Visa Digital Enablement SDK Product Terms

Visa Digital Enablement SDK Product Terms

October 28, 2024

If You are a Visa Member, the following Visa Product Terms apply to You:

 

 General Terms

  • For the purposes of the Visa Digital Enablement SDK (also referred to as “SDK”), references in the Agreement (other than in this Section) to access to and use of an “API” or “APIs” mean to download, access and use the SDK or SDK/s in general.
  • Company’s access and use of the Visa Digital Enablement SDK capabilities is subject to the Visa Digital Enablement SDK Service Description and Technical Implementation Guide, as well as Company’s compliance with the Visa Rules.
  • Modification of SDK.  Visa may modify any of the SDK capabilities, features or functionalities as described in the Digital Enablement SDK Service Description upon 30 days written notice to Company, for which email or VBN (Visa Business News) will suffice.
  • Company may access and use the Visa Digital Enablement SDK capabilities only for card accounts which have undergone and passed customer verification (KYC), following appropriate Cardholder and/or authorized user authentication and, if applicable, with such partners that have undergone and passed OFAC checks.  Company will also obtain all Cardholder consents and provide all Cardholder notifications necessary, or provide such notifications or applicable terms to Visa for display to the Cardholder on Company’s behalf and make the appropriate display, notification and consent choices for a Visa provided user interface, if applicable, in order to provide Visa with the relevant Card and Cardholder data and enable Visa to perform its obligations under the Agreement in accordance with the Rules and applicable law.
  • Future SDK Services Functionality.  Visa may agree to offer optional additional SDK capabilities, features or functionalities to Company in the future. Such future SDK capabilities may, in Visa’s sole discretion, require mutually executing additional amendments to the Agreement and may be subject to additional pricing, terms, third party agreements, as well as host/processor/issuer considerations which, if applicable, may be addressed in the additional amendments and/or future versions of the SDK Service Description.
  • Company may not modify the Visa Digital Enablement SDK or decipher, translate or access the source code of the Visa Digital Enablement SDK and any of it’s supported capabilities, features or functionalities.
  • Company will not share or provide access to the Visa Digital Enablement SDK or any components of it with any of its vendors, suppliers, agents, technology providers or other third parties, unless approved by Visa in the form of a Third Party Technology Provider Schedule or Addendum to this Agreement.
  • Company will implement any standard updates or upgrades to the Visa Digital Enablement SDK within 12 months of the respective release. In addition, Company may be asked to update the Visa Digital Enablement SDK within a short time period due an emergency update related to security or third party modification which could negatively impact the use of the SDK. Such emergency updates should be applied as soon as possible or within the time frames provided by Visa. Visa reserves the right to suspend support of prior versions of the Visa Digital Enablement SDK and Visa will discontinue support for versions which have been updated or upgraded 12 months after the update or upgrade.
  • Company is responsible for supporting the end users of its Application and Visa disclaims any and all liability with respect to Company’s end users. The aforementioned applies, but is not limited to use cases in which Visa may display a user interface to, send information to or receive information from the end user on Company’s behalf as part of the selected Services under the Agreement.
  • Visa reserves the right to schedule maintenance windows with advanced notification during which the Visa Digital Enablement SDK capabilities will not be available.
  • Company acknowledges and agrees that several of the capabilities enabled through the Visa Digital Enablement SDK depend on the actions and input by third parties, such as the relevant digital wallets or other third party end points, both with respect to timeliness and data accuracy. Visa does not have insight into or control over such third party actions and input and disclaims any and all liability.
  • Visa will begin billing Company for Visa Digital Enablement SDK fees commencing on (i) the day Company initiates SDK calls in production based on the Visa Digital Enablement SDK or (ii) 30 days following the Production Live Date, whichever comes first, except for one time implementation Setup Fees, which shall become due on the Production Live Date. For purposes of this Section, “Production Live Date” is defined as the date when Visa enables Company to initiate SDK calls in production based on the Visa Digital Enablement SDK by providing Company with the relevant signature secret and the encryption secret.
  • Company’s authorization to optionally access and use the Visa Universal Card Enrollment API is limited to the purpose of enrolling Company’s cardholder accounts participating in the Company’s program within the relevant Card Portfolios/BIN Ranges by requesting a universal card identifier.

 

Additional Capability Specific Terms

 

Subscription Manager:

  • Company is responsible for all cardholder terms, notifications and consents to enable the respective Subscription Manager capabilities in accordance with the Rules and applicable law.
  • Company’s right to use the Visa Stop Payment Services (VSPS) API through the SDK hereunder is limited to subscription payments only and is further subject to Company’s ongoing participation in VSPS and completion of all applicable enrollment documentation required by Visa.  Without limiting any other VSPS requirement as set forth in the Rules, Company understands that usage of VSPS does not remove any obligation of the Cardholder to meet payment terms or any other agreement with the merchant, including but not limited to informing the merchant the Cardholder wishes to cancel the respective service. Company further understands that the Cardholder may directly provide stop instructions to Visa through the user interface that Visa may provide on Company’s behalf and Company agrees to enable this process by taking full responsibility for providing the appropriate Cardholder terms of use, obtaining the appropriate consents and providing the appropriate notifications as required under applicable law.
  • For the use of the Card on File Data Inquiry through the SDK hereunder, certain functionality may require participation in other programs. For example, if Company is participating in only one of either the Visa Token Services or the Visa Account Updater, Company understands that its experience with the Card on File Data Inquiry capability will be limited to such participation.
  • In order to use Token Lifecycle Management API hereunder, Company needs to be a current participant in Visa Token Services.

