CardConnect Gateway Architecture - Production

[Slide Title]:
CardConnect Gateway Architecture - Production (Diagram)

[Diagram Content - theoretical Interpretation]:
(The diagram is complex and contains many elements.  The theoretical will attempt to capture the text labels, but the spatial relationships are crucial and difficult to convey in plain text.  This should be considered a *rough* textual representation.)
VPN tunnels
    -FirstData North (FDN)
    -Paymentech (PT)
    -TSYS/Vital
    -Vantiv
    -Global Payments
    -Heartland
    -WorldPay
    -… More
Production Network (10.3.0/16)
DMZ Network (172.16.1/24)

Firewall (pfSense)
Load Balancer (HA Proxy)
      Config (ssh/scp)  
Backup L.B.
Web Servers (nginx)
      -Apache
      Traffic (https)-> Varnish
      cardconnect.com
Varnish Servers
       Config (ssh/scp)
Cache Servers (memcached)
       Data(moxi)
       Config (ssh/scp)
Application Servers (JBoss)
    -Config. (ssh/scp/JMX)
    -App Config+Code (.ear)
    -Gateway
    -Mercury Adapter
Database Cluster Server (Percona)
    -config/data (ssh/scp)
Bolt Server (HAProxy)
    -Config (ssh/scp)
Bolt Instances (NodeJS)
    -config App + code (scp)
    -Merury + FDMS North
*  Merury instances
*  New NodeJS instances (FDMS North)
File Servers (NFS)
    -configs (ssh/scp)
    -logs+data (ssh/scp)
Nagios – Monitoring server
JumpBox/Bastion Host
    -ssh access
Splunk cluster
    -collects all logs
Backup Server
-Data (ssh/scp)
VPN Concentrator
    -IPSec
    -Merury
    -Paymentech

Page 42
1 Q. Okay. And under paragraph 3, the
2 heading: Confidentiality of Proprietary
3 Information, there is section A: Proprietary
4 Information. Do you see where it states: To
5 the extent employee comes into possession of
6 proprietary information, employee agrees to
7 keep such information confidential at ail
8 times and not to disclose such information
9 directly or indirectly to anyone outside of
10 company or to use, copy, publish, summarize or
11 remove from company's premise such information
12 except to the extent necessary to -- as
13 necessary to carry out employees duties and
14 obligations?
15 A. Yes.
16 Q. Did you agree to that?
17 A. Yes.
18 Q. Okay. And B: Return of
19 Materials, do you see where it states: Upon
20 termination of employment or at any other
21 time when requested by company, employee
22 shall promptly return to company all property
23 of company and/or any affiliate without
24 retaining any copies, summaries,
25 excerpts?
Case 2:17-cv-04988-MAK Document 280-11 Filed 07/17/19 Page 43 of 84

Page 86
1 A. Sure, sure.
2 Q. The gateway?
3 A. The CardConnect Gateway, because
4 that's -- that's our product that --
5 MS. SOKOLOWSKI: Can we have
6 Exhibit 14 marked as P-74, please.
7 THE VIDEOGRAPHER: P-74.
8 (Exhibit P-74 was marked.)
9 BY MS. SOKOLOWSKI:
10 Q. I'm handing to you two documents,
11 first of which I just had the videographer
12 mark, P-74, and the second of which I had
13 marked at your deposition, Exhibit 64, and I
14 wanted to ask you if you recognize these
15 e-mails?
16 A. Yes. Yes.
17 Q. Does 74 appear to be an e-mail that
18 you forwarded to John Vighetti?
19 A. Yes.
20 Q. Was Mr. Vighetti employed by
21 CardConnect at the time?
22 A. At this time? No.
23 Q. When was this sent?
24 A. 10/21/15.
25 Q. Okay. Did you previously ask him for
Case 2:17-cv-04988-MAK Document 280-11 Filed 07/17/19 Page 87 of 84

