PCI PA-DSS Confirmation

Status of Compliance

As an authorized Payment Application Qualified Security Assessor (PA-QSA) the

usd AG
Frankfurter Str. 233, Building C1
63263 Neu-Isenburg
Germany

confirms that

Wincor Nixdorf International GmbH

Heinz-Nixdorf-Ring 1
33106 Paderborn
Germany

has successfully completed a PCI PA-DSS assessment for the following payment application:

ProCash/NDC 3.1/0x

The usd AG has performed an onsite assessment and a laboratory-environment testing for a full technical
validation of ProCash/NDC 3.1/0x.

Wincor Nixdorf International GmbH has fulfilled each requirement of the PCI PA-DSS in version 3.1 for the
validated software ProCash/NDC. No findings or open items were discovered. The validated software is in
full compliance with the PCI PA-DSS 3.1 standard.

usd AG is currently writing the Report of Validation (RoV). After that, the PCI Security Standards Council has
to review and approve the reporting documents for ProCash/NDC 3.1/0x. Only after a successful approval
ProCash/NDC 3.1/0x will be published as a formally validated payment application at the PCI Security
Standards Council’s website.

As Qualified Security Assessor (QSA), Payment Application Qualified Security Assessor (PA-QSA) and
Approved Scanning Vendor (ASV), accredited by the PCI Council, the usd AG is authorized to certify
companies through-out Europe according to PCI DSS and PCI PA-DSS.

Neu-Isenburg, 4/14/2016 Neu-Isenburg, 4/14/2016

Place, Date p.p. Ronny John Place, Date p.p. Christian Frei
Authorized Signatory Authorized Signatory
QSA, PA-QSA QSA, PA-QSA
usd AG usd AG

www.usd.de