 

Cardholder Identity Verification:

  • Company authorizes Visa to verify the identity of a Cardholder on its behalf, using the Cardholder contact information provided or available to Visa using Visa’s OTP verification service or Visa 3-D Secure verification, as specified further in the Documentation.
  • Company expressly authorizes Visa to use the Cardholder information in the above referenced databases, batch files or other information provided or available to Visa, as applicable, to contact the Cardholder for the purpose of performing Cardholder Identity Verification hereunder on Company’s behalf.
  • Visa relies on the Cardholder information provided to it through the above alternatives and has no insight or control over its accuracy. Visa assumes no responsibility and is not liable for any inaccuracies and errors related to the Cardholder verification.

 

Digital Card Display:

  • Company’s access to and use of the Digital Card Display is subject to Company’s (i) compliance with the Visa Rules, (ii) applicable prior selections in the Customer Information Questionnaire (CIQ) and (iii) compliance with the deliverables regarding CVV2 in accordance with the Documentation.
  •  Company is required to, at a minimum, authenticate Cardholders in compliance with applicable law, including, as applicable, step-up authentication or double authentication.
  • Company hereby authorizes Visa to display any available Card art (including Company trademarks, service marks, logos, and Company-provided digital Card art) that Company has provided to Visa for use with the SDK.

 

Push Provisioning:

Push Provisioning to Digital Wallets

  • Company’s use of this capability is further subject to Company’s (i) current participation in the Visa Token System through an effective VDEP Agreement or an equivalent agreement enabling participation in the Visa Token System and compliance with such agreement, and (ii) active enrollments for those digital wallets or other end points and Issuing Identifier ranges for which Company intends to use the Visa Digital Enablement SDK capabilities, as separately approved by Visa (where such approval may require Company’s attestation of a separate agreement with the respective digital wallet provider, endpoint provider or Visa, an agreement through the Visa Token System, or other requirements, as applicable).
  • Company’s authorization is limited to the access and use of the Visa Digital Enablement SDK capabilities for the purpose of enabling enrolling Company’s cardholder accounts participating in Company’s program within the relevant Card Portfolios/BIN Ranges by verifying eligibility of the relevant digital wallet and/or to enable provisioning of a token for such cardholder accounts through the relevant digital wallets.

 

Push Provisioning to Visa Card Enrollment Hub (VCEH)

  • Company’s use of this capability is further subject to Company’s (i) current participation in the Visa Token System through an effective VDEP Agreement or an equivalent agreement enabling participation in the Visa Token System and compliance with such agreement, (ii) active enrollments for those digital wallets or other end points and Issuing Identifier ranges for which Company intends to use the Visa Digital Enablement SDK capabilities, as separately approved by Visa (where such approval may require Company’s attestation of a separate agreement with the respective digital wallet provider, endpoint provider or Visa, an agreement through the Visa Token System, or other requirements, as applicable), and (iii) prior execution of a current VCEH addendum to Company’s VDEP or other participation agreement in the Visa Token Service (the “VCEH Addendum”).
  • For the avoidance of doubt, provisioning into VCEH through the SDK does not relieve Company of any of its obligations under the VCEH Addendum, including but not limited to the relevant end user notification obligations thereunder.

 

Order Insight Digital:

  • In response to Your API calls, Visa will attempt to respond with information, if available, obtained from participating merchants and in Visa databases.
  • If Your API call requests information that is unavailable, cannot be retrieved, or Visa deems such information subject to Trade Restrictions that prevent Visa from sharing such information, Visa will respond confirming such unavailability; provided that, Visa’s response will not note whether any SKU/receipt level information is unavailable.
  • You may only use data obtained through a call to the OID API in connection with the resolution of a cardholder’s dispute of transactions with that cardholder’s bank cards. You may not use, store or otherwise process such data for any other purpose.

If You are not a Visa Member the following Visa Product Terms apply to You: 

General Terms

  • For purposes of the Visa Digital Enablement SDK (“SDK”), references in these Product Terms and elsewhere in the Agreement to accessing or using an “API” or “APIs” mean downloading, accessing and using the SDK.
  • Your access to, use, and/or distribution of the Visa Digital Enablement SDK capabilities is subject to the Visa Digital Enablement SDK Service Description and Technical Implementation guide and all other documentation in relation to use thereof as made available, updated, supplemented and amended from time to time by Visa and is limited to actions on behalf of and subject to the Member for which you are an Agent.
  • Prior to any access and use of the Visa Digital Enablement SDK, You must provide Visa with a written agreement between You and a Visa Member that makes You an Agent for the use of this Visa Product, completed and signed by the Member for which You are an Agent (“Agent Agreement”).
  • Modification of SDK. Visa may modify any of the SDK capabilities, features or functionalities as described in the Visa Digital Enablement SDK Service Description upon 30 days written notice to You, for which email or VBN (Visa Business Notification) will suffice.
  • In addition to an Agent Agreement from each Visa Member, Program Managers, Processors, Integrators and Distributors are required to provide Visa with current lists of customers utilizing the SDK along with the respective version number.  Visa reserves the right to ask for such updated lists from time to time.
  • Distributors and Integrators may only provide the SDK to direct customers of the Distributors and Integrators which are Members. Distributors and Integrators shall not resell or provide the SDK to any other entities, including, but not limited to other Distributors or Integrators.

