Data Transfers must be initiated by affiliate partners and authorized by either the affiliate's primary contact (or another authorizer designated by the primary contact).
If you are a merchant, please have your merchant service provider fill out this form.
There are three types of Data Transfers:
Data Imports:
- We can import customer card data from third parties into the Merchant's Customer Vault. Note, we do not audit/filter said file and it is the responsibility of the Merchant and or Data Holder to provide us with a complete file including only the records they wish to have imported.
- Data we receive should be encrypted using our public PGP key (https://secure.nmi.com/merchants/Import-PGP.asc)
Data Exports:
- The Receiving Entity must be Level 1 PCI DSS Compliant with scope to store cardholder information, please provide a copy of their Attestation of Compliance (AoC).
- We can export Customer Vault Data, and Recurring Subscription Data to external parties.
- We will need the Receiving Entity's PGP key to encrypt the data we export.
Data Transfers (NMI to NMI):
- We are able to transfer records from Gateway to Gateway.
- Only Card Holder Data is moved, and imported to the Customer Vault.