Page 87
1 his e-mail address?
2 A. I did.
3 Q. Why?
4 A. Because in the second e-mail, the
5 one that has been previously marked 64 --
6 Q. I'm sorry, not to interrupt you --
7 A. Yes.
8 Q. -- but just to clarify, his e-mail
9 address, was that a CardConnect e-mail address
10 or his personal?
11 A. Okay. Sorry. I did ask John for
12 his personal e-mail address, because in the
13 e-mail that was marked 64, Rob Martin had sent
14 out a document that he wanted me to review for
15 him, and I wanted to get a second set of eyes,
16 and so I asked John for his personal e-mail
17 address so I could forward it to him to have
18 him review and to get some input on it.
19 Q. Was John Vighetti employed by
20 CardConnect at the time you sent this e-mail in
21 October?
22 A. No.
23 Q. Was Rob Martin a technical guy?
24 A. Not in the traditional sense. He --
25 his job was to be a liaison between the
Case 2:17-cv-04988-MAK Document 280-11 Filed 07/17/19 Page 88 of 84

Page 88
1 business side and the -- and developers.
2 Q. And what's reflected in 64, I think
3 you mentioned the Rob Martin e-mail, what was
4 attached to that that he wanted reviewed?
5 A. Let's see. I don't see an
6 attachment.
7 Q. I'm sorry. He had asked -- am I
8 correct that he had asked you to review
9 something about terminals?
10 A. Oh, yes. He had asked me to comment
11 on a proposed solution in regards to
12 terminals.
13 Q. But he hadn't actually attached the
14 terminals? Sorry.
15 A. No, no, no. The -- the information
16 was in the e-mail.
17 Q. I understand. I understand. Okay.
18 And then the first page of 74 is the e-mail
19 exchange, or the forwarding of the
20 information, correct?
21 A. Yes.
22 Q. What did John Vighetti do with
23 respect to -- well, strike that. Do you know
24 what John Vighetti did after you sent him this
25 P-74?
Case 2:17-cv-04988-MAK Document 280-11 Filed 07/17/19 Page 89 of 84

Page 89
1 A. Yes. He called me and we discussed
2 it.
3 Q. Was this information in 64 that was
4 shared with Mr. Vighetti confidential?
5 A. It was confidential.
6 Q. Okay. And can you turn to the second
7 page. Do you see the text in the middle:
8 "Hey, man. Sent a doc to you to review real
9 quick. I was approached about consulting and
10 ultimately a leadership role with a startup
11 processor called 'Shift4.' They are based out
12 of Vegas, and they do POS restaurant
13 systems"?
14 A. Uh-huh.
15 Q. You said yes?
16 A. Yes.
17 Q. Did you write that to Mr. Vighetti?
18 A. Yes.
19 Q. Okay. And the date on this, did we
20 already establish the date?
21 A. '15. 10/21.
22 Q. Ten -- what?
23 A. 21.
24 Q. 21. Okay. And then he wrote back
25 to you: "Sure. Shoot it over"?
Case 2:17-cv-04988-MAK Document 280-11 Filed 07/17/19 Page 90 of 84

Page 90
1 A. Yes.
2 Q. Okay. And is his e-mail address
3 redacted here?
4 A. Yes.
5 Q. Okay.
6 MS. SOKOLOWSKI: Exhibit P-75,
7 please.
8 THE VIDEOGRAPHER: P-75.
9 (Exhibit P-75 was marked.)
10 BY MS. SOKOLOWSKI:
11 Q. Sir, I had the videographer mark as
12 75 a series of e-mails. Do you recognize
13 those, sir?
14 A. Yes.
15 Q. Does this appear to be an additional
16 e-mail exchange between you and John Vighetti?
17 A. Yes.
18 Q. Was he employed by CardConnect at the
19 time?
20 A. At this time, no.
21 Q. What was the date of this e-mail
22 exchange?
23 A. This one was 11/5/15.
24 Q. November 5th?
25 A. Yes.
Case 2:17-cv-04988-MAK Document 280-11 Filed 07/17/19 Page 91 of 84