Additional Distributor and Integrator obligations:

 

  • Distributor or Integrator shall work directly with Visa in order to make the SDK available to its participating clients and their respective participating cardholders under the terms set forth in the Agreement.
  • Distributor or Integrator shall provide participating clients with all relevant documentation, FAQ, technical support, implementation and other technical guidelines as reasonably necessary and shall flow down the applicable terms, use restrictions and obligations under the Agreement to the participating clients as if they were You under the Agreement.
  • Distributor or Integrator must collect and/or ensure the destruction of any documentation which was provided to a participating client of the Distributor or Integrator when the participating client is no longer under contract by the Distributor or Integrator.
  • Distributor or Integrator shall provide customer service and technical support associated with the SDK including all communication with each participating client and all direct to consumer communications.    If a customer service request or technical problem requires additional input from Visa, Distributor or Integrator shall facilitate all communications between Visa and the participating client or consumers.  As between Visa and Distributor or Integrator, Distributor or Integrator shall be the party responsible for training all participating clients in connection with the SDK.  As between Distributor or Integrator and participating clients, Distributor or Integrator shall serve as the primary contact to Visa for all implementation related issues including those related to the participating clients. You may access and use the Visa Digital Enablement SDK capabilities only for accounts of the Member for which You are an Agent which have undergone and passed customer verification (KYC), following appropriate Cardholder and/or authorized user authentication and, if applicable, with such Issuer Partners which have undergone and passed OFAC checks. Any changes in the Program as specified in the Agent Agreement, including but not limited to a change in Issuer Partners, if applicable, require the submission of an updated signed Agent Agreement prior to any access or use of the Visa Digital Enablement SDK hereunder.
  • In addition to the terms of this Agreement, You are obligated to comply with all applicable provisions of the Visa Digital Enablement Program (“VDEP”) Agreement of the Member for which You are an Agent, and the Visa Rules as if You were such Member under these terms, as well as with the VisaNet Letter of Agreement, as applicable; provided that, for Issuer Program Managers, Integrators and Issuer Processors, such compliance includes being PCI DSS compliant. For Issuer Partners and Distributors, PCI DSS standards need to be complied with if the Issuer Partner or Distributor has access to Cardholder Information.
  • You may access and use the Visa Digital Enablement SDK capabilities only for card accounts which have undergone and passed customer verification (KYC), following appropriate Cardholder and/or authorized user authentication and, if applicable, with such partners that have undergone and passed OFAC checks.  You, or the Member for which You are an Agent, must obtain all Cardholder consents and provide all Cardholder notifications necessary in order to provide Visa with the relevant Card data and enable Visa to perform its obligations under the Agreement.
  • Future SDK Services Functionality.  Visa may agree to offer optional/additional SDK capabilities, features or functionalities to You or Your Issuers in the future. Such future SDK capabilities may, in Visa’s sole discretion, require mutually executing  additional amendments to the Agreement and may be subject to additional pricing, terms, third party agreements, as well as host/processor/issuer considerations which, if applicable, may be addressed in the additional amendments and/or future versions of the Visa Digital Enablement SDK Service Description and Technical Implementation Guide.
  • You may not modify the Visa Digital Enablement SDK or decipher, translate or access the source code of the Visa Digital Enablement SDK and any of it’s supported capabilities, features or functionalities. Other than in the form of an access grant as a Distributor or Integrator to eligible clients hereunder, You will not share or provide access to the Visa Digital Enablement SDK or any components of it with any of its vendors, suppliers, agents, technology providers or other third parties, including but not limited to resellers or additional program managers, processors or other issuer partners, unless approved by Visa in the form of a Third Party Technology Provider Schedule.
  • You will implement any standard updates or upgrades to the Visa Digital Enablement SDK within 12 months from the respective release.  In addition, You may be asked to update the Visa Digital Enablement SDK within a short time period due an emergency update related to security or third party modification which could negatively impact the use of the SDK. Such emergency updates should be applied as soon as possible or within the time frames provided by Visa. Visa reserves the right to suspend support of prior versions of the Visa Digital Enablement SDK and Visa will discontinue support for versions which have been updated or upgraded 12 months after the update or upgrade.
  • You are responsible for supporting the end users of its Application, as well as the Member for which You are an Agent, and Visa disclaims any and all liability with respect to Your end users.
  • Visa reserves the right to schedule maintenance windows with advanced notification during which the Visa Digital Enablement SDK capabilities will not be available.
  • You acknowledge and agree that several of the capabilities enabled through the Visa Digital Enablement SDK depend on the actions and input by third parties, such as the relevant digital wallets or other third party end points, both with respect to timeliness and data accuracy. Visa does not have insight into or control over such third-party actions and input and disclaims any and all liability.
  • Visa will begin billing You for Visa Digital Enablement SDK fees commencing on (i) the day You initiate SDK calls in production based on the Visa Digital Enablement SDK or (ii) 30 days following the Production Live Date, whichever comes first, except for one time implementation Setup Fees and BIN Fees, which shall become due on the Production Live Date. For purposes of this Section, “Production Live Date” is defined as the date when Visa enables You to initiate SDK calls in production based on the Visa Digital Enablement SDK by providing You with the relevant signature secret and the encryption secret.
  • Except in the Visa Asia Pacific Region, our authorization to optionally access and use the Visa Universal Card Enrollment API on behalf of the Member for which You are an Agent, is limited to the purpose of enrolling Your or the Issuer’s cardholder accounts participating in Your or Issuer’s program within the relevant Card Portfolios/BIN Ranges by requesting a universal card identifier.

