> For the complete documentation index, see [llms.txt](https://support.xplorpay.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://support.xplorpay.com/pci-compliance/dataguardian-data-breach-protection-insurance.md).

# DataGuardian Data Breach Protection Insurance

Meet PCI DSS requirements and understand Data Breach Protection Insurance coverage.

Xplor Pay’s DataGuardian compliance and security program helps you meet Payment Card Industry Data Security Standard (PCI DSS) requirements. It helps protect your business, reputation, and customers after a data breach.

The program includes self-assessment questionnaires, quarterly network scans, and Data Breach Protection Insurance. The policy provides up to $150,000 in coverage per merchant identification number (MID).\*

### Coverage summary

The Data Breach Protection Insurance Policy covers:

* Mandatory forensic audit costs.
* Card replacement costs and related expenses.
* PCI DSS and regulatory fines resulting from a breach.
* Account Data Compromise Recovery (ADCR) fines for credit card fraud.
* EMV payment acceptance and software or hardware upgrades. Card associations must order the upgrades instead of a fine.
  * Coverage is limited to $10,000 per MID.
  * Coverage is limited to $25,000 per merchant with multiple locations.
* Breach notification expenses, up to $10,000.
  * Drafting, printing, and mailing notification letters.
  * Required media notifications, such as newspaper or radio announcements.

### Program details

There is no deductible.

The program covers network breaches and physical theft of card data. Examples include stolen receipts, stolen computers, skimming, and employee theft. Theft by directors or higher-level employees is excluded.

Single-location merchants can receive up to $150,000 per program year. A single-location merchant has one MID.

Merchants with multiple locations can receive up to $500,000 per program year. Each MID has up to $150,000 in coverage. Total coverage cannot exceed the program benefit.

The policy covers PCI DSS Level 2, 3, and 4 merchants. Coverage applies even if you were not compliant during a breach.

After a breach, you must become compliant before joining or rejoining the program. Reimbursement typically occurs within 30 days after required documentation is submitted.

### Policy terms and questions

This summary does not include all policy terms, conditions, and exclusions. Review the official terms and conditions for complete coverage details.

Xplor Pay is not an insurance broker or producer. For policy questions, contact North American Data Security RPG:

* Phone: 800-319-7120
* Fax: 248-688-9362
* Email: <support@royalgroupservices.com>

### Report a suspected breach

Contact Xplor Pay Customer Support immediately if you suspect a breach. Xplor Pay provides free breach consulting and connects you with Qualified Security Assessors and forensic security experts.

* Phone: 866-435-0666
* Email: <customersupport@xplorpay.com>

To file a claim, Xplor Pay directs you to RGS Limited, LLC. RGS administers the policy.

* Phone: 888-545-7133
* Email: <incidentreporting@royalgroupservices.com>

For program and PCI DSS information, visit [Protect payments](https://xplorpay.com/protect-payments/).

\* Great American Insurance Company underwrites the Data Breach Protection Insurance Policy.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://support.xplorpay.com/pci-compliance/dataguardian-data-breach-protection-insurance.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