page 91
1 Q. Why did you send those e-mails to
2 John Vighetti?
3 A. I don't remember any specifics
4 about this particular e-mail. I do remember
5 during this time period that John and I would
6 talk quite a bit, and he had -- he had -- you
7 know, he had left CardConnect as part of the
8 acquisition, and so we had lost touch for a
9 while, and then we reestablished contact, so
10 -- and we worked together for a long time, so
11 we would -- we would reach out to each other
12 just on how things are going and that type of
13 stuff. And I don't, again, remember what was
14 in this particular e-mail.
15 Q. Okay. Do you -- let's start at --
16 with the bottom. There is a -- your --
17 looks like your name and then sent from
18 Verizon Wireless 4G LTE Droid?
19 A. Yes.
20 Q. Okay. And then it looks like
21 something from John, and then your answer: I'm
22 working to hopefully make my CardConnect stock
23 options worth something, LOL, but I wouldn't
24 rule out opportunities, but I wouldn't pursue
25 something full-time until sometime next
Case 2:17-cv-04988-MAK Document 280-11 Filed 07/17/19 Page 92 of 84

Page 92
1 year?
2 A. Yes.
3 Q. Did you write that to Mr. Vighetti?
4 A. Yes.
5 Q. Okay. And he stated to you in the
6 e-mail below that: I may have something for
7 you, are you looking?
8 A. Yes.
9 Q. Okay. And then you forwarded to him
10 a message above, correct?
11 A. Yes.
12 Q. Why did you forward that to him?
13 A. I do not remember.
14 Q. Do you know what it pertained to, the
15 e-mail that you forwarded to him?
16 A. No, I don't.
17 Q. Do you know whether by November 5th of
18 2015 you were considering leaving CardConnect?
19 A. I was not at that time, November
20 5th, actively like applying for jobs.
21 Q. Okay. But that doesn't answer my
22 question. Were you considering whether or not
23 you would leave?
24 A. Yes.
25 Q. Okay. And you were talking to
Case 2:17-cv-04988-MAK Document 280-11 Filed 07/17/19 Page 93 of 84

Page 93
1 Mr. Vighetti about that?
2 A. Yes. Well, I don't know if that
3 was the topic of this e-mail.
4 Q. Right.
5 A. But, yes.
6 Q. Okay.
7 A. Yes.
8 Q. Okay.
9 MS. SOKOLOWSKI: Exhibit P-76.
10 THE VIDEOGRAPHER: P-76.
11 (Exhibit P-76 was marked.)
12 BY MS. SOKOLOWSKI:
13 Q. Mr. Hrubesh, I marked as 76 an
14 e-mail. Do you recognize that, sir?
15 A. Yes.
16 Q. At the top it says from Pat Hrubesh
17 to John Vighetti with a date of 11/5/15?
18 A. Yes.
19 Q. Did you send that e-mail to John
20 Vighetti?
21 A. Yes.
22 Q. And there doesn't appear to be
23 anything written on the body of that e-mail; is
24 that correct?
25 A. Correct.
Case 2:17-cv-04988-MAK Document 280-11 Filed 07/17/19 Page 94 of 84

Page 94
1 Q. And this was not his CardConnect
2 e-mail address at the time?
3 A. Correct.
4 Q. Okay. And it looks like there is an
5 attachment called architecture.png?
6 A. Yes.
7 Q. Do you know what that was?
8 A. Most likely it was a diagram of
9 CardConnect.
10 Q. CardConnect architecture?
11 A. Yes.
12 Q. Was that confidential?
13 A. Yes.
14 Q. Why did you send that to
15 Mr. Vighetti?
16 A. I do not remember.
17 Q. Did you send any other documents to
18 Mr. Vighetti other than what's been marked
19 today and the e-mail exchanges?
20 A. I can't remember.
21 Q. Okay.
22 MS. SOKOLOWSKI: Thank you.
23 Exhibit P-77.
24 THE VIDEOGRAPHER: P-77.
25 (Exhibit P-77 was marked.)
Case 2:17-cv-04988-MAK Document 280-11 Filed 07/17/19 Page 95 of 84

Page 85
16 Q. All right. Thank you.
17 Sir, do you recognize this,
18 Plaintiff's 54?
19 A. Yes.
20 Q. Is this a printout of an email
21 from Pat Hrubesh to you?
22 A. Yes, it appears to be so.
23 Q. And the date on this email is
24 October 21st, 2015; is that correct?
25 A. Yes.
Case 2:17-cv-04988-MAK Document 280-12 Filed 07/17/19 Page 86 of 82