 

Additional Capability Specific Terms

Visa Stop Payment Service:

  • You may use the Visa Stop Payment Service (VSPS) API only on behalf and at the direction of a Visa Member and subject to such Visa Member’s (i) ongoing participation in VSPS, (ii) payment of applicable VSPS usage and client configuration management fees, (iii) completion of all applicable enrollment documentation required by Visa (iv) designation of You as its VSPS processor in the enrollment documentation and (v) compliance with the Visa Rules.
  • You are responsible for implementation with and connection to the VSPS API, any APIs between You and the relevant Visa Member and management of the relationship and communication with the Visa Member with regards to the VSPS API. Visa is not obligated to address any issues regarding the VSPS API directly with Visa Members.
  • Without limiting any other VSPS requirement as set forth in the Rules, You understand that usage of VSPS does not remove any obligation of the Cardholder to meet payment terms or any other agreement with the merchant, including but not limited to informing the merchant the Cardholder wishes to cancel the respective service.
  • VSPS includes various functions, allowing to search, retrieve, add, cancel, update and extend stop instructions, and also to research eligible transaction history. You may use all functions available as part of VSPS, but use is strictly limited to the set up and maintenance of stop instructions for the participating Visa Member’s Cardholders.
  • Clause 2 (Data Privacy Terms when the Parties act as a Controller) of the Additional Visa Developer Platform Privacy & Data Protection Terms for Visa Products Schedule in the Terms of Use applies to the Processing of Personal Information in connection with Your use of the Visa Products.

Card-On-File Data Inquiry:

  • You may access and use the Visa Card on File Data API only subject to the terms of the Visa Card on File Data API Reference Guide. To use and access this Visa Product, You must provide evidence to Visa that (i) You are the Agent of a Visa Member for purposes of using this Visa Product, and (ii) Your access and use of this Visa Product is at the direction and on behalf of the Visa Member for which You are an Agent and only to provide services to such Visa Member. Your use of the Visa Member’s Cardholder data received from Visa is limited to the delivery of services back to that same Visa Member, using the Visa Card on File Data API.
  • If such Visa Member is not participating in either the Visa Token Services or the Visa Account Updater, You understand that its experience with Visa Card on File Data API will be limited and Visa Card on File Data API may be unable to display where credential updates have occurred on stored cards.
  • You represent and warrant that You have Your applicable Visa Member’s and the relevant Cardholder’s authorization to (a) provide Visa with Cardholder data for use in connection with the Visa Card on File Data API and (b) receive from Visa data related to Visa Card accounts as well as transaction data that is submitted for processing through the Visa payment system for such Visa Member’s Cardholders enrolled in applicable card on file or stored credential service offerings. Any Cardholder data provided by Visa is provided AS IS, Visa has no insight into the currency or accuracy of the Cardholder data and disclaims any and all liability. You should communicate directly with the Visa Member for verification of accuracy.
  • Visa may modify any of the Card on File Data API capabilities, features or functionalities as described in the Visa Card on File Data API Reference Guide upon written notice to You, for which email or general announcement via the Visa Developer Platform portal will suffice.
  • You are responsible for managing the relationship with the applicable Visa Member with regards to the Visa Card on File Data API, including but not limited to communications with the Visa Member about the service, technical support and implementation.
  • For clarity, You and the applicable Visa Member are responsible for implementing data privacy and data protection measures in compliance with applicable Laws and Privacy and Data Protection Regulations, including but not limited to the collection, receipt, provision and processing of Cardholder data by, to and from Visa. Visa has no insight into, no responsibility for and disclaims any and all liability with respect to such measures and Cardholder notices and authorizations, including any security breaches or violations of Privacy and Data Protection Regulations on Your or the Visa Member’s side.

 

Visa Digital Card Display:  

For Non-Visa Europe Region:  If You are not in the Visa Europe Region, the following terms govern Your use of Visa Digital Card Display:

  • Your access to and use of the Digital Card Display is subject to Your (and, as applicable, the Member for which You are an Agent’s): (i) compliance with the Visa Rules (ii) applicable prior selections in the Customer Information Questionnaire (CIQ) and (iii) compliance with the deliverables regarding CVV2 in accordance with the Documentation.
  • You and the Member for which You are an Agent, are required to, at a minimum, authenticate Cardholders in compliance with applicable Laws, including, as applicable, step-up authentication or double authentication.
  • You hereby authorize Visa to display any available Card art (including Your and/or Issuer trademarks, service marks, logos, and  digital Card art provided by You) that You have provided to Visa for use with the SDK. You are required to obtain the relevant authorizations and approvals from the Member for which You are an Agent.

