FCC ID: 2AC2O-CHU200S EFTPOS Payment Terminal

Quick Start Guide - CHU200S Magstripe Reader

(Swipe Here) Enter EMV Reader

(Insert Here) Contactless/

NFC Reader

(Tap Here) Function Cancel Clear Included in the Box CHU200S Payment Terminal Cables/Accessories Quick Start Guide Maintenance The external face of the EFTPOS terminal should be carefully cleaned on a regular basis. This is to ensure that the front plate is free of dirt and solvents which could damage the device or prevent users from using the device as intended. Windcave recommend cleaning the device with a damp cloth or mild soap solution. Do not use any solvents as this may damage the device surface. Do not attempt to open or modify the unit, this will cause the unit to be TAMPERED and render it inoperable. If repairs are required, or the device is no longer needed; the device must be returned to Windcave. Contact Information Please see https://www.windcave.com/contact for a full list of contact details or use one of the below contact methods:

Email: support@windcave.com New Zealand: 0800-729-6368 Australia: 1-800-006-254 United States: 1-213-378-1190 United Kingdom: 0800-088-6040 This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions:

1. This device may not cause harmful interference, and 2. This device must accept any interference received, including interference that may cause undesired operation. Changes or modifications not expressly approved by the party responsible for compliance could void the users authority to operate the equipment. Note: This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense. FCC ID: 2AC2O-CHU200S This device complies with Industry Canadas license-exempt RSSs. Operation is subject to the following two conditions:

1. This device may not cause interference;

2. This device must accept any interference, including interference that may cause undesired operation of the device. Le prsent appareil est conforme aux CNR dIndustrie Canada applicables aux appareils radio exempts de licence. Lexploitation est autorise aux deux conditions suivantes:

1. lappareil ne doit pas produire de brouillage;

2. lutilisateur de lappareil doit accepter tout brouillage radiolectrique subi, mme si le brouillage est susceptible den compromettre le fonctionnement. IC: 26550-CHU200S 2024 Windcave Limited. All rights reserved. All information in this document is subject to change without notice, and the contents of this document do not constitute an offer or warranty of any kind. Reproduction or publishing this document without Windcave approval is prohibited.

CHU200S HANDHELD Made in New Zealand ll S/N: 3523380023 AB0285-A04 HW: CHU200S-A-01-00 FCC ID: 2AC20-CHU200S IC: 26550-CHU200S Contains FCC |D: XPYNINAW15 Contains IC: 8595A-NINAW15 CHU200S HANDHELD Made in New Zealand

Windcave Limited 33 Wilkinson Road, Ellerslie Auckland 1060 New Zealand United States of America Federal Communications Commission Authorization and Evaluation Division 7435 Oakland Mills Road Columbia, MD 21046 Date: 4/10/2024 Ref: Attestation Statements Part 2.911(d)(7) Filing FCC ID: 2AC2O-CHU200S FCC FRN: 0026591925 Windcave Limited (the applicant) certifies that, as of the date of the filing of the application, the Windcave Inc office located in Phoenix, Arizona is our designated U.S. agent for service of process for the above referenced FCC ID. Windcave Limited accepts to maintain an agent for no less than one year after the grantee has terminated all marketing and importation or the conclusion of any Commission-related proceeding involving the equipment. The Windcave Inc office located in Phoenix, Arizona accepts, as of the date of the filing of the application, the obligation of the designated U.S. agent for service of process for the above referenced FCC ID. Designated U.S. Agent Information:

Name: Windcave Inc FRN: 0033926957 Address: 1601 N 7th Street, Suite 420, Phoenix, AZ 85006 Contact Person: Cameron Collard Tel.: +1 213 378 1190 Email: Compliance@Windcave.com Sincerely, Cameron Collard Global Head of Compliance Risk & PMO Windcave Limited

Windcave Limited 33 Wilkinson Road, Ellerslie Auckland 1060 New Zealand United States of America Federal Communications Commission Authorization and Evaluation Division 7435 Oakland Mills Road Columbia, MD 21046 Date: 4/14/2024 SUBJECT: FCC Covered Equipment Attestation for 2AC2O-CHU200S To Whom It May Concern:

Windcave Limited certifies that as of the date of the application the equipment for which authorization is sought is not covered equipment prohibited from receiving an equipment authorization pursuant to section 2.903 of the FCC rules. Regards, Cameron Collard Global Head of Compliance Risk & PMO Windcave Limited United States of America Federal Communications Commission Authorization and Evaluation Division 7435 Oakland Mills Road Columbia, MD 21046 Date: 4/14/2024 SUBJECT: FCC Covered Applicant Attestation To Whom It May Concern:

