Launching an MxM program
Marqeta manages the following primary tasks related to launching a production card program:- Providing bank partners to act as Bank Identification Number (BIN) sponsors
- Approving and managing the program with the card network/scheme
- Approving and managing the program with the issuing bank
- Ensuring program compliance with regional regulations
- Ensuring program compliance with bank and card network mandates
- Configuring the customer processing environments
- Configuring funding methodology
- Providing API access (controls, user management, etc.)
- Processing card network/scheme events (authorization, clearing, etc.)
- Fulfilling cards
- Managing Know Your Customer (KYC)
- Managing card inventory and fulfillment providers
- Managing tokenization with the card network
- Engaging with the digital wallet providers
- Providing Tier II technical support
- Sending daily card network reporting files to the issuing bank
- Reconciling with the card network
- Managing disputes
- A webhook endpoint that receives and parses all events and responds with a
200response within five seconds of acknowledging an event receipt. Data sent to the endpoint supports direct reconciliation and ledger management. - A platform that manages your card program through the Marqeta APIs, such as card products, velocity controls, and Commando Mode (if applicable).
- If your program includes Just-in-Time (JIT) Funding, a gateway endpoint that receives Gateway JIT requests and provides responses that approve or decline authorizations within a three-second time window.
Launching an MxM Program Step 1 — Prototype in your public sandbox
It is highly recommended that you start development in your public sandbox to familiarize yourself with the Marqeta platform and its object models. When you are sufficiently comfortable with the platform, contact your Marqeta Business Development Representative to initiate the sales process.Launching an MxM Program Step 2 — Develop in your private sandbox
When you have an approved card program configuration and the IP addresses for your private sandbox are on the allow list, Marqeta can then issue keys to your private sandbox, enabling you to begin development on your program.Launching an MxM Program Step 3 – Configure your production environment
After creating the basic components of your card program in your private sandbox environment, simulating transactions, and completing integration certification, Marqeta configures your production environment.Launching an MxM Program Step 4 – Go live
As referenced in the signed contract, your card program configuration is now considered to be in “go live” state.Launching an MxM Program Step 5 — Launch
You have successfully started the production development of your card program configuration and have been cleared for launch.Sales process
Your contact with Sales begins with the Marqeta Sales Development Representative who inquires about your use case to determine if there is a fit with the Marqeta platform.Sales Process Step 1 — Sales engagement
You will be introduced to a Business Development Representative who will start a pricing and feasibility assessment.Sales Process Step 2 — Solutions engineering consultation
Engaging with a Solutions Engineer provides a solid starting point for integrating with the Marqeta platform. The level of detail your Solutions Engineer goes into here depends on the nature and complexity of the card program you are developing. Typical outcomes include:- Understanding and scoping your card program to provide you with an overview of how Marqeta products and capabilities can best serve you.
- Developing sequential diagrams for end-user onboarding to the Marqeta platform, as well as transactional and funding flow diagrams.
- Assisting you with delivery resource preparation and technical development.
- Being your development team’s initial point of contact for all technology and product questions.
Sales Process Step 3 — Proposal / SOW
Marqeta generates a proposal or Statement of Work (SOW) that provides clarity and transparency to the engagement. The SOW describes the card program configuration, as well as the responsibilities of both parties, the associated pricing, and the project timeline.Sales Process Step 4 — Signed contract
Marqeta prepares a Master Service Agreement (MSA) based on the SOW. After you and Marqeta have signed the MSA, the Program Due Diligence and integration verification processes begin.Program due diligence
As part of onboarding, all new Marqeta customers/programs undergo a Program Due Diligence (PDD) review, a collaborative effort between your team and Marqeta. Marqeta Program Due Diligence is a comprehensive risk assessment approach that enables informed decision-making about service delegation, ensures regulatory compliance across multiple jurisdictions, and establishes robust partnerships between Marqeta, our Bank Partners, and Programs. What to expect During your Program’s onboarding and before Go-Live with Marqeta (the point at which a Program commences Production Testing), Due Diligence completion and approval is required. Due Diligence encompasses the collection of all required artifacts, the execution of thorough review and validation of all responses, and the formal closure of each item upon satisfactory completion. Once Programs are fully launched and operational, they remain subject to periodic ongoing reviews, and potentially additional assessments triggered by specific business changes or expansion activities. Post-Launch Due Diligence reflects the commitment of Marqeta to continuous risk monitoring and compliance maintenance. All Programs remain subject to ongoing reviews and requirements as deemed necessary. Program Due Diligence is first deployed to prospective customers/programs via an online Portal, which is a custom-built Marqeta website integrated with Salesforce. You will receive