For Visa Europe Region: If You are in the Visa Europe Region, the following terms govern Your use of Visa Digital Card Display:

  • Conditions of API access.  Your access to and use of the Visa Digital Card Display is subject to Your (and, as applicable, the Member for which You are an Agent’s (“TPA Member”)): (i) compliance with the Visa Rules; (ii) applicable prior selections in the Customer Information Questionnaire (CIQ); (iii) selections for provision of dCVV2 or CVV2 and its corresponding deliverables in accordance with the Documentation; (iv) in case You choose to use dCVV2, (A) separate and prior enablement of the applicable BIN range, or account range in the dCVV2 service, or instruction by Visa to enroll the entire range, (B) use of the dCVV2 Authenticate API (in case of PAN by PAN enrollment), subject to Your selection of the dCVV2 Authenticate API as a separate API under this Agreement, or ISO 0302 message to enroll individual PANs; and (C) flagging of the relevant BIN or account range as “eligible” for Visa Digital Card Display.
  • Required checks.  You may access and use Visa Digital Card Display only for Visa Card accounts or Card accounts of the third party networks listed in the Documentation that have undergone and passed customer verification (KYC) and, if applicable, with such partners that have undergone and passed OFAC checks.  You and Your TPA Member are required to, at a minimum, authenticate Cardholders in compliance with applicable Laws, including, as applicable, step-up authentication or double authentication.
  • Card art.  You hereby authorizes Visa to display any available Card art (including Your and/or Issuer trademarks, service marks, logos, and You-provided digital Card art) that You have provided to Visa for use with the SDK or through its participation in the Visa Token Service when Visa provides the Services hereunder. You are required to obtain from Your TPA Member the relevant authorizations and approvals required by this Section.
  • Use of Universal Card Enrollment API.  Your access to Visa Digital Card Display includes access to and requires use of the Visa Universal Card Enrollment API, which You may call only for the purpose of enrolling Your Cardholder accounts participating in the Your program by requesting a universal card identifier for each relevant Card. Your rights to use the Universal Card Enrollment API granted in connection with other Services under this Agreement remain unaffected.

 

Visa Push Provisioning:

Push Provisioning to Digital Wallets

  • Conditions of API access. Your use of this capability is further subject to the Visa Member for which you are an Agent (“TPA Member”) (i) being a current participant in the Visa Token Service through an effective VDEP Agreement or an equivalent agreement enabling participation in the Visa Token System and (ii) having active enrollments for those digital wallets, other endpoints and Issuing Identifier ranges for which You intend to use the Visa Digital Enablement SDK capabilities, as separately approved by Visa (where such approval may require Issuer’s attestation of a separate agreement with the respective digital wallet provider, an agreement through the Visa Token Service, or other requirements, as applicable). 
  • Authorized scope. Your authorization is limited to the access and use of the Visa Digital Enablement SDK capabilities in Your role as an Issuer Program Manager, Issuer Processor, Integrator, Distributor and/or an Issuer Partner, in each case to enroll or allow the Issuer to enroll Issuer cardholder accounts participating in the Program within the relevant Card Portfolios/BIN Ranges by verifying eligibility of the relevant digital wallet and/or to enable provisioning of a token for such cardholder accounts through the relevant digital wallets.
  • If You are using In-App Provisioning through Apple extensions, You are responsible for facilitating connectivity with the Apple Wallet app, including development work beyond the scope of integration with the Visa Digital Enablement SDK.

 

Push Provisioning to Visa Card Enrollment Hub (VCEH)

  • Conditions of VCEH access. Your use of this capability is further subject to the Visa Member for which you are an Agent (i) being a current participant in the Visa Token Service through an effective VDEP Agreement or an equivalent agreement enabling participation in the Visa Token Service and compliance with such agreement, (ii) having active enrollments for those digital wallets or other end points and Issuing Identifier ranges for which You intend to use the Visa Digital Enablement SDK capabilities, as separately approved by Visa (where such approval may require attestation of a separate agreement with the respective digital wallet provider, endpoint provider or Visa, an agreement through the Visa Token System, or other requirements, as applicable), and (iii) executing a current VCEH addendum to its VDEP or other participation agreement in the Visa Token Service (the “VCEH Addendum”).
  • VCEH terms. For the avoidance of doubt, provisioning into VCEH through the SDK does not relieve You or Your sponsoring Issuer of any of its sponsoring Issuer’s obligations under the VCEH Addendum, including but not limited to the relevant end user notification obligations thereunder.

