Establishing secure connection…Loading editor…Preparing document…

Legal ISO Agreement

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

LEGAL ISO AGREEMENT

This Independent Sales Organization Agreement (the Agreement) is made as of by and between Independent Sales Organization: , entity type , organized under the laws of , and Processor/Acquirer: , organized under the laws of (each a Party and together the Parties).

RECITALS

WHEREAS, Processor operates a card acquiring and payment processing platform and maintains agreements with card brands and sponsoring banks under which merchants may accept payment cards; and

WHEREAS, ISO wishes to solicit, onboard and resell Processor's payment processing services to merchants and to provide associated merchant servicing and support pursuant to the terms of this Agreement; and

WHEREAS, Processor is willing to appoint ISO to market and refer merchants to Processor under the terms and conditions set forth in this Agreement.

NOW, THEREFORE, in consideration of the mutual covenants and agreements contained herein, and other good and valuable consideration, the receipt and sufficiency of which are hereby acknowledged, the Parties agree as follows:

1. APPOINTMENT; SCOPE

1.1 Appointment. Processor hereby appoints ISO, and ISO accepts appointment, as a non-exclusive independent sales organization authorized to solicit merchant relationships for Processor's payment services in the Territory. ISO shall not represent itself as an agent of Processor for purposes other than those expressly set forth in this Agreement.

1.2 Authority. ISO shall have no authority to amend, modify or waive any term of Processor's merchant agreements, to bind Processor to any obligation, or to incur any liability on behalf of Processor, except to the extent expressly authorized in writing by Processor.

2. TERM

2.1 Term. The initial term of this Agreement shall commence on the Effective Date and continue for years, unless earlier terminated in accordance with Section 11. Thereafter this Agreement shall automatically renew for successive one-year periods unless either Party provides written notice of non-renewal at least days prior to the end of the then-current term.

3. DUTIES OF ISO

3.1 Solicitation and Onboarding. ISO shall use commercially reasonable efforts to solicit merchants, submit complete and accurate merchant applications, collect required documentation, and assist Processor in merchant onboarding in accordance with Processor's policies and applicable card brand rules.

3.2 Training and Conduct. ISO shall ensure that its employees and agents acting on ISO's behalf are trained in Processor's procedures and shall conduct all solicitation and sales activities in a professional manner and in compliance with applicable laws and card network operating regulations.

4. FEES, COMMISSIONS AND PAYMENT

4.1 Commission. Processor shall pay ISO commissions in accordance with the Commission Schedule attached as Exhibit A. Commission rate(s) as applied to qualifying merchant processing volume shall be percent (or as otherwise set forth in writing).

4.2 Payment Terms. Commissions due to ISO shall be calculated in accordance with Processor's standard reconciliation procedures and paid within days following the end of the month in which processing volume is settled, subject to offsets for chargebacks, refunds, fines, adjustments or recoveries.

5. MERCHANT AGREEMENTS; RESPONSIBILITIES

5.1 Merchant Agreements. All merchants solicited by ISO shall execute Processor's standard merchant agreement. ISO shall not alter, supplement or represent any different terms to merchants unless expressly authorized in writing by Processor.

5.2 Merchant Support. ISO shall provide first-line support to its merchants and shall cooperate fully with Processor in fraud mitigation, investigations, and regulatory inquiries. ISO shall promptly notify Processor of any merchant risk indicators, suspected fraud, or material merchant breaches.

6. COMPLIANCE WITH LAWS; CARD BRAND RULES

6.1 Compliance. Each Party shall comply with all applicable laws, regulations and card brand operating rules, including but not limited to anti-money laundering laws, sanctions, and payment card industry standards. ISO shall immediately cease any activity that Processor reasonably determines to be non-compliant.

7. CONFIDENTIALITY

7.1 Confidential Information. "Confidential Information" means all non-public business, technical and financial information disclosed by one Party to the other in connection with this Agreement. Confidential Information shall not include information that is or becomes publicly available through no breach by the receiving Party.

7.2 Non-Disclosure. Each Party shall hold Confidential Information in strict confidence and shall not disclose it to any third party except as necessary to perform obligations under this Agreement or as required by law, provided the receiving Party gives prompt notice to the disclosing Party of any compelled disclosure.

