Launching a PxM program
With Powered By Marqeta configuration, you and Marqeta share responsibilities throughout the lifetime of your card program. The table below lists the primary tasks related to launching a Powered By card program.
During your integration with Marqeta, you or a third party need(s) to stand-up and build infrastructure to process notifications and interactions with the Marqeta API. The minimum requirements for an integration with Marqeta are outlined below.
- A webhook endpoint that receives and parses all events and responds with a
200response within five seconds of acknowledging an event receipt. Data sent to the endpoint supports direct reconciliation and ledger management. - A SSH File Transfer Protocol (SFTP) server that can be accessed with the Marqeta SSH key, which allows Marqeta to place an encrypted settlement file on the server. You must provide a GNU Privacy Guard (GPG) key to complete reconciliation. Settlement files are sent to the server on a daily basis.
- A platform that manages your card program through the Marqeta APIs, such as card products, velocity controls, and Commando Mode (if applicable).
- If your program includes Just-in-Time (JIT) Funding, a gateway endpoint that receives Gateway JIT requests and provides responses that approve or decline authorizations within a three-second time window.
Sales process
Your contact with Sales begins with the Marqeta Sales Development representative who inquires about your use case to determine if there is a fit with the Marqeta platform.Sales Process Step 1 — Sales engagement
You will be introduced to a Business Development representative who will start a pricing and feasibility assessment.Sales Process Step 2 — Sales engineering consultation
Engaging with a Sales Engineer provides a solid starting point for integrating with the Marqeta platform. The level of detail your Sales Engineer goes into here depends on the nature and complexity of the card program you are developing. Typical outcomes include:- Understanding and scoping your card program to provide you with an overview of how Marqeta products and capabilities can best serve you.
- Being your development team’s initial point of contact for all technology and product questions.
Sales Process Step 3 — Proposal / SOW
Marqeta generates a proposal or Statement of Work (SOW) that provides clarity and transparency to the engagement. The SOW describes the card program configuration, as well as the responsibilities of both parties, the associated pricing, and the project timeline.Sales Process Step 4 — Signed contract
Marqeta prepares a Master Service Agreement (MSA) based on the SOW. After you and Marqeta have signed the MSA, the Program Due Diligence and integration verification processes begin.Program due diligence
As part of onboarding, all new Marqeta customers/programs undergo a Program Due Diligence (PDD) review, a collaborative effort between your team and Marqeta. Marqeta Program Due Diligence is a comprehensive risk assessment approach that enables informed decision-making about service delegation, ensures regulatory compliance across multiple jurisdictions, and establishes robust partnerships between Marqeta, our Bank Partners, and Programs. What to expect During your Program’s onboarding and before Go-Live with Marqeta (the point at which a Program commences Production Testing), Due Diligence completion and approval is required. Due Diligence encompasses the collection of all required artifacts, the execution of thorough review and validation of all responses, and the formal closure of each item upon satisfactory completion. Once Programs are fully launched and operational, they remain subject to periodic ongoing reviews, and potentially additional assessments triggered by specific business changes or expansion activities. Post-Launch Due Diligence reflects the commitment of Marqeta to continuous risk monitoring and compliance maintenance. All Programs remain subject to ongoing reviews and requirements as deemed necessary. Program Due Diligence is first deployed to prospective customers/programs via an online Portal, which is a custom-built Marqeta website integrated with Salesforce. You will receive access to the Portal where you can complete your questionnaire, upload documents, and communicate directly with the Marqeta team. What influences your requirements Within the Portal, you will respond to questions dynamically rendered based on factors such as program construct, geographic location or jurisdiction, product type, Bank Partner, and whether your program serves consumer or commercial cardholders. The questionnaires expand across several domains including: Company Profile, Compliance, Financial Crimes, Privacy, Information Security, Third Party Risk Management, AI/Machine Learning, Finance. Marqeta maintains a standard Program Due Diligence questionnaire that all prospective programs are subject to. These items are also representative of our Bank Partners’ due diligence requirements. Depending on a Program’s onboarding journey and construct, you might receive different types of Due Diligence reviews. Items can be added or removed based on the nature of the program and/or perceived risks. Note that these requirements are updated periodically, we recommend that you contact your Marqeta representative for more information. Timelines Plan to submit your responses and materials as soon as you receive Portal access - typically within 30 days, so that sections can be reviewed and approved by Marqeta prior to your next onboarding steps towards Go-Live and Launch.Integration verification
Marqeta drives your integration by gathering key data points about your program that describe how you will leverage the Marqeta platform to build your card program and serve your customers. It’s vital that you review these data points to confirm their accuracy. Marqeta provides best practices and ways to resolve potential issues so you can configure the Marqeta platform to best solve your business needs.Integration Verification Step 1 — Technical advisement
As you set up your integration with the Marqeta platform, your Marqeta Delivery representative will provide customized recommendations for your card program.Integration Verification Step 2 — Private sandbox access
Marqeta provisions your private sandbox environment, provides you with access keys, and adds your system’s IP addresses to the allow list. If you need to use Payment Card Industry (PCI) compliant components or UX Toolkit, Marqeta provisions them for you at this time.Integration Verification Step 3 — Onboarding checkpoints
Throughout the early stages of the development process, your Marqeta Delivery representative holds weekly onboarding checkpoint meetings with you and other stakeholders. During this time, you should be creating the basic components of your card program. You are responsible for the following common tasks:- Creating and configuring card products
- Creating and managing users
- Creating and managing cards
- Creating and managing spend controls at the card product level
- Creating and managing controls at the user and card level
Integration Verification Step 4 — Simulating transactions
Marqeta expects you to be able to simulate core transaction endpoints within the simulation suite and provide evidence that you can appropriately approve and decline transactions through Just-in-Time (JIT) Funding. For more information, see Users, Cards, and Simulations 2.0 — Card Transactions.Integration Verification Step 5 — Just-in-Time (JIT) Funding review
Note
A JIT Funding review is only required for card programs that include JIT Funding.
A JIT Funding review is only required for card programs that include JIT Funding.
Integration Verification Step 6 — Go live
Marqeta has provided you with production credentials to transition your card program configuration to a live environment. As referenced in the signed contract, your card program configuration is now considered to be in “go live” state.Integration Verification Step 7 — Live testing
Your Marqeta Delivery representative will assist you with performing User Acceptance Testing in your live environment, focusing on authorizing and clearing transactions. Once both parties are adequately satisfied, your card program configuration will be ready for launch.Security verification
For all Marqeta customers, security is viewed as an ongoing relationship rather than a one-time check. As part of the integration verification, the Marqeta Security Team scans your environment to confirm a secure connection and to highlight any risks that need to be resolved. You supply the Marqeta Security Team with production IP addresses. The Marqeta Security Team performs a security scan of your environment within two business days.- If the scan is successful, your production IP addresses are added to the Marqeta firewall.
- If vulnerabilities are discovered, Marqeta will provide you with corrective measures and guidance on the specific changes you need to make to secure your environment. Contact Marqeta to repeat the security scan after applying these measures.