Interviews and news

Subscriber Export Process -

Jun 1, 2022

 STAKEHOLDERS

 Internal

  • Payments/Product Team
  • CSM and Support

 External

  • Customer/Seller
  • New Vendor
  • Present Payment Processors(Cards only)

 OVERVIEW

If a customer churns, or decides to move their current subscriber to the New Vendor, we have to export their subscription data which we store within our system. We then transfer the token for the New Vendor. This process usually takes up to 10 weeks.

 RELIABILITY

Migrating active subscriber/subscription data from the system and handing over the existing tokens via our existing Payment Processors to the New Vendor. When the data has been migrated to the new vendor, the Seller is the one responsible for cancellation of subscriptions on the System in order to prevent any accidental refunds, and thus the possibility of customer complaints.

 Scope

  • Transferring active subscriber details to Seller.
  • Coordination with our current Payment Processor as well as the Seller's new Vendor to facilitate the migration of payment tokens.
  • Migrating only Credit Card tokens; due to regulations and compliance the company is unable to transfer PayPal tokens.

 PROCEDURE

The migration of subscriptions involves five stages:

  1. We will give active subscribers and subscriber lists, based on payment method type and Processors.
  2. The Processor will send the processor with a signed Letter of Interest (LOI) in the direction of the processor indicating the token export to the new vendor; The LOI will differ in Processor the Processor.
  3. will connect the Seller, New Vendor, and current payment processor to enable token movement.

2.a. Current Processor will verify the AOC and any other PCI related information of the New Vendor.

2.b. Following PCI verification process We will then provide the New Vendor with appropriate information regarding the next steps to be taken in the migration and timelines, which comprises (but isn't limited to):

  • Specific transport protocols for processors to send and receive token files. The process could also require the sharing of PGP keystrokes (Public).
  • Schema of the document that the vendor should expect as well as the appropriate mapping ( will include the key or attribute to the tokens).
  • Processor specific steps to encrypt and decrypt information.
  1. Tokens will be transferred to the New Vendor by the current Processor.
  2. Seller is able to deactivate their active subscription on system in order to prevent double billing.

 PREREQUISITES

  • New Vendor is PCI fully PCI.
  • In the event of receiving PAN numbers the additional security procedures as required by the Processor must be followed.
  • The Store where the subscription needs to be transferred.
  • Date of expected migration and the last payment.

 RESPONSIBILITIES

  1. :
  • Connect new Vendors and Sellers to Processors currently in use.
  • Provide Letter of Intent to each Processor.
  • Details of Shared Information for current subscribers, broken down by Processor.
  • Share the rebill reference, which will act as a identifier for mapping the tokens.
  1. Seller:
  • Give new Vendor contacts and furnish the appropriate documentation to demonstrate compliance.
  • Set Cancellation/Deactivation date on the subscriptions they wish to migrate off of the System.
  1. The Processor of the Present:
  • Connect to New Vendor and confirming compliance requirements.
  • Accept Letter of Intent, and prepare for releasing tokens New Vendor.
  • Coordinate the New Vendor for data transfer and also provide the schema for that New Vendor.
  1. New Vendor:
  • Connect to the current processor.
  • Furnish all compliance documents as asked by the processor in the process.
  • Receive schema information from Processor and rebill reference (Identifier) to .
  • Send sample data to every Processor in order to make sure that the data is properly mapped.

 Risks

  • Security of data: The new Vendor and Seller are responsible for all information security after it leaves the system; Seller is responsible for ensuring that customers' information is treated using appropriate security.
  • Rebills: Seller is required to ensure their subscriptions are deactivated before they are renewed by the New Vendor, to avoid the double bill.