Experian CrossCore Identity Services for Card Verification
Experian’s Card Verification Services provide validation and verification services against UK bank cards to the corresponding bank account details. The service offerings include Card Validation, Card Holder Verification and AVS/CVV Verification.
Features
- Available via Experian’s CrossCore Platform/Application Programming Interface (API).
- Available as real time integrated, user interface or batch
- Confirms the validity of card details in real time.
- Establishes definitive link between consumers and their current accounts.
- Uses the person and address data provided by banks directly
- Displays card validation results including errors and warnings.
- Returns scores based on closeness of fuzzy matching.
- Clients only charged for verification where validation succeeds.
- Search ‘CrossCore’ in G-Cloud to view other backing applications available.
Benefits
- Increase payment success rates.
- Avoid issues resulting from failed payments and fraud losses
- Improve efficiency of payment submissions with Straight-Through-Processing.
- Reduce manual intervention (i.e. data correction and re-initiated payments).
- Reduce paper checks.
- Flexible configuration to meet different risk appetites.
- Supports compliance with Bacs requirements, legislation and best practice.
- More confidence when making Faster Payments
- Risk-averse approach to data management
Pricing
£0.04 to £0.59 a unit
- Free trial available
Service documents
Request an accessible format
Framework
G-Cloud 14
Service ID
1 1 9 0 8 1 0 7 5 7 8 2 2 8 1
Contact
Experian
Experian Public Sector
Telephone: +44 (0) 115 941 0888
Email: digitalmarketplace@experian.com
Service scope
- Software add-on or extension
- Yes, but can also be used as a standalone service
- What software services is the service an extension to
-
Experian Identity Hub
Experian CrossCore
Experian Transact - Cloud deployment model
- Private cloud
- Service constraints
-
Planned maintenance windows, which are:
-Each Sunday of the month from 21:30 to 23:59
- Second Sunday of the month from 18:30 to 23:59
These are rarely used. - System requirements
- Experian issued access certificates
User support
- Email or online ticketing support
- Email or online ticketing
- Support response times
- To manage client services effectively and consistently, Experian provides Major Incident Management, Incident Management, Service Request Management, Problem Management and Operational Change Management with standardised processes. Incidents and Major Incidents are given Priorities, with higher Priorities receiving faster responses and restoration times. Tracking these values and performing internal data analysis enables Experian to continually improve these services and reduce impact to all clients.
- User can manage status and priority of support tickets
- No
- Phone support
- Yes
- Phone support availability
- 9 to 5 (UK time), Monday to Friday
- Web chat support
- No
- Onsite support
- Yes, at extra cost
- Support levels
- Standard support is weekdays 09:00 - 17:00 UK time, excluding public holidays, but enhanced packages can offer 24/7 Major Incident Management and Availability Management.
- Support available to third parties
- Yes
Onboarding and offboarding
- Getting started
-
- Technical support during service intergration
- User documentation
- On site training available at a cost
- User webinars - Service documentation
- Yes
- Documentation formats
- HTML
- End-of-contract data extraction
- The Bank Wizard Absolute service does not store any client data, during or after a contract expiry.
- End-of-contract process
- Contracts are tailored to client specific requirements including end of contract terms,
Using the service
- Web browser interface
- Yes
- Supported browsers
-
- Microsoft Edge
- Firefox
- Chrome
- Application to install
- No
- Designed for use on mobile devices
- No
- Service interface
- No
- User support accessibility
- None or don’t know
- API
- Yes
- What users can and can't do using the API
- The interface is a SOAP web service interface that users can intergrate against as many of the available services they require.
- API documentation
- Yes
- API documentation formats
- HTML
- API sandbox or test environment
- Yes
- Customisation available
- No
Scaling
- Independence of resources
-
Regular monitoring of usage and performance.
System is scalable when appropriate,
Analytics
- Service usage metrics
- Yes
- Metrics types
- Management information is available on request.
- Reporting types
- Reports on request
Resellers
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Other security clearance
- Government security clearance
- None
Asset protection
- Knowledge of data storage and processing locations
- Yes
- Data storage and processing locations
- United Kingdom
- User control over data storage and processing locations
- No
- Datacentre security standards
- Complies with a recognised standard (for example CSA CCM version 3.0)
- Penetration testing frequency
- At least once a year
- Penetration testing approach
- Another external penetration testing organisation
- Protecting data at rest
- Physical access control, complying with another standard
- Data sanitisation process
- No
- Equipment disposal approach
- Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001
Data importing and exporting
- Data export approach
- No data is exported from the service. Dependant on contract user management information is available on request.
- Data export formats
- CSV
- Data import formats
- Other
- Other data import formats
- N/A
Data-in-transit protection
- Data protection between buyer and supplier networks
-
- TLS (version 1.2 or above)
- IPsec or TLS VPN gateway
- Data protection within supplier network
- Other
- Other protection within supplier network
-
Secure data centre with limited access
Experian authentication protocol to access all servers
Availability and resilience
- Guaranteed availability
- Availability SLAs will be defined case-by-case. The actual Availability of Bank Wizard in FY24 across all UK&I clients was 99.995%.
