Visa Universal Card Enrollment API and Visa In-App Provisioning API Product Terms

1.    If You are a Visa Member, the following Visa Product Terms apply to You:

        1.1. Your access and use of the Visa In-App-Provisioning API is subject to Your (i) compliance with the Visa Rules, (ii) current participation in the Visa Token Service through an effective Visa Digital Enablement Program Issuer Participation Agreement, Visa Digital Enablement Program Enrollment Form (for Issuers) or other agreement in relation to Your participation in the Visa Digital Enablement Program and the Visa Token Service (“VDEP Agreement”), and (iii) active enrollments for those digital wallets and BIN ranges for which You intend to use the Visa In-App-Provisioning API capabilities, as separately approved by Visa (where such approval may require Your attestation of a separate agreement with the respective digital wallet provider, an agreement through the Visa Token Service, or other requirements, as applicable).

        1.2. Your authorization is limited to the access and use of the Visa In-App-Provisioning API for the purpose of enrolling Your cardholder accounts participating in Your program within the relevant Card Portfolios/BIN Ranges to enable provisioning of a token for such cardholder accounts through the relevant digital wallets by calling the Visa In-App-Provisioning API.

        1.3. You may access and use the Visa In-App-Provisioning API only for card accounts that have undergone and passed customer verification (KYC) and, if applicable, with such partners that have undergone and passed sanctions screenings (including for sanctions managed by the U.S. Office of Foreign Assets Control). 

 1.    If You are not a Visa Member, the following Visa Product Terms apply to You:

        1.1. Your access and use of the Visa Universal Card Enrollment API and the Visa In-App-Provisioning API is limited to actions on behalf of and subject to sponsorship and approval by a Visa Issuer that (i) is a current participant in the Visa Token Service through an effective VDEP Agreement or an equivalent agreement enabling participation in the Visa Token System and (ii) has active enrollments for those digital wallets and BIN ranges for which You intend to use the Visa Universal Card Enrollment API and the Visa In-App-Provisioning API capabilities, as approved by Visa (where such approval may require Issuer’s attestation of a separate agreement with the respective digital wallet provider, an agreement through the Visa Token Service, or other requirements, as applicable).

        1.2. Prior to any access and use of the Visa Universal Card Enrollment API and the Visa In-App-Provisioning API, You must provide Visa with a written agreement between You and a Visa Member that makes You an Agent for the use of this Visa Product, completed and signed by the sponsoring or integrating issuer.

        1.3. In accordance with the specifications and additional definitions for the capitalized terms used in these API specific terms for the Visa Universal Card Enrollment API and the Visa In-App-Provisioning API in the Sponsorship Agreement, Your authorization is limited to the access and use of the Visa Universal Card Enrollment API and the Visa In-App-Provisioning API in its role as an Issuer Program Manager, and/or an Issuer Processor, and/or an Issuer Partner, in each case to enroll Issuer cardholder accounts participating in the Program within the Card Portfolios/BIN Ranges by requesting an universal card identifier through the Visa Universal Card Enrollment API, and/or to enable provisioning of a token for such cardholder accounts through the relevant digital wallets by calling the Visa In-App-Provisioning API. 

        1.4. You may access and use the Visa Universal Card Enrollment API and the Visa In-App-Provisioning API only for sponsoring Issuer accounts that have undergone and passed customer verification (KYC) and, if applicable, with such Issuer Partners that have undergone and passed OFAC checks. Any changes in the Program as specified in the Sponsorship Agreement, including but not limited to a change in Issuer Partners, if applicable, require the submission of an updated signed Sponsorship Agreement prior to any access or use of the Visa Universal Card Enrollment API and the Visa In-App-Provisioning API hereunder.

        1.5. In addition to the terms of this Agreement, You are obligated to comply with all applicable provisions of the sponsoring Issuer’s VDEP Agreement and the Visa Rules as if You were the Issuer under these terms, as well as with the VisaNet Letter of Agreement, if applicable. For Issuer Program Managers and Issuer Processors, this includes compliance with PCI DSS standards. For Issuer Partners, PCI DSS standards need to be complied with if the Issuer Partner has access to Cardholder Information.

        1.6. Visa may restrict the number of API calls You are permitted to make under the Agreement, based on PCI DSS documentation, to the extent applicable.

1.    If You are a Visa Member, the following Visa Product Terms apply to You:

        1.1. Your access and use of the Visa In-App-Provisioning API (the “Capabilities”) for non-Visa card credentials is limited to the payment networks indicated in the Documentation and subject to Your (i) current participation in the relevant payment network’s token system and (ii) active enrollments for those digital wallets and BIN ranges for which You intend to use the Capabilities, as authorized by the relevant payment network.