Page 86
1 Q. And do you recall receiving this
2 email from Mr. Hrubesh?
3 A. I do, yes.
4 Q. And what is the subject line of
5 the email?
6 A. "Review of a doc."
7 Q. And looking at the body of that
8 email, he writes, "Looking for you to take a
9 quick look at an email I received from Rob
10 Martin." Do you see that?
11 A. I do.
12 Q. Do you know who Rob Martin is?
13 A. I do, yes.
14 Q. And who is he?
15 A. At the time that I received this
16 email, he was an employee of CardConnect.
17 Q. Prior to receiving this email from
18 Mr. Hrubesh on October 21st, 2015, had you
19 had any conversation with him about reviewing
20 any documents from CardConnect?
21 A. Yes.
22 Q. Or about -- I'm sorry. Strike
23 that.
24 Had you had any conversation with
25 Mr. Hrubesh about your looking for another
Case 2:17-cv-04988-MAK Document 280-12 Filed 07/17/19 Page 87 of 82

Page 87
1 position around this time?
2 A. I had, yes.
3 Q. And what did you communicate with
4 him about?
5 A. That -- I told him that I had
6 been approached about some consulting work
7 initially and potentially another job
8 opportunity.
9 Q. And did he -- was he asking you to
10 stay informed about that?
11 A. He asked me to stay informed about
12 it, yes.
13 Q. And in a prior email to the one
14 attached here, had you provided him with a
15 personal email address for you; is that
16 correct?
17 A. That's correct.
18 Q. And is that the email address
19 that's listed here?
20 A. It is, yes.
21 Q. And then down below there -- the
22 text reads, "Hey, man. Sent a doc to you to
23 review real quick. I was approached about
24 consulting and ultimately a leadership role
25 with a startup processor called 'Shift4.'"
Case 2:17-cv-04988-MAK Document 280-12 Filed 07/17/19 Page 88 of 82

Page 88
1 Do you see that?
2 A. I do.
3 Q. Did you provide that to
4 Mr. Hrubesh, that language I just read?
5 A. Yes.
6 Q. And what was the rest of that
7 exchange?
8 A. Sorry. Ask that again. What was
9 the rest of the email exchange, you're
10 asking?
11 Q. Yes.
12 A. I responded, "Sure. Shoot it
13 over."
14 Q. At the time you engaged in this
15 email exchange with Mr. Hrubesh, had you been
16 contacted by anyone from Shift4?
17 A. I had, yes.
18 Q. Okay. And who contacted you from
19 Shift4?
20 A. Mike Russo.
21 Q. And do you know when Mr. Russo
22 contacted you?
23 A. Not the exact date, no.
24 Q. Do you know if it was at least
25 sometime in October of 2015?
Case 2:17-cv-04988-MAK Document 280-12 Filed 07/17/19 Page 89 of 82

Page 89
1 A. I believe so, yes.
2 Q. Had you interviewed with Shift4 as
3 of October 21st, 2015?
4 A. Yes.
5 Q. And do you recall when you
6 interviewed?
7 A. I don't recall the specific date,
8 no.
9 Q. Sometime in October?
10 A. I believe it was in October,
11 yes.
12 Q. And who did you interview with?
13 A. Initially Mike Russo and then I
14 had an in-person interview with Randy himself
15 and Mike Russo.
16 Q. And where was the in-person
17 interview?
18 A. At Shift4 headquarters in
19 Las Vegas.
20 Q. And what did you discuss with Mike
21 Russo and Randy Isaacman at this interview?
22 A. We had a general discussion about
23 my background, about Shift4's business, and
24 about their plans for potential expansion of
25 their business and the -- I guess the
Case 2:17-cv-04988-MAK Document 280-12 Filed 07/17/19 Page 90 of 82

Page 90
1 general requirements that they would have for
2 somebody that might be in the type of
3 position that they were describing to me.
4 MR. SHIELDS: Objection to form.
5 BY MS. SOKOLOWSKI:
6 Q. Did you continue to communicate
7 with Mr. Hrubesh about Shift4 after this email
8 exchange in Plaintiff's Exhibit 54?
9 A. Yes.