8. DATA SECURITY; BREACH NOTIFICATION

8.1 Security Standards. ISO shall comply with all applicable Payment Card Industry Data Security Standards (PCI DSS) and Processor's security requirements. ISO shall implement and maintain reasonable administrative, technical and physical safeguards to protect cardholder data.

8.2 Breach Notification. In the event of a security breach affecting cardholder data or other material unauthorized disclosure, ISO shall notify Processor in writing within days of discovery and shall cooperate with Processor and card brands in remediation and investigation.

9. REPRESENTATIONS AND WARRANTIES

9.1 Mutual Representations. Each Party represents and warrants that (a) it is duly organized and in good standing under the laws of its jurisdiction; (b) it has full corporate power and authority to execute and perform this Agreement; and (c) the execution and delivery of this Agreement has been duly authorized.

9.2 ISO Representations. ISO represents that it shall perform services in compliance with applicable laws and card brand rules and that all information provided to Processor concerning merchants and sales activity shall be true, complete and accurate.

10. INDEMNIFICATION

10.1 Indemnity by ISO. ISO shall indemnify, defend and hold Processor, its affiliates and their respective officers, directors and employees harmless from and against any third-party claims, losses, damages, liabilities, costs and expenses (including reasonable attorneys' fees) arising out of or resulting from ISO's negligence, willful misconduct, breach of this Agreement, misrepresentations to merchants, or ISO's failure to comply with applicable law or card brand rules.

10.2 Indemnity by Processor. Processor shall indemnify ISO against third-party claims arising from Processor's gross negligence, willful misconduct, or material breach of the merchant processing services provided by Processor, subject to the limitations set forth in this Agreement.

11. LIMITATION OF LIABILITY

Except for breaches of confidentiality, indemnification obligations, or a Party's willful misconduct, neither Party shall be liable to the other for incidental, consequential, punitive or special damages. The aggregate liability of each Party for direct damages shall not exceed the greater of (a) the commissions paid or payable to ISO in the twelve (12) months preceding the claim, or (b) .

12. INSURANCE

ISO shall maintain at its expense commercial general liability insurance, cyber liability/ privacy liability insurance and errors & omissions insurance with minimum limits of per occurrence and shall provide certificates of insurance upon Processor's reasonable request.

13. TERMINATION

13.1 Termination for Cause. Either Party may terminate this Agreement for material breach by the other Party if such breach is not cured within days after written notice specifying the breach.

13.2 Immediate Termination. Processor may immediately suspend or terminate ISO's rights under this Agreement upon notice if ISO's actions create a material risk of fines, sanctions, chargebacks, or reputational harm to Processor or its bank sponsors.

14. NOTICES

All notices shall be in writing and delivered by nationally recognized overnight courier, certified mail (return receipt requested), or by hand to the addresses below or to such other address as a Party designates by notice delivered in accordance with this Section.

15. ASSIGNMENT

Neither Party may assign or transfer this Agreement or any rights hereunder without the prior written consent of the other Party, except that Processor may assign this Agreement to an affiliate or successor without ISO's consent provided such assignee assumes Processor's obligations hereunder.

16. AMENDMENT; WAIVER

This Agreement may be amended or modified only by a written instrument signed by authorized representatives of both Parties. No waiver of any provision shall be effective unless in writing and signed by the Party granting the waiver.

17. GOVERNING LAW

This Agreement shall be governed by and construed in accordance with the laws of the state of , without regard to its conflicts of law principles.

18. ENTIRE AGREEMENT

This Agreement, together with any exhibits and attachments expressly incorporated herein, constitutes the entire agreement between the Parties with respect to the subject matter hereof and supersedes all prior and contemporaneous agreements, proposals, or representations, whether written or oral.

19. SEVERABILITY

If any provision of this Agreement is held to be invalid, illegal or unenforceable by a court of competent jurisdiction, the remaining provisions shall remain in full force and effect and the Parties shall negotiate in good faith to replace the invalid provision with a valid provision that achieves, to the extent possible, the economic, business and other purposes of the invalid provision.

20. COUNTERPARTS

This Agreement may be executed in counterparts, each of which when executed shall be deemed an original, and all of which together shall constitute one and the same instrument. Signatures delivered by electronic transmission shall be deemed original signatures.