        1.2. In addition, You must use the Capabilities only in accordance with applicable Laws and the rules and requirements of the relevant payment network, including but not limited to the authorization from such network(s) to (i) provide Visa with data related to cardholder accounts for the purposes of providing the Capabilities and (ii) instruct Visa to initiate enrollment of relevant cardholder accounts in digital wallets, including but not limited to an appropriate written agreement covering such actions between You and the relevant digital wallet providers.

        1.3. Prior to any access and use of the Capabilities, You must facilitate access for Visa and register Visa as its registered third party agent under the relevant payment network rules, if applicable, as well as comply with any additional action items set forth in the Visa In-App Provisioning Implementation Guide.

        1.4. Your authorization is limited to the access and use of the Capabilities to enroll relevant cardholder accounts within the authorized Card Portfolios/BIN Ranges to enable requesting the encrypted payload used to provision network token from the relevant payment network for such cardholder accounts into the relevant digital wallets by calling the Visa In-App-Provisioning API.

        1.5. You may access and use the Capabilities only for card accounts that have undergone and passed know-your-customer verification (KYC) and, if applicable, with such partners that have undergone and passed OFAC screening checks.

        1.6. Visa may restrict the number of API calls You are permitted to make under the Agreement, based on PCI DSS documentation or other Visa limits, to the extent applicable.

        1.7. You acknowledge and agree that Your use of the Capabilities is partially contingent on the actions, authorizations and requirements of You and relevant third parties, such as the relevant payment network and the relevant digital wallets, including but not limited to aspects such as timeliness of API call responses and data accuracy. Visa does not have insight into or control over Your actions or third party actions, authorizations or requirements and disclaims any and all liability whatsoever. Similarly, Visa does not perform entitlement checks for non-Visa credentials, has no insight into or control over verifying eligibility of the card credentials in question for the respective pay wallet and/or the applicable rules of the relevant payment networks and compliance with such rules and Visa disclaims any and all liability whatsoever.

1.    If You are not a Visa Member, the following Visa Product Terms apply to You: 

        1.1. Your access and use of the Visa Universal Card Enrollment API and the Visa In-App-Provisioning API (jointly, the “Visa Product”) for non-Visa card credentials is limited to the payment networks indicated in the Documentation and to actions on behalf of and subject to written approval from the respective card issuer that it (i) is a current participant in the relevant payment network’s token system and (ii) has active enrollments for those digital wallets and BIN ranges for which You intend to use the Visa Product, as authorized by the relevant payment network. 

        1.2. You and the relevant issuer must use the Visa Product in accordance with the rules and requirements of the relevant payment network, including but not limited to the authorization from such network(s) to (i) provide Visa with data related to cardholder accounts for the purposes of providing the Visa Product and (ii) instruct Visa to initiate enrollment of issuer cardholder accounts in digital wallets, including but not limited to an appropriate written agreement covering such actions between the issuer and the relevant digital wallet providers. 

        1.3. Prior to any access and use of the Visa Product, You must have the issuer it is acting on behalf of facilitate access for Visa and register Visa as its registered third party agent under the relevant payment network rules, if applicable, as well as comply with any additional action items set forth in the Visa In-App Provisioning Implementation Guide. 

        1.4. Your authorization is limited to the access and use of the Visa Product on behalf of the issuer to enroll issuer cardholder accounts within the authorized Card Portfolios/BIN Ranges by requesting a universal card identifier through the Visa Universal Card Enrollment API, and/or to enable requesting the encrypted payload used to provision network token from the relevant payment network for such cardholder accounts into the relevant digital wallets by calling the Visa In-App-Provisioning API. 

        1.5. You may access and use the Visa Product only for issuer accounts that have undergone and passed know-your-customer verification (KYC) and, if applicable, with such issuer partners that have undergone and passed OFAC screening checks. 

        1.6. You are obligated to comply with all applicable provisions of the issuer’s token agreement, if any, with the relevant payment network and the network rules, which, for certain use cases, may include compliance with PCI DSS standards. 

        1.7. Visa may restrict the number of API calls You are permitted to make under the Agreement, based on PCI DSS documentation or other Visa limits, to the extent applicable. 

        1.8 You acknowledge and agree that its use of the Visa Product is partially contingent on the actions, authorizations and requirements of relevant third parties, such as the issuer, the relevant payment network and the relevant digital wallets, including but not limited to aspects such as timeliness of API call responses and data accuracy. Visa does not have insight into or control over such third party actions, authorizations or requirements and disclaims any and all liability whatsoever. Similarly, Visa does not perform entitlement checks for non-Visa credentials, has no insight into or control over verifying eligibility of the card credentials in question for the respective pay wallet and/or the applicable rules of the relevant payment networks and compliance with such rules and Visa disclaims any and all liability whatsoever.