- Approach to resilience
- Experian data centre complies with the Experian Global Security policy which is available on request.
- Outage reporting
- Email alerts
Identity and authentication
- User authentication needed
- Yes
- User authentication
-
- Public key authentication (including by TLS client certificate)
- Username or password
- Access restrictions in management interfaces and support channels
- Yes. Available on request
- Access restriction testing frequency
- At least once a year
- Management access authentication
-
- Public key authentication (including by TLS client certificate)
- Username or password
Audit information for users
- Access to user activity audit information
- Users contact the support team to get audit information
- How long user audit data is stored for
- Between 1 month and 6 months
- Access to supplier activity audit information
- Users contact the support team to get audit information
- How long supplier audit data is stored for
- At least 12 months
- How long system logs are stored for
- Less than 1 month
Standards and certifications
- ISO/IEC 27001 certification
- Yes
- Who accredited the ISO/IEC 27001
- DNV GL Business Assurance Limited
- ISO/IEC 27001 accreditation date
- 20/12/2016
- What the ISO/IEC 27001 doesn’t cover
- The following is covered by the scope of the certificate; the delivery and support of Experian IT infrastructure, operations, architecture and associated compliance and facilities management undertaken within the UK data centres.
- ISO 28000:2007 certification
- No
- CSA STAR certification
- No
- PCI certification
- Yes
- Who accredited the PCI DSS certification
- Trustwave
- PCI DSS accreditation date
- 28/10/2016
- What the PCI DSS doesn’t cover
- Only the card services are covered by PCI DSS
- Cyber essentials
- Yes
- Cyber essentials plus
- No
- Other security certifications
- No
Security governance
- Named board-level person responsible for service security
- Yes
- Security governance certified
- Yes
- Security governance standards
- Other
- Other security governance standards
- Yes, assured by independent validation of assertion
- Information security policies and processes
- Available on request
Operational security
- Configuration and change management standard
- Supplier-defined controls
- Configuration and change management approach
- Experian have a change management policy which is underpinned by processes and procedures based on ITIL best practice. This is a mature process. We use a service management tool that integrates change management, incident management, problem management, configuration management and knowledge management. Our change management policy, process and procedures are regularly audited by independent auditors. Formal risk analysis is employed using an approved information risk analysis methodology as a part of the project analysis phase for developments/changes. Security requirements for the system are identified and continue to be considered throughout the life of the product.
- Vulnerability management type
- Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
- Vulnerability management approach
- Servers and PCs are built to a documented secure standard, which includes anti-virus and malware defences. Information assets have a defined patching schedule, determined by the system's criticality and the level of threat the patch is mitigating. Experian actively monitors the threat environment and checks the effectiveness of security controls by reviewing both free and paid for sources of threat information, including; public information, major vendor feeds and also receiving information from specialist closed group mailing lists. The overall process is also plugged into an automated patch and fix strategy, underpinned with a technology infrastructure to deliver corrective updates.
- Protective monitoring type
- Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
- Protective monitoring approach
- Monitoring processes and tools are in place to manage alarms generated by security related alerts and these are fed into the incident management process. Experian has a formally documented risk based incident management process to respond to security violations, unusual or suspicious events and incidents. In the event an incident occurs a team of experts from all relevant areas of Experian are gathered to form an incident response team, who manage activities until resolution. The incident response team are available 24/7 to resolve any incident. Out of core hours the dedicated incident hotline is routed to the command centre.
- Incident management type
- Supplier-defined controls
- Incident management approach
- The incident management process incorporates a number of participants and contributors, including: Global Security Office - who facilitate and coordinate activities under the business security coordinator's guidance; Business Security Coordinator - a representative of the impacted business area, responsible for coordinating resolution activities; Incident Response Team (IRT) - IRT is made up of a membership that are empowered to make key decisions surrounding the actions to be taken to reduce impact, control actions, and impose corrective activities. A client report would be created, including: high level overview; facts; overview of events; actions taken.
Secure development
- Approach to secure software development best practice
- Conforms to a recognised standard, but self-assessed
Public sector networks
- Connection to public sector networks
- No
Social Value
- Social Value
-
Social Value
- Fighting climate change
- Covid-19 recovery
- Tackling economic inequality
- Equal opportunity
- Wellbeing
Fighting climate change
As an information services business, we have a relatively small environmental footprint compared to
many other industries. The biggest impact from our controlled operations relates to greenhouse gas
emissions from energy used to power, heat and cool our buildings and data centres, and from
business travel (pre-Covid-19). Every year we reduce our carbon footprint, yet we want to take it
further and accelerate our response to the climate change challenge
We’ve started our journey to becoming carbon neutral. Our global Corporate Responsibility team is
engaging with various teams across the organisation to discuss carbon reduction initiatives and get a
good understanding of what’s needed to achieve our target by 2030. This will allow us to develop a
detailed Carbon Neutral Plan, including initiatives, targets, costings and timeframes, for agreement by
end of November.Covid-19 recovery
We have focused on supporting our people, clients and consumers throughout the COVID-19
pandemic, using data as a force for good, helping to navigate the crisis.
