About Intersolve

Intersolve operates a mission critical real time network that enables connection of various services and partners to retailers.

Organization

Intersolve is a service provider specialising in gift cards, loyalty programmes, e-vouchers, e-wallets and payments. Since its incorporation in 1996, Intersolve has developed from a technology supplier into a leading service provider in these areas. To this end, Intersolve deploys its in-house developed SaaS based transaction platform.

Intersolve manages a company critical real-time network in which various services and partners can be linked to retailers.

To further assist its customers, Intersolve has obtained a European Electronic Money licence from De Nederlandsche Bank. This licence allows Intersolve to carry out financial settlements and manage the funds with these services.

Its headquarters is located in the Netherlands, with the international sales office based in England.

DNB licence

To provide a total package to our customers, Intersolve has obtained a licence as Electronic Money Institution from De Nederlandsche Bank. This licence allows Intersolve to carry out the financial settlements and manage the funds associated with these services.

More information about Intersolve’s financial services on the website of De Nederlandsche Bank can be found here.

Inspire

We inspire our customers by offering white label solutions for gift cards, loyalty programmes and e-wallets via our transaction platform, EMI licence and payment applications.

Together with our customers, we are defining the rapidly changing world of loyalty and payments.

450

brands

130000

stores
online & offline

160

integration partners

Customers

Using standard system modules, we create a unique solution for each customer where the flexibility of our platform and our extensive partner network are put to excellent use.

Our customer base is international and very varied: large national and international retailers in all sectors, fintech startups, municipalities and other government bodies, healthcare, premium brands, entertainment, lotteries, distributors.

Partners

We are working closely together with partners who offer added value to our service.

Our partner network includes technical partners such as suppliers of cash registers and Point of Sale, payment terminal suppliers, Payment Service Providers, webshop developers and system integrators.

Suppliers of digital content, gift card distributors and the numerous retailers strengthen our network by accepting or distributing each other’s products.

Internationally, Intersolve have a network of partners and distributors.

Privacy

Intersolve handles the use of personal data to the highest standards. Our privacy statement contains information on which data we collect if you use our website and/or use our services and products. We also inform you as to why we collect his data and how we can consequently improve the user experience.

Responsible disclosure policy

At Intersolve, we consider the security of our systems a top priority. But no matter how much effort we put into system security, there can still be vulnerabilities present.

If you discover a vulnerability, we would like to know about it so we can take steps to address it as quickly as possible. We would like to ask you to help us better protect our clients and our systems.

Please do the following: E-mail your contactdetails to it-operations@intersolve.nl
We will sent a link to a secured environment where the finding can be shared.
Do not take advantage of the vulnerability or problem you have discovered, for example by downloading more data than necessary to demonstrate the vulnerability or deleting or modifying other people’s data. Do not reveal the problem to others until it has been resolved.
Do not use attacks on physical security, social engineering, distributed denial of service, spam or applications of third parties, and
Do provide sufficient information to reproduce the problem, so we will be able to resolve it as quickly as possible.

Usually, the IP address or the URL of the affected system and a description of the vulnerability will be sufficient, but complex vulnerabilities may require further explanation. What we promise: we will respond to your report within 5 business days with our evaluation of the report and an expected resolution date.
If you have followed the instructions above, we will not take any legal action against you in regard to the report We will handle your report with strict confidentiality, and not pass on your personal details to third parties without your permission.
We will keep you informed of the progress towards resolving the problem.
In the public information concerning the problem reported, we will give your name as the discoverer of the problem (unless you desire otherwise), and as a token of our gratitude for your assistance, we offer a reward for every report of a security problem that was not yet known to us. The amount of the reward will be determined based on the severity of the leak and the quality of the report. We strive to resolve all problems as quickly as possible.

Source: https://www.responsibledisclosure.nl/en

Information security statement

Intersolve is committed to being a responsible partner where Integrity, commitment, quality and cooperation are the core values in the conduct of all its employees. Inextricably linked to this is that the availability, integrity and confidentiality of data is guaranteed, where the provision of information is both secure and assured.
For more information please refer to our Security Information Policy statement.

Intersolve is a leading service provider that helps organisations to grow and focus on their core business by providing gift card programs, loyalty programs and electronic payment applications in a demanding and changing market. We do this using our own transaction platform technology, including connections to most Epos and e-commerce (r)etailers, for a wide variety of solutions.

In addition, our European Electronic Money Institution (EGI) license De Nederlandsche Bank (the Dutch National Bank), allows us to provide both the EMI electronic money management service and/or the technical platform as a service.

Information security is a significant consideration in our way of working, not only for our own business operations, but especially for our customers, partners and relations. It is crucial that we can share data safely and that the security process is closely monitored throughout the service, so that any risks are minimised.

In this statement, we provide an overview of Intersolve’s information security policy.

Intersolve is committed to being a responsible partner where Integrity, commitment, quality, and cooperation are the core values in the conduct of all its employees. Inextricably linked to this is that the availability, integrity, and confidentiality of data is guaranteed, where the provision of information is both secure and assured.

Intersolve recognises that there are aspects of their information security business processes that need to be monitored and controlled.

Employees assess the importance that the different parts of the information provision have, the risks that Intersolve may have and which of these risks are unacceptably high.

Intersolve management ensures that the policy is regularly reviewed or adapted to organisational changes and technological developments. This is to support customers, partners, companies and the internal organisation and to continue, and where possible, improve the aspects of our information.

Objective

Information provision plays a crucial role in all Intersolve business processes. Intersolve therefore needs to handle information in a responsible manner, which means that the quality of information provision must be controlled.

An organisation-wide approach to information security is therefore fundamental.

In order to prevent information and information systems from being secured too heavily or too weakly, risk management is an important part of this assessment process for taking appropriate security measures.

Information security as a pillar for privacy protection

Information security has been high on Intersolve’s agenda for many years and has been formalised, as of 1 January 2017, by obtaining an ISAE3402 Assurance statement (issued for 2016). This Assurance statement has been reissued by the external auditor every year since then.

The IT environment is a mandatory part of the ISAE3402 statement and therefore information security is an integral part of this.
Intersolve aligns its business operations with the ISO 27001/ISO 27002 standards and the relevant laws and regulations including the General Data Protection Regulations (GDPR).

Every Intersolve employee has the responsibility to comply with the information security policy and to follow the measures taken in response to this policy. The Security Officer is the point of contact for incidents or other aspects relating to information security. All employees are actively notified regarding the information security policy and are expected to take note of the conditions. All employees recognise the importance of information security and applies this within their own areas of work. The “10 Golden Security Rules” are the starting point.
Knowledge and expertise are essential for information security and therefore all employees are periodically trained in awareness for information security and the appropriate procedures.