Service Provider list does so at the Customer s sole risk. While Mastercard endeavors to keep the list current as of the date set forth in the footer, Mastercard disclaims any and all warranties of any kind, including any warranty of accuracy or completeness or fitness for any particular purpose. Mastercard disclaims any and all liability of any nature relating to or arising in connection with the use of or reliance on the SDP Compliant Registered Service Provider List or any part thereof.

3 Each Mastercard Customer is obligated to comply with Mastercard Rules and other Standards pertaining to use of a Service Provider. As a reminder, an AOC by a PCI SSC approved QSA provides a snapshot of security controls in place at a point in time. This list is updated once Service Provider1-60 Days Past AOC Due Date61-90 Days Past AOC Due DateThe Mastercard SDP Compliant Registered Service Provider ListSite Data Protection (SDP) ProgramService Provider NameRegionAOC DateAssessorDESV1&1 IONOS SE05/04/2020 Security Research & Consulting GmbHEurope1 Link (Guarantee) Limited11/30/2020 Compliance Wing Pty LtdAsia ( Group, lnc.)

4 08/06/2020 Payment Software Company (PSC)US1stPayGateWay, LLC08/21/2020K3 DES LLCUS2138617 Ontario LLPC anada2C Processor USA, LLC05/29/2020 Information Exchange Pte., Pacific3C Payment Luxembourg (formerly SIX Payment Services Luxembourg SA)12/23/2020 Advantio LimitedEurope3C Payment UK Ltd12/15/2020 Advantio LimitedEurope3C Payment USA Corp05/17/2020 Advantio LimitedUS3dCart03/16/2021 SecurityMetricsUS3 Delta Systems, , LLC (dba Drummond Group)US3G Direct Pay Limited07/17/2020 Sysnet SOFTWARE, SecurityUS99 Tecnologia Ltda (Branded as 99 )12/31/2020atsec (Beijing)

5 Information Technology CA1 Payments Ltd05/20/2020 Sysnet Financial Services, SecurityUSWednesday, March 31, 2021 Page 1 of 36 Service Provider NameRegionAOC DateAssessorDESVA bove and Beyond - Business Tools and Services for Entrepreneurs, Systems, Madrid - Vivaldi Product03/16/2020 TrustwaveEuropeAccertify, McGladrey, , McGladrey, (Formally known asCygnus eTransactions Group, Inc purchashed by V3 Enterprise Solutions, LLC)06/05/2020 TrustwaveUSAccesso, LLC06/05/2020 TrustwaveUSAcculynk , LLPUSACI Payments, Worldwide Corp and Affiliates11/18/2020 TrustwaveUSACI Worldwide Germany GmbH05/02/2020 Adsigo AGEuropeAcoustic Limited11/30/2020 NCC GroupEuropeAcryness06/10/2020risk3sixty LLCUSACS Technologies Group, McGladrey, Network (Active Merchant Services) [formerly (Infospherix, ReserveWorld, AWO)]11/23/2020 Payment Software Company (PSC)

6 USAcumera, Advisors TX, LLCUSA dflex Limited12/22/2020 Evolution LTDE uropeAdministradora de Tarjetas de Credito, (ATC Red Enlace)08/28/2020S21sec Gestion, AmericADS Alliance Data Systems Pty Call Center Technologies LLC (ACT)12/18/2020 Avertium, LLCUSA dyen Software Company (PSC)EuropeAEVI International GmbH08/12/2020 ControlCaseEuropeAgave Pay, Exchange Corporation03/08/2021 SecuriCentrixEuropeAI Corporation Limited01/30/2020 SecuriCentrixEuropeAirwallex (Hong Kong) Limited01/17/2021atsec (Beijing) Information Technology CAsia PacificAkamai Technologies Security Services, GmbH01/29/2021usd AGEuropeWednesday, March 31, 2021 Page 2 of 36 Service Provider NameRegionAOC DateAssessorDESVA kurateco BV12/24/2020 Advantio LimitedEuropeAlacriti Payments, LLC08/07/2020 Dara SecurityUSAlacriti Payments, LLC08/07/2020 Dara SecurityUSAlegeus Technologies, LLC08/07/2020 GuidePoint Security, LLCUSA liaswire, SecurityUSAlipay (Europe) limited (Branded as Alipay Europe )06/03/2020atsec (Beijing)

