WIC EBT User Group Meeting Retailer Certifications Crowne Plaza Hotel Alexandria, VA July 23, 2014 (c) 2014 Retailer Owned Research Company - Company Confidential

Background RORC is a POS software provider based in Fort Worth, TX –Primary customers are independent grocers. –Involved with e-WIC since The company piloted offline with Texas, Wyoming and New Mexico and currently has sites in Texas and Wyoming. In 2009, we certified for Online with CDP and JPM. Recently certified in VA with Xerox. Have had two different products certified since –viPOS –RORCv6 (c) 2014 Retailer Owned Research Company - Company Confidential

Success Keys #1 You are not alone. #2 You do not need to know everything. #3 Know and Notify the Players in Advance. #4 Know the data flow. (c) 2014 Retailer Owned Research Company - Company Confidential

Success Keys You are not alone! –In both Online and Offline, several agencies have already “blazed the trails” and paved the road. Follow their lead. Avoid deviating from what they deployed and tested. –Limits the chance of the vendor issues. –Allows you more time to focus on the back-end and clinic systems. You do not need to know everything. –Plagiarize! It’s the greatest form of flattery in technology! (c) 2014 Retailer Owned Research Company - Company Confidential

Success Keys Know and Notify the Players in Advance –Vendors (Retailers) Who supports their POS? –POS Providers Code Consistency / Versioning –Dealers Did they write any of the WIC logic? –If yes, they become yet another player Could be a wholesaler (c) 2014 Retailer Owned Research Company - Company Confidential

Success Keys Know the Data Flow –Who/what touches the prescription data? Offline Potential Pieces & Parts –Pin Pad (Mfg/OS/Software) –Payment Gateway (e.g. Connected Payments) –POS Software –Corporate Vendor Site –Agency Online Potential Pieces & Parts (c) 2014 Retailer Owned Research Company - Company Confidential

Success Keys Know the Data Flow –Who/what touches the prescription data? Offline Potential Pieces & Parts Online Potential Pieces & Parts –Pin Pad (Mfg/OS/Software) –Payment Gateway (e.g. Connected Payments) –POS Software –Aquirer (e.g. First Data) –Processor (e.g. JPM, Xerox, CDP) (c) 2014 Retailer Owned Research Company - Company Confidential

Online Considerations Is an Acquirer Utilized? –If the POS has certified to one processor, then the path used (POS -> Acquirer -> Processor) has effectively been certified to all processors. Should not require a subsequent Level 1 or 2 If POS communicates directly with the Processor, then… –The POS will need to certify with each processor. Once certified – Should be good to go anywhere. States have used their processor to perform “mini- certifications.” (e.g. VA) (c) 2014 Retailer Owned Research Company - Company Confidential

Offline Considerations Pin Pad Make, Model, Operating System, and Firmware must be certified to POS or Payment Gateway. Is a Payment Gateway Utilized? –POS certifies to the Gateway –Once a Pin Pad is certified with the Gateway, it should be OK for use with any POS that utilizes the Gateway. Stick to an established communication method for sending/receiving files –FTP, SFTP, HTTPS (c) 2014 Retailer Owned Research Company - Company Confidential

Simplify by… Using the keys and knowing the pieces and parts of your chosen solution. (c) 2014 Retailer Owned Research Company - Company Confidential

Questions? (c) 2014 Retailer Owned Research Company - Company Confidential