Payment Processing & PCI Compliance

The contract requires the implementation and ongoing maintenance of a secure credit card processing system that fully complies with PCI-DSS standards, incorporating tokenization, end-to-end encryption, and advanced fraud detection mechanisms to safeguard cardholder data. The solution must support automated transaction confirmations and generate printable, compliant receipts for customers, ensuring seamless and secure transaction experiences. All technical components must be robust, scalable, and continuously monitored to meet evolving security requirements and maintain regulatory compliance. The contract is classified as a subcontract under NAICS code 522294, issued by the Kentucky Horse Park under the agency name Kentucky, with a response deadline of September 14, 2026. Performance is expected to occur at an unspecified location designated as "Other," with no set-aside provisions or specific agency office details provided. Interested parties must submit proposals through the official Kentucky VSS portal prior to the deadline, and the system must remain operational and compliant throughout the contract term without interruption or compromise to data integrity.