TouchNet is a Global Payments company
TouchNet is part of Global Payments Inc. (NYSE: GPN), a leading payments technology company delivering innovative software and services to customers globally. TouchNet and its customers enjoy the privacy, security, and compliance benefits of being part of a global, Fortune 500® company with 27,000 team members. TouchNet takes advantage of the technology, expertise, and scale of Global Payments to keep our product development and support on the cutting edge.
TouchNet is Committed to Privacy, Security, and Compliance
TouchNet is a longstanding leader in developing campuswide payment and ID management solutions and services for higher education institutions that are private, secure, and compliant by design. We stay up to date on the constant evolution of privacy, security, compliance, and fraud, and scan the horizon to identify future challenges and opportunities. With this knowledge and experience, we develop and support products that not only meet but surpass industry standards to stay ahead of the curve.
TouchNet Develops, Tests, and Trains for Privacy, Security, and Compliance
TouchNet products are developed by following security design principles like least privilege, and supports products that use point to point encryption (P2PE).
Our solutions regularly undergo penetration tests by both internal and external parties, scanning for vulnerabilities, and code review.
Staff are required to complete regular training on the latest security measures and cybersecurity tactics, including phishing and other social engineering attacks.
TouchNet Achieves Certifications and Follows Standards
TouchNet is a Third Party Servicer under the Department of Education regulations, and complies with applicable Department of Education regulations, including the Title IV Cash Management regulations.
We undergo the Payment Card Industry (PCI) validation process to maintain our status as a Level 1 Service Provider, and are compliant with the PCI Data Security Standards (PCI-DSS) and the PCI Software Security Framework (PCI-SSF). Our certification is available on the PCI website.
We have achieved Level 2 certification security requirements of the Texas Risk and Authorization Management Program (TX-RAMP). Our certification is available on the TX-RAMP website.
Our company meets Systems and Organization Controls (SOC) standards. We are audited by an independent firm and have achieved SOC 2 Type II and SOC 1 Type II certifications.
We securely process ACH payments in accordance with Nacha regulations. Our technology and employees work to prevent and mitigate fraud and other risks.
TouchNet protects the privacy of student education records and is compliant with the Family Educational Rights and Privacy Act (FERPA), including not marketing or selling personally identifiable information.
Industry accessibility standards are used to guide TouchNet software development, including the World Wide Web Consortium (W3C) Web Content Accessibility Guidelines (WCAG 2.2 AA). Visit our Accessibility webpage for more information.
TouchNet manages personally identifiable information (PII) in accordance with various regulations. Visit the TouchNet Privacy Notice to learn more about how we collect, use, disclose, and dispose of personally identifiable information.
Resources
Guarding Higher Ed's Data Goldmine
Privacy, security, and compliance have a complicated relationship made more complex by new technology and new risks. Download this ebook to learn how to manage privacy, security, and compliance and build a foundation for combating fraud and other risks.
Back to the Basics of Payment Compliance
Payments compliance on campus is complex. Managing the complexity and simplifying it starts with understanding the basic terms, concepts, and governing bodies involved in payments compliance.
Lakehead University improves PCI compliance with PCI Services
Lakehead University achieved and maintains PCI compliance with TouchNet’s payments processing compliance solution.