On-Line Technologies, Inc. engaged Trustwave, operating under TrustWave Holdings,

Inc. (“Trustwave") to conduct a third party security assessment and determine whether

On-Line Technologies, Inc. has satisfactorily met the Payment Card Industry Data

Security Standard (PCI) and other major payment card association security requirements

related to the protection of cardholder data. Specifically, the assessment covers the PCI

requirements which are comprised of VISA’s Cardholder Information Security Program

(CISP) and MasterCard’s Site Data Protection (SDP) program, as well as Discover's

(DISC) and American Express’s Data Security Operating Policies. Trustwave is an

authorized third party assessor for all the major payment card associations.