What does EMVCo Card Type Approval cover?
EMVCo Card Type Approval is the verification by EMVCo that a specific card product has demonstrated sufficient conformance to the EMV Specifications. It applies to CCD or CPA card products and includes both functional and security evaluations. It does not cover card manufacturing and personalization site certification, or Contactless Level1 functional evaluation. The Card Type Approval Administrative Process documents describe the functional evaluation and provide an overview of the security evaluation. The Card Type Approval Administrative Process documents for CCD and CPA are available on the EMVCo website under the Card Type Approval section. The EMVCo Security Evaluation Process document provides more details on the security evaluation. This document is available on the EMVCo website under the Security Evaluation section.
Where can I find a list of EMVCo approved CCD and CPA products?
Depending on the respective card Product Providers agreement, CCD and CPA products approved by EMVCo will be listed on the EMVCo website. When selecting a card product, it is recommended to select a product approved against the most recent version of the EMVCo specifications and test cases. Please continue to check the EMVCo website for new approvals.
What is the cost of an EMVCo Card Type Approval?
Please refer to the CCD and CPA Card Type Approval Administrative Process documents which identify the fee structures for each approval type. The fee structure may be updated by EMVCo from time to time. Please remember that Laboratory testing fees are not included in the EMVCo Administrative Fees and are to be negotiated directly between the Laboratory and the Product Provider. Please contact the respective Laboratory to obtain further information.
How can I register as a Product Provider for EMVCo Card Type Approval?
The Card Type Approval Administrative process documents provide details on the registration process for Product Providers. These documents and applicable forms are available on the EMVCo website within the Card Type Approval Section.
How can I register as a Chip Provider for EMVCo Security Evaluation?
The Card Type Approval Administrative process documents provide details on the registration process for Chip Providers. These process documents are available on the EMVCo website under the Card Type Approval section. The applicable forms are available on the EMVCo website under the Security Evaluation section.
Why is a Dun & Bradstreet report required?
The Dun & Bradstreet report is a commercially available metric which measures all companies by the same criteria and the potential risk of doing business with those companies. EMVCo uses this report as part of its business review process. It is mandatory that all Chip Providers and Product Providers include a Dun & Bradstreet report as a part of the business review documentation sent to EMVCo. If a Dun & Bradstreet report is not available for a company from Dun & Bradstreet, a recognized national equivalent may be provided. All reports must be provided in English.
Can I modify the EMVCo Product Provider contract?
The EMVCo Product Provider Contract is a standard contract that Product Providers must sign without negotiating individual changes in order to ensure worldwide consistency and a level playing field for all Product Providers. In an effort to have the same contract with all Product Providers, EMVCo does not make modifications to the contract.
Where can I find a list of test laboratories accredited for CCD and CPA testing?
The lists of test laboratories accredited by EMVCo can be found on the EMVCo website within the Laboratories section of the Card Type Approval section. The laboratories accredited for security evaluations are listed within the laboratories section of the Security Evaluation section on the site.
If I submit my product for CPA Card Type Approval, must I also submit my product for CCD Card Type Approval?
CPA Card Type Approval already includes the part of CCD testing that is applicable to CPA. You do not have to submit a separate request for CCD, your request for CPA is sufficient. You do not have to submit a CCD Implementation Conformance Statement, your CPA Implementation Conformance Statement is sufficient. Please refer to the CPA Card Images Requirements document for additional information on testing and requirements for card images to provide to test Laboratory(ies).
Where can I find a list of qualified test tools for CCD and CPA?
A list of qualified test tools for CCD and CPA functional testing can be found on the EMVCo website within the Test Tools section of the Card Type Approval section. Please use the test tools that have been qualified by EMVCo for the most current versions of the test cases.
How do I establish my company as an accredited test laboratory for functional card testing?
Please refer to the EMVCo Laboratory Accreditation Requirements document located within the Laboratories section of the Card Type Approval section of the EMVCo website. This document provides information on EMVCo’s requirements for a test laboratory to become accredited by EMVCo for functional testing of CCD and CPA card products.
How do I establish myself as a qualified auditor?
Please refer to the EMVCo Auditor Qualification Requirements document located within the Auditors section of the Card Type Approval section of the EMVCo website. This document provides information on EMVCo’s requirements for an auditor to become qualified by EMVCo.
How do I obtain certification for my card personalization site?
Certification of manufacturing and personalization sites is outside the scope of EMVCo and is not part of the EMVCo Card Type Approval process.
How can I determine the number of cards required for functional and security testing?
The exact number of card samples required significantly depends on the options implemented and the card product capabilities (e.g. the number of Profile ID’s supported for a CPA card). When your Implementation Conformance Statement has been approved by EMVCo, the exact card quantity required for CCD, CPA, and Security evaluation will be communicated by the corresponding functional and security evaluation Laboratories.
The "CPA Level 1 & Level 2 Card Image Requirements" and "CCD Level 1 & Level 2 Card Image Requirements" available on the EMVCo website allow you to better understand the impact of each option on the actual number of samples required.
Please also note that in addition to the number of cards required for testing, a Laboratory may ask you to submit additional samples for back up purposes/requirements.
Can I sell my EMVCo approved product to an issuer or bank which will issue a card not branded with an EMVCo member branded card?
You may develop a CCD or CPA card based upon the EMV specifications and make it available to other issuers. Please ensure that you comply with the EMVCo Terms and Conditions as specified on the EMVCo website. Please note that you are not required to submit your CCD or CPA card for EMVCo Card Type Approval. However, you are not allowed to claim your product is CCD or CPA compliant unless it has been approved by EMVCo.
Please keep in mind that EMVCo will not take into account any proprietary usages when designing enhancements to the EMV specifications.
How can I obtain the EMV CCD or CPA Test Cases documentation for testing CCD or CPA card products?
Please note EMVCo’s policy is that the CCD and CPA Test Cases documentation are not publicly available. They are only made available to EMVCo test laboratories and tool suppliers on request.
When does EMVCo plan to begin testing contactless card products based on the EMV Contactless specifications?
At this time, EMVCo has not defined its plans for testing contactless card products. Please continue to check the EMVCo website for updates.