We quickly transitioned the majority of our employees to work from home. We introduced flexible
working and increased collaboration tools and support networks, such as mindfulness programmes, to
help our people navigate the challenges of home working. Webinars and senior leadership vlogs
helped us connect. Our employees around the world have shown incredible resilience, commitment
and flexibility during the COVID-19 pandemic and this is reflected in our results.
We maintained operational capacity throughout the pandemic, we have kept the health and safety of
our employees as the primary consideration of our pandemic response. Most of our employees are
still working remotely. An effort is underway to determine our strategy for work arrangements in the
future. We expect this to be guided by a consistent global framework and principles, with local
flexibility around the approach to account for legal and cultural nuances.
We continue to take industry-leading positions designed to protect and educate consumers, as well as
to promote the responsible reporting of data, with appropriate safeguards, in order to help the
economic recovery from the crisis.Tackling economic inequality
We help millions of people and businesses around the world get fair and affordable access to
essential services and we work hard to make sure our business has a positive impact on the world,
never a negative one. Our responsibilities – to people, society and the environment – guide
everything we do.
By collecting and analysing data, we help people and businesses build up a financial track record and
gain access to essential, everyday services that have previously been out of reach. We’re also
pioneering the use of alternative data, such as rental or utility payments, to help people with limited
financial history build up and strengthen their credit profiles.
Our people’s talents and our business resources go beyond the workplace. We encourage our people
to use their skills to benefit society: many volunteer their time and skills to support their communities
and improve financial education.
We also help our people support local groups and charities by matching funding and giving donations.
At Experian we realise relationships with all our stakeholders are key to our success and sustainable
business growth. We also recognise that we have an impact on and responsibilities for the society we
trade within. We consider these responsibilities carefully and aim to have a positive impact wherever
we can.
Experian has developed a set of CR principles, endorsed by our Management Committee, to guide
and enhance the way we work with our customers (both clients and individual consumers),
colleagues, suppliers and communities. As a company, we are committed to working by these
principles and will regularly benchmark and assess our progress in each area and report through our
parent company.
Please see a copy of Experian’s supply chain principles on the following link:
https://www.experian.com/corporate/code-of-business-conductEqual opportunity
Each and every one of our people deserves to feel valued, represented, and that they belong at
Experian. We have over 30 employee-led groups globally that play a huge part in creating inclusion
and advocating on behalf of our people. These groups are not only a safe space for anyone who
needs it, but also drive change and build awareness across Experian, raising the standard for
everyone.
Experian are registered as ‘Disability Confident’ and are currently undertaking an assessment with the
Business Disability Forum. Our top 3 areas for focus this year is in learning & development,
communications and technology. Our ambition is to remove barriers for all employees with disabilities
at Experian.
Experian recognises that equal opportunities are fundamental to the Company’s success and is
committed to encouraging a working climate that respects and promotes equality. There is a
publicised Equality, Diversity and Inclusion policy which sets out the Company and employee
responsibilities for ensuring equality and embedding a culture and working environment that actively
safeguards against discrimination and unfavourable treatment of people in all aspects of employment
including recruitment, promotion and training opportunities. There is also a Dignity at Work policy
which sets out Experian’s commitment to creating a work environment free of harassment and
bullying, ensuring everyone is treated with dignity and respect. All of the policies are compliant with
the requirements of the Equality Act 2010 and the relevant clauses of the HRA.
More information can be found in Experian’s Diversity, Equity and Inclusion Report here:
https://www.experianplc.com/investors/reports/Wellbeing
Since the pandemic we have increased our focus on the health and well-being of our teams across
the world. We quickly implemented regular pulse surveys so we could respond rapidly and ensure the
right support was available. We emphasised mental health, reflecting the challenges people faced
while working remotely. A response to the statement ‘I am feeling physically and mentally well’ was
75% favourable on average across five pulse surveys we ran during the year. We put in place a range
of initiatives to support our teams, for example #ReachOut, which gave all employees access to
resources to support their physical and mental health whenever they needed it.
Experian has an important role to play in helping everyone through these uncertain times. We
recognise the significance of the role we play in the UK economy and we are committed to ensuring
that our data services are being used to help, protecting vulnerable people, businesses and
communities.
At Experian, we work to create a better tomorrow for consumers, for businesses, and for our
communities. This ambition underpins our plans for our people – to ensure we have the best people,
working in a high-performing and inclusive environment where they feel they can do their best work in
support of our vision.
We help millions of people gain access to essential, everyday services by helping them make the
most of their data by Improving financial identities and access to credit, providing credit and financial
education and tackling unmanageable debt among vulnerable groups. We define our responsibility as
playing an active part in social and economic regeneration in our communities, at a local, national and
global level, and we have many motivations for this engagement.
Pricing
- Price
- £0.04 to £0.59 a unit
- Discount for educational organisations
- No
- Free trial available
- Yes
- Description of free trial
-
A screened web interface is available for trial services.
Typically a trial service can be provided for 30 days.