access to the Portal where you can complete your questionnaire, upload documents, and communicate directly with the Marqeta team. What influences your requirements Within the Portal, you will respond to questions dynamically rendered based on factors such as program construct, geographic location or jurisdiction, product type, Bank Partner, and whether your program serves consumer or commercial cardholders. The questionnaires expand across several domains including: Company Profile, Compliance, Financial Crimes, Privacy, Information Security, Third Party Risk Management, AI/Machine Learning, Finance. Marqeta maintains a standard Program Due Diligence questionnaire that all prospective programs are subject to. These items are also representative of our Bank Partners’ due diligence requirements. Depending on a Program’s onboarding journey and construct, you might receive different types of Due Diligence reviews. Items can be added or removed based on the nature of the program and/or perceived risks. Note that these requirements are updated periodically, we recommend that you contact your Marqeta representative for more information. Timelines Plan to submit your responses and materials as soon as you receive Portal access - typically within 30 days, so that sections can be reviewed and approved by Marqeta prior to your next onboarding steps towards Go-Live and Launch.Security verification
For all Marqeta customers, security is viewed as an ongoing relationship rather than a one-time check.Security Verification Step 1 — Security assessment
The security assessment starts with a checklist to verify that your integration architecture is compliant with Marqeta guidelines. As part of the integration verification, the Marqeta Security Team scans your private sandbox IP addresses to confirm a secure connection and to highlight any risks that need to be resolved.Security Verification Step 2 — Comprehensive security scan
You supply the Marqeta Security Team with production IP addresses. The Marqeta Security Team performs a comprehensive security scan of your IP addresses within five business days.- If the scan is successful, your production IP addresses are added to the Marqeta firewall.
- If vulnerabilities are discovered, Marqeta will provide you with corrective measures and guidance on the specific changes you need to make to secure your environment. Contact Marqeta to repeat Security Verification Step 2 after applying these measures.
Integration verification
Marqeta drives your integration by gathering key data points about your program that describe how you will leverage the Marqeta platform to build your card program and serve your customers. It’s vital that you review these data points to confirm their accuracy. Marqeta provides best practices and ways to resolve potential issues so you can configure the Marqeta platform to best solve your business needs.Integration Verification Step 1 — Technical advisement
By this step, you should have started the Program Due Diligence process. As you set up your integration with the Marqeta platform, a Marqeta Integration Engineer will provide customized recommendations for your card program such as the examples below:Integration Verification Step 2 — Private sandbox access
After you complete the technical advisement process, Marqeta configures your private sandbox environment, provides you with access keys, and adds your system’s IP addresses to the allow list. If you need to use the Payment Card Industry (PCI) compliant components of UX Toolkit, Marqeta provisions them for you at this time.Integration Verification Step 3 — Onboarding checkpoints
Throughout the early stages of the development process, your Marqeta Integration Engineer holds weekly onboarding checkpoint meetings with you and other stakeholders. During this time, you should be creating the basic components of your card program. The table below lists who is responsible for some common tasks.Integration Verification Step 4 — Simulating transactions
At a minimum, Marqeta expects you to simulate the following transactions before proceeding to final review.
For more information, see Users, Cards, and Simulations 2.0 — Card Transactions.
Integration Verification Step 5 — Integration certification
Just-in-Time (JIT) Funding certification
Note
A JIT Funding review is only required for card programs that include JIT Funding.
A JIT Funding review is only required for card programs that include JIT Funding.
Integration Verification Step 6 — Production configuration
Marqeta configures your production environment with the approved configurations from your private sandbox environment.Integration Verification Step 7 — Environment review
Marqeta certifies your readiness to proceed by answering questions such as the following:- Have all configurations been implemented correctly?
- Have you successfully simulated the necessary transactions?
- Is the default authorization behavior correct?
- Are the active card limits correct?
- Does your card product have the correct funding source (if you are using JIT Funding)?
- Are you adhering to the expected KYC behaviors?
- Are all necessary PCI compliance components of UX Toolkit deployed as expected?
- Does your cardholder account reflect the correct parent and child hierarchy?
Integration Verification Step 9 — Production validation testing
Your Marqeta Integration Engineer will assist you with performing testing in your live environment, focusing on authorizing and clearing transactions. A few tasks remain before your program is ready to launch:- If your card program includes either physical or virtual cards that need to be displayed, you must produce and approve the card art in accordance with the card network and issuing bank guidelines.
- If your card program includes physical cards, you might want to schedule fulfillment orders to be able to reliably distribute cards to your cardholders.