Common use of PCI DSS audit Clause in Contracts

PCI DSS audit. If PayPal so requests, you agree that a Qualified Security Assessor may conduct a security audit of your systems, controls and facilities and issue a report to PayPal and the Associations. You agree to cooperate fully in the conduct of this audit, and to provide any information and access to your systems required by the auditor for the performance of the audit. You also agree to bear the reasonable expenses of this audit. If you fail to initiate such an audit after PayPal requests you to do so, you authorise PayPal to take such action at the Merchant’s expense, or PayPal may immediately suspend your use of your Product. You will receive a copy of the audit report, and PayPal must also receive a copy and provide a copy to any Acquiring Institution or Card Association that requests a copy. Schedule 2 Terms of use of Fraud Protection Tools (“Fraud Tools”) 1. How the Fraud Tools work The Fraud Tools are made available to you as fraudulent transaction management tools to help you screen potentially fraudulent transactions based on the settings you adopt in the Fraud Tools. The tools allow you to set filter rules, i.e. to instruct us about which transactions the tool shall decline on your behalf based on abstract criteria. We may provide suggestions or recommendations regarding what filters and settings in the Fraud Tool to use that may be appropriate for your business. These suggestions take into account your past transaction history. It is your responsibility to set the filter rules. Please note: If you set these filter rules too restrictively, you might lose sales volume. We advise you to monitor your filter rules and settings on an ongoing basis.