Independent Sales Organization:

By:

Date:

Processor/Acquirer:

By:

Date:

Enter text✕

What the Legal ISO Agreement Is and When It Applies

A Legal ISO Agreement is a binding contract that defines the relationship between an Independent Sales Organization (ISO) and a payments acquirer, processor, or merchant. It sets out services to be provided, fee schedules, underwriting and compliance obligations, data handling and liability allocation, and the term and termination mechanics. The agreement typically addresses merchant onboarding, chargeback and dispute handling, PCI compliance, representations and warranties, indemnities, confidentiality, and the scope of delegated authorities granted to the ISO.

Why a Clear Legal ISO Agreement Matters

A well-drafted Legal ISO Agreement clarifies roles, reduces operational risk, and documents compliance responsibilities including PCI and data privacy. It makes dispute resolution and liability allocation explicit and supports auditability for regulators and partners under ESIGN/UETA frameworks.

Why a Clear Legal ISO Agreement Matters

Who Typically Prepares or Signs This Agreement

The Legal ISO Agreement is used by commercial parties that manage merchant acquiring and payment services.

  • Independent Sales Organizations and referral partners who resell merchant services and require a formal contractual relationship.
  • Acquiring banks and payment processors that accept merchant accounts and need to allocate underwriting and compliance responsibilities.
  • In-house or outside counsel who review risk allocation, indemnities, and regulatory obligations prior to execution.

Use this agreement when onboarding merchants, delegating underwriting, or establishing a reseller relationship that involves cardholder data or payment processing.

Primary Signers and Their Roles

Merchant Acquirer

Typically a bank or processor that signs to accept merchants and delegates defined duties to the ISO. Their review focuses on underwriting standards, settlement flows, and regulatory compliance clauses.

ISO Executive

An authorized officer of the ISO who signs to accept responsibilities such as merchant onboarding, KYC, PCI controls, chargeback handling, and indemnity obligations; ensure authority appears on corporate records.

Core Elements Every Legal ISO Agreement Should Include

A comprehensive agreement groups responsibilities, commercial terms, compliance obligations, and dispute mechanisms so parties can operate without ambiguity.

Parties & Authority

Clear legal names, entity types, and signatory authority; specify whether affiliates may act and how delegated authority is documented and revoked.

Scope of Services

Detailed description of merchant acquisition activities, underwriting limits, transaction routing, settlement responsibilities, and any technology platform or API use.

Fees and Settlements

Precise fee schedules, chargeback responsibility, timing of remittances, reserve requirements, and methods for adjusting rates or withholding funds.

Compliance & Security

PCI-DSS obligations, data breach notice timing, PHI handling if applicable, and requirements for audits and certifications.

Indemnity & Liability

Mutual indemnities for third-party claims, caps on liability where negotiated, and carve-outs for willful misconduct or fraud.

Term & Termination

Initial term, renewal mechanics, termination for cause or convenience, transition assistance, and post-termination data retention obligations.

Essential Information to Collect in the Agreement

Legal Entity Name: Full registered name
Tax Identifier: EIN or SSN
Merchant ID: Processor merchant identifier
Banking Details: Settlement bank and account
Primary Contact: Name, email, phone
Effective Date: Agreement start date

How to Complete the Legal ISO Agreement

Follow a consistent order to reduce errors: identify parties, confirm payment flows, state fees, set compliance requirements, and execute with authorized signatures.

  • 01
    Identify Parties: Enter full legal names and entity types.
  • 02
    Confirm Scope: Describe permitted activities and geographic limits.
  • 03
    Set Financial Terms: Specify fees, reserve rules, and settlement timing.
  • 04
    Authorize Signers: Include printed names, titles, and execution dates.

Configuring an Online Workflow for the Agreement

Set up a consistent digital workflow to ensure fields, authentication, and retention meet legal and operational needs.

Field Configuration
Signer Order Sequential or parallel routing
Authentication Email link, SMS code, or KBA
Conditional Fields Show fields based on selections
Notifications Email reminders and completion alerts

Where to Send or File the Executed Agreement

After execution, route signed copies to operational teams and retain an immutable record for compliance and auditability.

  • Acquirer Legal: Primary executed copy for contract folder
  • ISO Operations: Operational handoff for onboarding
  • Finance: Attach to billing and reserve setup
  • Records: Store in secure archive for retention

Digital Signing and Technical Requirements

Choose a platform that supports secure uploads, robust audit trails, and industry integrations to maintain operational continuity.