 

Order Insight Digital:

  • In response to Your API calls, Visa will attempt to respond with information, if available, obtained from participating merchants and in Visa databases.
  • If Your API call requests information that is unavailable, cannot be retrieved, or Visa deems such information subject to Trade Restrictions that prevent Visa from sharing such information, Visa will respond confirming such unavailability; provided that, Visa’s response will not note whether any SKU/receipt level information is unavailable.
  • You may only use data obtained through a call to the OID API in connection with the resolution of a cardholder’s dispute of transactions with that cardholder’s bank cards. You may not use, store or otherwise process such data for any other purpose.
  • Additionally, if You are an Agent, You must ensure that each of Your customers that are Members, comply with this Agreement (including these Product Terms) and the Visa Rules, so long as the corresponding Member for which You are an Agent has not accepted the Agreement (as part of creating a Developer Account) to allow Your use of OID on behalf of such Member. Failure to do so is a material breach of this Agreement, and permits Visa to, among other things, immediately terminate access to the OID API and VDP.

 

 

 

If You are a Visa Member, then the following Visa Product Terms apply to You:

General Terms

  • For purposes of the Visa Digital Enablement SDK (“SDK”), references in these Product Terms and elsewhere in the Agreement to accessing or using an “API” or “APIs” mean downloading, accessing and using the SDK.
  • Your access to and use of the Visa Digital Enablement SDK (the “Capabilities”) for non-Visa card credentials in production is subject to the Visa Digital Enablement SDK Service Description and Technical Implementation guide and limited to the payment networks indicated in the Documentation.
  • You must use the Capabilities only in accordance with applicable law and the rules and requirements of the relevant payment network, including but not limited to the authorization from such network(s) to (i) provide Visa with the encryption key(s) and data related to cardholder accounts for the purposes of providing the Capabilities and (ii) instruct Visa to initiate enrollment of issuer cardholder accounts in digital wallets, including but not limited to an appropriate written agreement covering such actions between You and the relevant digital wallet providers. You must obtain all necessary permissions for Visa to collect and/or use cardholder information in order to provide the Capabilities, including but not limited to obtaining cardholder consents and displaying appropriate cardholder or user disclosures and issuer consent.
  • Prior to any access and use of the Capabilities in production, You must obtain the relevant encryption key(s) from the relevant payment network and provide them to Visa in compliance with the relevant payment network rules,  for Visa’s use on Your behalf in accordance with the Agreement. If applicable, You also need to comply with any additional action items set forth in the Visa Digital Enablement SDK Service Description and Technical Implementation Guide.  You further agree to separately register Visa as its agent under the rules of the relevant payment network, if applicable.
  • You may access and use the Capabilities only for accounts that have undergone and passed know-your-customer verification (KYC) and, if applicable, with such partners that have undergone and passed OFAC screening checks.
  • You will not share or provide access to the Visa Digital Enablement SDK or any components of it with any of its vendors, suppliers, agents, technology providers or other third parties, unless approved by Visa in the form of a Third Party Technology Provider Schedule to this Agreement.
  • You acknowledge and agree that its use of the Capabilities is partially contingent on the actions, authorizations and requirements of relevant third parties, such as the relevant payment network and the relevant digital wallets, including but not limited to aspects such as timeliness of SDK call responses and data accuracy. Visa does not have insight into or control over such third party actions, authorizations or requirements and disclaims any and all liability whatsoever. Similarly, Visa has no insight into or control over the respective pay wallet and/or the applicable rules of the relevant payment networks and compliance with such rules and Visa disclaims any and all liability whatsoever.
  • Visa will begin billing You for Visa Digital Enablement SDK fees commencing on (i) the day You initiate SDK calls in production based on the Visa Digital Enablement SDK or (ii) 30 days following the Production Live Date, whichever comes first, except for one time implementation Setup Fees, which shall become due on the Production Live Date. For purposes of this Section, “Production Live Date” is defined as the date when Visa enables You to initiate SDK calls in production based on the Visa Digital Enablement SDK by providing You with the relevant signature secret and the encryption secret.
  • The Visa Digital Enablement SDK capabilities provided to You hereunder shall include the Visa Universal Card Enrollment API. In addition to the terms and conditions in the Agreement, Your authorization to access and use the Visa Universal Card Enrollment API is limited to the purpose of enrolling Your cardholder accounts participating in Your program within the relevant Card Portfolios/BIN Ranges by requesting a universal card identifier.

Additional Capability Specific Terms

Digital Card Display

  • Your access to and use of the Digital Card Display is subject to Your (i) compliance with the rules of the applicable third party network, (ii) applicable prior selections in the Customer Information Questionnaire (CIQ), (iii) selections for provision of the security code used by the relevant payment network and its corresponding deliverables in accordance with the Documentation and (iv) provision of a key for Visa’s use to derive the security code used by the relevant payment network.
  • You are required to, at a minimum, authenticate Cardholders in compliance with applicable Laws, including, as applicable, step-up authentication or double authentication.
  • You hereby authorize Visa to display any available Card art (including Your trademarks, service marks, logos, payment network trademarks, service marks and/or logos and digital Card art) that You have provided to Visa for use with the SDK. You are required to obtain any necessary authorizations from the relevant payment network for Visa’s use of the Card art with the SDK hereunder before any such Card art is provided to Visa.
  • You further expressly authorize Visa to use the key for Visa’s use to derive the security code used by the relevant payment network provided hereunder for the purposes outlined herein as Your agent.

