ATPCO Ticket Exchange

Sales Data Exchange System Specification and Implementation Guide Sections 1–6: General Information
Section 4.5 Sales Data Test Files from ATPCO
Any test file sent to any recipient by ATPCO that contains actual live ticketing data—and therefore is very
likely to contain live credit card numbers—will be masked by ATPCO prior to any manual processing. All
files containing credit card data must undergo a masking process before being processed in a test
environment by ATPCO. The specifications for masking the data can be found in Section 5.5. This is in
order to comply with global Payment Card Industry Data Security Standards (PCI DSS).
Test files containing production data (that is, including live credit card information) should always be sent
to ATPCO by FTP, and preferably by Secure Socket Layer File Transfer Protocol (SSL FTP, also known
as FTPS) or Secure Zip. The use of e-mail for the transmission of sales data to or from ATPCO is strictly
prohibited.
Further details on file transmission standards can be obtained on request from dnetops@atpco.net.
14 November 2007