  • Integrations: Salesforce, NetSuite, Google Workspace
  • File Formats: PDF, DOCX accepted
  • Security: TLS 1.2/1.3, AES-256

Verify the platform supports required compliance (e.g., HIPAA BAA if PHI is present), audit trails for ESIGN/UETA, and administrative controls for retention and access.

Key Dates and Timing to Track

Track contractual and regulatory dates to avoid penalties and ensure smooth merchant onboarding and settlement.

Effective Date:

Date obligations begin; affects liabilities and enforcement.

Notice Period:

Time required for termination or contract changes.

Renewal Window:

Period for automatic or negotiated renewal.

Payment Terms:

Settlement schedule for fees and reserve adjustments.

Record Retention Start:

When retention clock begins for compliance purposes.

Penalties and Financial Risks of Errors

Incorrect TIN: Backup withholding 24% may apply
Regulatory Fines: Noncompliance can trigger state and federal penalties
Chargeback Exposure: ISO may be liable for merchant dispute costs
Breach Liability: Data compromise can lead to indemnity claims
Contractual Damages: Breach may trigger liquidated or actual damages
Reputational Loss: Operational failures affect future relationships

Common Preparation Errors to Avoid

  • Using informal or trade names instead of the legal entity name leads to enforceability disputes and delays in onboarding.
  • Leaving fee schedules vague or omitting effective dates prompts billing disagreements and reconciliation problems.
  • Failing to document signatory authority or corporate resolutions causes internal challenge to validity of signatures.
  • Not specifying data handling and PCI responsibilities increases audit exposure and operational ambiguity.

eSignature Vendor Comparison for Executing Legal Agreements

Comparison of common eSignature vendors and key plan characteristics relevant to Legal ISO Agreement workflows. Pricing shown is plan-level starting rates where available; verify features with providers.

signNow DocuSign Adobe Sign PandaDoc HelloSign
Starting Price $8/user/mo $15/user/mo $14/user/mo $19/user/mo $15/user/mo
Free Trial 7-day trial Varies Varies Varies Varies
Bulk Send Yes Yes Yes Yes Limited
Audit Trail Yes Yes Yes Yes Yes
Envelope Cap No cap 100 envelopes/user/year Varies Varies Varies

Real-World Examples of Digital Execution

These examples show how organizations use electronic execution to close agreements and maintain compliance in operations involving merchant services.

Martin Properties — Tim Martin

Tim Martin needed rapid execution to onboard property-management merchants

  • Used mobile signing to collect signatures on-site quickly
  • I can process and execute all of these documents online with 100% compliance and built-in security, which helped speed onboarding and recordkeeping.

BIS — Dan Rotelli

BIS prioritized compliance and auditability for merchant agreements

  • Adopted digital audit trails and secure storage
  • We felt most comfortable given SOC 2 certification and strict focus on ESIGN and UETA act compliance.

Practical Tips for Accurate and Efficient Agreement Completion

Adopt standard templates, require authorized signatory verification, and centralize storage to reduce errors and speed processing.

Use a Master Template
Maintain a single vetted template to ensure consistent clauses, reduce review time, and lower drafting errors across merchant onboarding.
Verify Signatory Authority
Require a corporate resolution or certificate of incumbency for corporate signers to prevent later challenges to signature validity.
Capture Audit Trails
Ensure the platform records timestamps, IP addresses, and signer authentication methods to support ESIGN/UETA enforceability.
Archive Securely
Store executed documents in encrypted, access-controlled repositories with defined retention and destruction policies.

Key Processing Milestones from Draft to Storage

Track these sequential milestones to ensure consistent execution, onboarding, and record retention.

01

Draft Finalization

Prepare and approve the final contract language before sending to parties.

02

Signatory Review

Confirm signers and required attachments are present prior to sending.

03

Execution

All parties sign and dates are recorded with audit evidence.

04

Operational Handoff

Provide copies to operations, finance, and compliance teams for onboarding.

Frequently Asked Questions and Practical Answers

Answers to common questions about validity, signing authority, eSignature legality, and post-execution management for Legal ISO Agreements.


Need help? Contact support

be ready to get more
Join over 28 million airSlate SignNow users