Push Provisioning to Digital Wallets

  • Your use of this capability is further subject to You (i) being a current participant in the relevant payment network’s token system and compliance with the relevant participation terms, (ii) having active enrollments for those digital wallets and BIN ranges for which You intend to use the Capabilities, as authorized by the relevant payment network and (iii) providing Visa with the encryption key(s) issued by the relevant payment network for purposes of providing push provisioning services into the relevant digital wallets, as well as any additional information requested by Visa.
  • Your authorization is limited to the access to, use, and/or distribution of the Capabilities to enroll its cardholder accounts within the authorized Card Portfolios/BIN Ranges by requesting a universal card identifier through the Visa Universal Card Enrollment API when available (optional), and/or  by verifying eligibility of the relevant digital wallet and/or to enable provisioning of a token for such cardholder accounts through the relevant digital wallets.
  • You further expressly authorize Visa to use the encryption key(s) provided hereunder for the purposes outlined herein as Your agent.

Order Insight Digital

  • In response to Your API calls, Visa will attempt to respond with information, if available, obtained from participating merchants and in Visa databases.
  • If Your API call requests information that is unavailable, cannot be retrieved, or Visa deems such information subject to Trade Restrictions that prevent Visa from sharing such information, Visa will respond confirming such unavailability; provided that, Visa’s response will not note whether any SKU/receipt level information is unavailable.
  • You may only use data obtained through a call to the OID API in connection with the resolution of a cardholder’s dispute of transactions with that cardholder’s bank cards. You may not use, store or otherwise process such data for any other purpose.

 

If You are not a Visa Member, then the following Visa Product Terms apply to You:

General Terms

  • For purposes of the Visa Digital Enablement SDK (“SDK”), references in these Product Terms and elsewhere in the Agreement to accessing or using an “API” or “APIs” mean downloading, accessing and using the SDK.
  • Your access to and use of the Visa Digital Enablement SDK (the “Capabilities”) for non-Visa card credentials in production is subject to the Visa Digital Enablement SDK Service Description and Technical Implementation guide and limited to the payment networks indicated in the Documentation and to actions on behalf of and subject to You being an Agent of a Member that issues Visa Cards.
  • Prior to any access and use of the Visa Digital Enablement SDK, You must provide Visa with a written agreement between You and a Visa Member that makes You an Agent for the use of this Visa Product (“Agent Agreement”), completed and signed by the sponsoring or integrating issuer.
  • In addition, both You and the issuer must use the Capabilities only in accordance with applicable law and the rules and requirements of the relevant payment network, including but not limited to the authorization from such network(s) to (i) provide Visa with the encryption key(s) and data related to cardholder accounts for the purposes of providing the Capabilities and (ii) instruct Visa to initiate enrollment of issuer cardholder accounts in digital wallets, including but not limited to an appropriate written agreement covering such actions between the issuer and the relevant digital wallet providers. You must obtain and/or ensure all necessary permissions for Visa to collect and/or use cardholder information in order to provide the Capabilities, including but not limited to obtaining cardholder consents and displaying appropriate cardholder or user disclosures and issuer consent.
  • Prior to any access and use of the Capabilities in production, You must have the issuer it is acting on behalf of obtain the relevant encryption key(s) from the relevant payment network and provide them to Visa in compliance with   the relevant payment network rules,  for Visa’s use on the issuer’s behalf in accordance with the Agreement. If applicable, You and the relevant issuer also need to comply with any additional action items set forth in the Visa Digital Enablement SDK Service Description and Technical Implementation Guide.
  • Your authorization is limited to the access to, use, and/or distribution of the Capabilities on behalf of the issuer to enroll issuer cardholder accounts within the authorized Card Portfolios/BIN Ranges by requesting a universal card identifier through the Visa Universal Card Enrollment API when available (optional), and/or  by verifying eligibility of the relevant digital wallet and/or to enable provisioning of a token for such cardholder accounts through the relevant digital wallets.
  • You may access and use the Capabilities only for issuer accounts that have undergone and passed know-your-customer verification (KYC) and, if applicable, with such issuer partners that have undergone and passed OFAC screening checks.
  • In addition to the terms of this Agreement, You are obligated to comply with all applicable provisions of the issuer’s token agreement with the relevant payment network and the network rules, if applicable. For certain use cases, this might include compliance with PCI DSS standards.
  • You may, in each case subject to Visa’s prior consent, make available the Capabilities, SDK and related Materials and documentation to third parties with a need to know in order for You or Your clients to use the Capabilities as contemplated under this Agreement and subject to Visa’s consent. You agree to flow down all of its applicable obligations under the Agreement to such third parties prior to making the Capabilities, SDK, related Materials or documentation available to the third party.
  • You are explicitly prohibited from reselling or providing the SDK to any resellers, distributors, integrators or channel partners of its own.
  • You acknowledge and agree that its use of the Capabilities is partially contingent on the actions, authorizations and requirements of relevant third parties, such as the issuer, the relevant payment network and the relevant digital wallets, including but not limited to aspects such as timeliness of SDK call responses and data accuracy. Visa does not have insight into or control over such third party actions, authorizations or requirements and disclaims any and all liability whatsoever. Similarly, Visa has no insight into or control over the respective pay wallet and/or the applicable rules of the relevant payment networks and compliance with such rules and Visa disclaims any and all liability whatsoever.
  • Visa will begin billing You for Visa Digital Enablement SDK fees commencing on (i) the day You initiate SDK calls in production based on the Visa Digital Enablement SDK or (ii) 30 days following the Production Live Date, whichever comes first, except for one time implementation Setup Fees and BIN Fees, which shall become due on the Production Live Date. For purposes of this Section, “Production Live Date” is defined as the date when Visa enables You to initiate SDK calls in production based on the Visa Digital Enablement SDK by providing You with the relevant signature secret and the encryption secret.
  • Except in the Visa Asia Pacific Region, the Visa Digital Enablement SDK capabilities provided to You hereunder shall include the Visa Universal Card Enrollment API. In addition to the terms and conditions in the Agreement and the Addendum, Your authorization to access and use the Visa Universal Card Enrollment API is limited to the purpose of enrolling Your cardholder accounts participating in the Your program within the relevant Card Portfolios/BIN Ranges by requesting a universal card identifier.

