[rrf]

Yeah, the thing is that the audit visit happened in March. We received verbal confirmation of compliance. The only thing left is formal report. QSA delayed it till May and in early May sent us a notice of changes we had to implement before compliance is confirmed.

Three months were lost on that! We had to re-allocate the team back to X-Payments project and implement changes urgently. It took us one week to match the additional requirements.

I strongly believe that preliminary statement of compliance and late notice of changes required were very unprofessional of QSA. I deeply disappointed by the QSA company. That delay has undermined our ability to deliver otherwise ready X-Payments.

To all customers awaiting for X-Payments release: I apologize on behalf on QSA. I doubt they would every apologize themselves, though.

Our CTO (the one who manages X-Payments and our part of audit responsibilities) is constantly bumping the QSA on phone.
The latest news is that all checks are done and they are "doing the paperwork". They have assured us the software is all right and that they will issue the final compliance report on Monday. We will put a scan of it here as soon as it's done.

Once again, my apologies. I was very naive in thinking that 6 months in enough to pick QSA and pass the audit. We've made a choice of QSA in winter, 2009.