Windcave Limited 33 Wilkinson Road, Ellerslie Auckland 1060 New Zealand Windcave Limited (the applicant) certifies that, as of the date of the filing of the application, the applicant is not identified on the Covered List (as a specifically named entity or any of its subsidiaries or affiliates) as an entity producing covered equipment. Regards, Cameron Collard Global Head of Compliance Risk & PMO Windcave Limited

Windcave Limited 33 Wilkinson Road, Ellerslie Auckland 1060 New Zealand 27 March 2024 EMC Technologies NZ Ltd 47 Mackelvie Street Grey Lynn Auckland 1021 To Whom It May Concern I hereby authorize Andrew Cutler, General Manager of EMC Technologies NZ Ltd to act on Windcave Ltd behalf with regard to FCC and ISED Certification of the CHU200S Release A device. FCC ID: 2AC2O-CHU200S Contains WiFi/BLE modem FCC ID: XPYNINAW15 ISED ID: 26550-CHU200S ISED HVIN: CHU200S-A-01-00 ISED PMN: CHU200S Release A ISED HMN: n/a ISED FVIN: V1.3.8.8A1 Contains WiFi modem ISED ID: 8595A-NINAW15 Yours Sincerely Cameron Collard Global Head of Compliance Risk & PMO Windcave Limited

14 April 2024 Federal Communications Commission Equipment Authorisation Branch 7435 Oakland Mills Road Columbia, MD21046 United States of America Windcave Limited 33 Wilkinson Road, Ellerslie Auckland 1060 New Zealand Subject: Confidentiality Request for Exhibits under FCC ID: 2AC2O-CHU200S To Whom It May Concern:

Pursuant of Section 0.457 and 0.459 of the Commissions Rules and KDB 726920 D01 Confidentiality Request Procedures, we hereby request that the exhibits listed below, submitted in support of the certification application for FCC ID: 2AC2O-CHU200S, be withheld permanently from public disclosure:

Schematics Block Diagram Operational Description Internal Photographs The above exhibits, owned solely by Windcave Limited, contain trade secrets and proprietary information which is not routinely available to the public or to our competitors. The public disclosure of these materials may be harmful to the applicant and provide unjustified benefits to its competitors. This device is a PCI PTS approved secure PIN entry terminal. It is permanently disabled and made inoperable if the cover is removed due to active tamper detection circuitry. None of the circuit boards or internal components are accessible without permanently disabling the device which requires the device to be returned to the manufacturer as per PCI requirements. Additionally, components are covered with conformal coating where practical. Windcave Limited 33 Wilkinson Road, Ellerslie Auckland 1060 New Zealand The photos of the circuit boards however display secret information regarding the location of tamper detection circuits which could be used to circumvent them and gain access to the internals of the product without triggering a tamper, and then the device can be bugged in order to steal a users banking information. For these reasons we do need the internal photos to be restricted. Confidentiality of the internal photographs is specifically sought because the device could be re-

engineered from the photographs. Windcave controls information about and access to the device as follows:

The schematics, internal photographs and the like are only used internally by Windcave or by those 3rd parties as are required to complete product testing. User manuals do not include schematics, internal photographs, detailed descriptions of device operation or detailed block diagrams. To meet strict Payment Card Industry (www.pcisecuritystandards.org) security requirements, the devices include security mechanisms which disable the device if it is opened and prevent the modification of the firmware by the user. The PCI Security Standards require that all devices are returned to Windcave Ltd. at their end of life. Therefore Section 7.6 of the Windcave Customer Contract states:

Consequences of termination: On the termination of this Agreement, you must immediately:

a) return all Windcave Limited Products to Windcave Limited The applicant understands that pursuant to Section 0.457 of the Rules, disclosure of this application and all accompanying documentation will not be made before the date of the Grant for this application. Yours sincerely Cameron Collard Global Head of Compliance Risk & PMO Windcave Limited

Windcave Limited 33 Wilkinson Road, Ellerslie Auckland 1060 New Zealand United States of America Federal Communications Commission Authorization and Evaluation Division 7435 Oakland Mills Road Columbia, MD 21046 Date: 4/10/2024 SUBJECT: FCC Application for 2AC2O-CHU200S To Whom It May Concern:

We, the undersigned, hereby attest to the fact that we will apply the Declaration of Conformity procedure to the class B computer peripheral portion of this composite filing. Regards, Cameron Collard Global Head of Compliance Risk & PMO Windcave Limited