3-2- SCOPE OF SERVICES.docx

Scope of Services The City of St. George is currently seeking to engage a full-service vendor experienced in the development, installation, and operations of a credit, and debit card processing service for the city. The vendor shall provide all necessary hardware, including credit card terminals, swipers, and related equipment at our locations. The system must be fully PCI compliant.

1. Provide a competitively based discount for the processing of all four major credit cards: Visa, MasterCard, Discover, and American Express, and provide additional discounts for Utility payment processing.

2. Allow the City to authenticate and validate the card using online payments, mobile payments, and in-person payments using chip cards, magnetic stripe cards, contactless payments, near-field communications and mobile payments through digital wallets such as Apple Pay, Google Pay, and Samsung Pay. Card readers should use Payment Card Industry Data Security Standards (PCI-DSS) encrypted ethernet network connection to communicate with the authorizing gateway and the cashier point of sale system and support EMV chip card technology.

3. Allow the city to accept payments using interactive voice response technology (IVR).

4. Support recurring payments including the ability to automatically charge customers on a regular basis.

5. Deposit payments electronically into specified City bank accounts by merchant ID ensuring that float on City funds is minimized.

6. Batch processing and file transmission capabilities with real-time settlement

7. Support for multiple merchant IDs and department-specific reporting and reconciliation

8. Provide online access and reporting to view and download daily transactions, account reconciliation and settlement reports by merchant ID, by payment card type and by transaction. Online access to view, hold, or void transactions before they settle or refund specific transactions.

9. Be compatible with existing City software and able to interface using API.

10. Provide REST API for wallet (saved card) and single transactions.

11. Provide credit card and bank account tokenization support.

12. Offer "System Admin" level web application for viewing logs and API errors.

13. Provide comprehensive documentation and support for their API, including sample code, SDKs (Software Development Kits), and technical support resources to assist with integration and troubleshooting.

14. Provide monthly statements by merchant ID that clearly summarize all revenue related activity including all chargeback information by date, data and card type. All processing fees must be separated from revenue deposits. The Statement deposit activity must match the actual deposit activity in the City’s accounts.

15. Provide seven (7) days per week and 24 hours per day technical support with written service level agreements (SLA’s). Provide business continuity/Disaster Recovery in case of unplanned outages in the vendor’s merchant processing system.

16. Comply with all relevant industry standards, including but not limited to the Payment Card Industry Data Security Standards (PCI DSS), to ensure the security of all cardholder data. Provide evidence of compliance with these standards and conduct regular security audits and vulnerability assessments to ensure ongoing compliance.

17. Provide a current Service Organization Control (SOC) report that verifies the effectiveness and security of payment processing systems. The report must be issued by a reputable third-party auditor and cover all relevant controls related to the security, availability, processing integrity, confidentiality, and privacy of customer payment data. The report must be made available upon request, without signature of a non-disclosure agreement. The SOC report should be updated regularly.

18. Have at least five (5) years’ experience processing credit payment records transmitted for processing and settlement from major credit/debit card processing networks, and with at least five (5) public sector customers.

19. Current PCI DSS v4.o compliance certification with recent audit report

20. Financial stability documentation including audited financial statements and adequate insurance coverage

21. Qualified Public Depository: The proposing financial institution must be a qualified depository for public funds pursuant to the Utah State Money Management Act Section 51-7-11.

22. Implement fraud prevention controls

Pricing Proposal Complete transparent pricing structure including:

•Transaction fees by card type and processing method with competitive discount rates •Interchange rates and network fees with clear explanation of cost components •Monthly fees, setup charges, equipment costs, and any hidden fees •Chargeback fees and other ancillary costs with fee schedule

Attachment A: Average Transactions City of St. George Currently, the City of St. George has separate Merchant IDs and statements for the following transaction groups:

1. Online Authorize.net Platforms (Airport, Rec Center, Animal Shelter, Utilities, Community Arts)

Transaction Data:

Authorize.net

INFORMATION REQUIRED OF PROPOSER

A. Fees and other charges Respondents must provide a merchant fee schedule based on the activity and volume as described in the Cost of Services Form (page 24), include the following:

1. Setup Fee

2. Monthly Maintenance

3. Monthly Minimum Discount

4. Chargeback Fee

5. Authorization Fee

6. Online Access Fee

7. Return Fee

8. Wireless Fee

9. Wireless Authorization Fee

10. Any other fees