Orange County NC Website
DocuSign Envelope ID: B4D9BEED- F7D1- 45E2- BDC4- 3857401A2AB3 <br />TRu T [E E <br />'*1' COMPREHENSIVE SEC9JnE TRUSTED <br />General <br />TrustCommerce Data Retention Policy <br />Version 1.2.1 <br />Public Use <br />This Data Retention Policy applies to all partners and clients for which TrustCommerce accepts and retains data. <br />• Data retention rules may be changed, without notice, in compliance with applicable regulatory and <br />industry requirements. <br />• TrustCommerce accepts, encrypts and retains data in full compliance with the Payment Card Industry <br />Data Security Standard (PCI DSS). <br />• TrustCommerce does not produce or retain any hardcopy forms of sensitive or cardholder data. Any <br />deviation from this policy would result in the destruction of hardcopy material using a crosscut <br />shredder. <br />10: Important: Each retention period described below, unless otherwise specified, will be <br />treated as a minimum retention period. <br />Data Retention Periods <br />Xata <br />Retention Periods <br />Minimum <br />Data <br />18 Months <br />PAN Data <br />Primary Account Numbers (PANS) <br />e.g., TC Vault, TC Batch, TC Payment Portal, TC Custom <br />18 Months <br />Reporting Data <br />Query API, and other standard searches and reports, <br />including full chain, reference data and custom fields <br />1 Month <br />Processing Data <br />e.g., Processor requests and responses, custom reports and <br />test data <br />12 Months <br />Signature Data <br />Signature capture related data <br />e.g., Transaction date /time, TranslD, CustlD, TC Citadel <br />Special Request <br />(BillinglD) data, operator, card holder name, action, status, <br />7 Years <br />Data <br />request, authorization and capture amount, masked primary <br />account number, and expiry <br />e.g., Card security codes (CSC): CVV2 /CVC2 /CID /CAV2, track <br />Never <br />No Store Data <br />data and PIN data <br />©2016 TrustCommerce Page 2 <br />