7 Information Technology CEuropeAlipay Hong Kong limited (Branded as Alipay Hongkong )06/03/2020atsec (Beijing) Information Technology CAsia Co., Ltd (Branded as Alipay )11/13/2020atsec (Beijing) Information Technology CAsia PacificAlliance Data Systems12/10/2020 Verizon/CybertrustUSAllianceOne Incorporated10/27/2020A-Lign Security and Compliance ServicesUSAllinpay Financial Services Co., Ltd11/13/2020atsec (Beijing) Information Technology CAsia PacificAllitude , LLCUSA lpha Card Services LLC10/21/2020 Information Exchange Card Solutions (Division of Altron TMT (Pty) Ltd)10/06/2020 Foregenix LimitedMEAA ltech NuPay (Pty) Ltd03/30/2021 Foregenix LimitedMEAA lternative Payments Ltd (JudoPay)07/31/2020 SecuriCentrixEuropeAltice Pay, SA06/19/2020 FortConsult A/SEuropeAmadeus IT Group (Spain)12/14/2020 Security Research & Consulting GmbHEuropeAmaryllis Payment Solutions, Inc ( )

8 10/01/2020 GRSee ConsultingUSAmazon Web Services, Inc12/14/2020 Coalfire Systems, , Systems, Bancard, LLC (Touchsuite)09/04/2020 SISA Information Security (Svanaco, Inc.)10/16/2020 FortrexUSAnderson Zaks Limited05/30/2020 Convergent Network Solutions, LtdEuropeApac Link Solutions Limited07/03/2020 Thales Transport & Security (Hong Kong)Asia PacificAPCO Systems Consultants, LLC09/02/2020 Schellman & Company, LLCUSA priva, LLC (formerly APPS ware Wireless, LLC)09/02/2020 Schellman & Company, LLCUSArab Financial Services , March 31, 2021 Page 3 of 36 Service Provider NameRegionAOC DateAssessorDESVArgo Payment Services03/12/2021 Network Intelligence India Pvt.

9 Virtual Solutions EnterprisesUSAsiabill Company limited (Branded as Asiabill )06/19/2020atsec (Beijing) Information Technology CAsia PacificAsiaPay Limited08/19/2020 TrustwaveAsia PacificASSIST (LLC)05/28/2020 Compliance Control , Risk AdvisorsUSAudienceView Ticketing Corporation10/07/2020 MNP LLPC anadaAurus Inc. (TalentBeat Inc.)01/14/2021K3 DES LLCUSA utomated Systems America, Exchange Odeme Kurulusu Information SystemsEuropeAzeriCard LLC11/05/2020 FortConsult A/SEuropeBAHUD Processing LLC06/18/2020 Anitian CorporationUSBambora , Secure Banet, Information Inteligente SRLL atin AmericBancard Secure IT, LLCL atin AmericBanco Comercial e de lnvestimentos, SA ("BCI")

10 Mozambique08/21/2020 Sysnet de Credito Social Cooperativo SA10/29/2020 Internet Security Auditors, del Austro04/08/20201st Secure IT, LLCL atin AmericBanco do Estado do Rio Grande do Sui (Rede Banricompras)08/31/2020 Cipher InformaticaLatin AmericBank of China limited (BOC)12/01/2020atsec (Beijing) Information Technology CAsia PacificBank Organization for Payments Initiated by Cards Ltd (BORICA)09/09/2020 Security Research & Consulting GmbHEuropeBank Windhoek01/22/2021 Sysnet Kart Merkezi A..04/09/2020 Biznet Information SystemsEuropeBankart - Procesiranje Placilnih Instrumentov Internet Security Systems (ISS)EuropeBankCard USA Merchant Services, Inc01/13/2021 Information Exchange Processing Center JSC (BPC)12/23/2020 Compliance Control GmbH05/24/2020 Security Research & Consulting GmbHEuropeBanque Centrale Populaire07/15/2020 DataprotectMEAB arion Payment Consulting LLCE uropeWednesday, March 31, 2021 Page 4 of 36 Service Provider NameRegionAOC DateAssessorDESVB ayern Card-Services GmbH (BCS)