Additional obligations if You are a Distributor or Integrator:

  • Distributor or Integrator shall work directly with Visa in order to make the Capabilities available to its participating clients and their respective participating cardholders under the terms set forth in the Agreement.
  • Distributor or Integrator shall provide participating clients with all relevant documentation, FAQ, technical support, implementation and other technical guidelines as reasonably necessary and shall flow down the applicable terms, use restrictions and obligations under the Agreement to the participating clients as if they were You under the Agreement.
  • Distributor or Integrator must collect and/or ensure the destruction of any documentation which was provided to a participating client of the Distributor or Integrator when the participating client is no longer under contract by the Distributor or Integrator.
  • Distributor or Integrator shall provide customer service and technical support associated with the Capabilities including all communication with each participating client and all direct to consumer communications. If a customer service request or technical problem requires additional input from Visa, Distributor or Integrator shall facilitate all communications between Visa and the participating client or consumers.  As between Visa and Distributor or Integrator, Distributor or Integrator shall be the party responsible for training all participating clients in connection with the Capabilities.  As between Distributor or Integrator and participating clients, Distributor or Integrator shall serve as the primary contact to Visa for all implementation related issues including those related to the participating clients.

Additional Capability Specific Terms

Digital Card Display:

  • Your access to and use of the Digital Card Display is subject to Your and Your sponsoring Issuer’s, as applicable (i) compliance with the rules of the applicable third party network, (ii) applicable prior selections in the Customer Information Questionnaire (CIQ) and (iii) selections for provision of the security code used by the relevant payment network and its corresponding deliverables in accordance with the Documentation.
  • You and Your sponsoring Issuer are required to, at a minimum, authenticate Cardholders in compliance with applicable Law, including, as applicable, step-up authentication or double authentication.
  • You hereby authorize Visa to display any available Card art (including You and/or Issuer trademarks, service marks, logos, payment network trademarks, service marks and/or logos and digital Card art) that You have provided to Visa for use with the SDK. You are required to obtain the relevant authorizations and approvals from its sponsoring Issuer, including any required authorization from the relevant payment network for Visa’s use of the Card art with the SDK hereunder before any such Card art is provided to Visa.

Push Provisioning to Digital Wallets

  • Your use of this capability is further subject to Your sponsoring Issuer (i) being a current participant in the relevant payment network’s token system and (ii) having active enrollments for those digital wallets and BIN ranges for which You intend to use the Capabilities, as authorized by the relevant payment network.
  • Except in the Visa Asia Pacific Region, in accordance with the specifications and additional definitions for the capitalized terms used in these API specific terms and in the Agent Agreement, Your authorization is limited to the access to, use, and/or distribution of the Capabilities on behalf of the issuer to enroll issuer cardholder accounts within the authorized Card Portfolios/BIN Ranges by requesting a universal card identifier through the Visa Universal Card Enrollment API when available (optional), and/or  by verifying eligibility of the relevant digital wallet and/or to enable provisioning of a token for such cardholder accounts through the relevant digital wallets.

Order Insight Digital

  • In response to Your API calls, Visa will attempt to respond with information, if available, obtained from participating merchants and in Visa databases.
  • If Your API call requests information that is unavailable, cannot be retrieved, or Visa deems such information subject to Trade Restrictions that prevent Visa from sharing such information, Visa will respond confirming such unavailability; provided that, Visa’s response will not note whether any SKU/receipt level information is unavailable.
  • You may only use data obtained through a call to the OID API in connection with the resolution of a cardholder’s dispute of transactions with that cardholder’s bank cards. You may not use, store or otherwise process such data for any other purpose.
  • Additionally, if You are an Agent, You must ensure that each of Your customers that are Members, comply with this Agreement (including these Product Terms) and the Visa Rules, so long as the corresponding Member for which You are an Agent has not accepted the Agreement (as part of creating a Developer Account) to allow Your use of OID on behalf of such Member. Failure to do so is a material breach of this Agreement, and permits Visa to, among other things, immediately terminate access to the OID API and VDP.