The Green Sheet Online Edition
March 9, 2026 • 26:03:01
Legal ease
POS platforms: The ISO's dangerous paradise
Merchants rightfully yearn for a platform that handles everything, all the time, everywhere. ISOs use POS platforms fulfilling this requirement to sell integrated merchant processing accounts (the MID). This reality is a double-edged sword for ISOs.
On the one hand, a whiz-bang all-in-one platform helps make the sale, creates stickiness and opens revenue opportunities for the ISO that faces compressed margins on the MID. On the other hand, if a large portion of an ISO's merchant portfolio is using a single POS platform, the ISO can face a crisis if the platform crashes or if it's purchased by another ISO or a processor.
The purpose of this article is to identify five legal issues that are relevant, from the ISO's perspective, when signing-up to resell a POS platform on which merchants will rely.
1. Have a Plan B
No matter how excellent a given POS platform is, an ISO should find a back-up provider of comparable quality. The ISO should board at least some merchants with the backup provider and develop a realistic plan for the IT plan of how a merchant could migrate from the main provider to the backup.
The ISO should have a plan in place for the (unlikely) catastrophic scenario where the main provider has irredeemably crashed and merchants are unable to process until they are boarded with the backup. The ISO might never have to run this playbook, but in those cases where it is run, it may mean the difference between a temporary crisis and ruin.
2. Deconversion clauses with main provider
POS platforms are naturally protective of their merchant relationships. Having invested in development of the software behind the platform, a POS platform will want merchants to accept contracts with a term and will often look to the ISO that resold the service to protect those merchant relationships.
ISO-POS platform sales agreements will often contain non-solicitation provisions preventing the ISO from porting the merchant over to another POS platform. When times are good and the platform is operating properly, it is reasonable for the ISO to accept certain limitations on its right to re-solicit merchants for another POS platform.
However, both parties will benefit from using the ISO-POS platform contract to plan for scenarios in which the ISO has the right—and the POS platform agrees—to facilitate migration of a merchant or an entire portfolio to an alternative supplier.
The exact list of these exceptions is to be negotiated on a case by case basis, but like triggers would include: (i) an unplanned outage for which there is no likelihood of repair within a reasonable period of time; (ii) material and uncured default by the POS platform; and (iii) inability of the POS platform to continue maintaining the planform.
In a recent case, a super-ISO that owns a POS platform elected to stop supporting the platform. Some ISOs under that super-ISO had entire portfolios reliant on the platform. The super-ISO was insensitive and thought the merchants could be easily migrated to their new preferred platform. In reality, this was problematic for whole portfolios of merchants.
Keep in mind that if the POS platform is provided by the super-ISO or processor of the ISO, there may be multiple non-solicitation and confidentiality clauses that could block movement of the portfolio—even in the event of a crisis with the main POS platform provider. An ISO should consider how all of these clauses could get in the way of saving their portfolio if the POS platform goes kaput.
3. Migration clauses with substitute provider
Having a Plan B POS platform provider is not enough. An ISO should foresee in its contract with the substitute provider a systematic means by which it could port a whole portfolio of merchants in the event of a serious issue with the main provider.
If the substitute provider has a cumbersome onboarding process and the ISO's main POS platform disappears, delays in boarding on the new platform might result in the portfolio slipping away before the ISO has a chance to save it.
4. Data portability
POS platforms warehouse a significant amount of valuable merchant data. Setting aside the rights and interests of the ISO, merchants owe it to themselves to consider how easy, or difficult, it might be to migrate their data to a substitute POS platform or even to one they build themselves.
As an advocate for merchants, the ISO could take an interest in the merchant's data portability rights under the POS platform agreement and the technical feasibility of an actual migration. Merchants are often too busy running their business to consider these rights. The ISO has an opportunity to leverage its knowledge of the POS platform system to highlight advantages in relation to data portability.
The hardest part of POS platform data portability is cardholder data. If the POS platform is also storing cardholder data and allowing merchants to use tokens of those cards to initiate transactions, migrating that cardholder data can be complicated by a number of legal relationships.
First, the merchant itself should be disclosing to its end users that cardholder data is stored and processed by the POS platform. Second, the merchant should plan for a scenario where card token data is migrated to another POS platform through a secure process.
5. Talk disaster before Day 1
Continued merchant stability should be part of an ISO's dialogue with a POS provider before a contract is negotiated or signed. This conversation requires the POS platform to have a certain amount of maturity and humility to consider that their platform could fail. ISOs should dive into this topic in their first meeting with the POS platform. The tenor of that conversation could foretell a lot in terms of what might happen in good times and bad.
Platforms that are able to conceive of their own fallibility are sometimes best. 
In publishing The Green Sheet, neither the author nor the publisher are engaged in rendering legal, accounting, or other professional services. If legal advice or other expert assistance is required, the services of a competent professional should be sought. For further information on this article, please contact Adam Atlas, Attorney at Law email: atlas@adamatlas.com, Tel. 514-842-0886.
Notice to readers: These are archived articles. Contact information, links and other details may be out of date. We regret any inconvenience.