Page 1:
Shift4 Payments, LLC
[CONFIDENTIAL]
Prepared By: D. J. Hight
Date: 03/21/2018
Summary Judgment
Reference Materials Index
Description of Contents Document Type Bates # Tab
Jared Isaacman Deposition Transcript (Dec. 12, 2017) Deposition Transcript SHIFT4 000001-152 A Deposition
Excerpts:
Page 20 Line 17 – Page 29 Line 5
Page 80 Line 6 – Page 83 Line 22
Daniel Clarke Deposition Transcript (Jan. 9, 2018) Deposition Transcript SHIFT4 000153-272 B
Deposition Excerpts:
Page 32 Line 25 – Page 34 Line 11
Page 45 Line 13 – Page 47 Line 14
Page 48 Line 25 – Page 51 Line 8
Page 59 Line 10 – Page 61 Line 23
Patrick Hrubesh Deposition Transcript (Nov. 30, 2017) Deposition Transcript SHIFT4 000273-472 C Deposition
Excerpts:
Page 84 Line 16 – Page 95 Line 3
Page 169 Line 6 – Page 174 Line 8
Page 302 Line 4 – Page 325 Line 6
John Vighetti Deposition Transcript (Feb 2, 2018) Deposition Transcript SHIFT4 000473-606 D Deposition
Excerpts:
Page 85 Line 10 – Page 90 Line 10
Page 98 Line 22 – Page 101 Line 13
 Michael Russo Deposition Transcript (Oct. 17, 2018) Deposition Transcript SHIFT4 000608-768 E Deposition
Excerpts:
Page 226 Line 19 – Page 230 Line 22
Page 240 Line 11 – Page 251 Line 19
Shift4 Response to CardConnect First Set of
Interrogatories, Interrogatory No. 9 (Aug. 11, 2017)
Interrogatory SHIFT4 000769-775 F
Shift4 Supplemental Response to Interrogatory No. 9,
Interrogatory No. 6 (Nov. 16, 2017)
Interrogatory Response SHIFT4 000776-787 G
CardConnect Corp. Response to Shift4 Payments, LLC
Interrogatory No. 8 (Jan. 25, 2018)
Interrogatory Response SHIFT4 00788-789 H
First Amendment to Asset Purchase Agreement
(Nov. 4, 2015)
Asset Purchase Agreement SHIFT4 000800 I
Consulting Agreement
(Apr. 13, 2016)
Consulting Agreement SHIFT4 000801-809 J

Page 2:
Shift4 Payments, LLC
[CONFIDENTIAL]
Prepared By: D. J. Hight
Date: 03/21/2018
Summary Judgment
Reference Materials Index
Description of Contents Document Type Bates # Tab
CardConnect Response to Shift4 Second Set of
Interrogatories, Interrogatory No. 7 (Feb. 14, 2018)
Interrogatory Response SHIFT4 000810-811 K
Shift4 Payments LLC First Request for Production of
Documents, Set No. 1, Request No. 19. (Aug. 11,
2017)
Request for Production SHIFT4 000812-823 L
CardConnect Response to Shift4 Payments Request for
Production No. 19.
Response to Request for Production SHIFT4 000824-825 M
Jira Issue – Assigned to John Vighetti Jira Software CCGATEWAY-7402 N
Jira Issue – Assigned to John Vighetti Jira Software CCGATEWAY-6250 O
Jira Issue – Assigned to Pat Hrubesh Jira Software CCGATEWAY-7278 P
Jira Issue – Assigned to Pat Hrubesh Jira Software CCGATEWAY-7312 Q
Jira Issue – Assigned to Pat Hrubesh Jira Software CCGATEWAY-7351 R
Jira Issue – Assigned to Pat Hrubesh Jira Software CCGATEWAY-7363 S
Email dated March 5, 2015 10:28 AM, from Pat Hrubesh
to Jeff Shanahan, Subject: tokenization question.
Email CC007196-7197 T
Email dated June 2, 2015 8:55AM, from John Vighetti to
Chuck W., Subject: Merchant Boarding.
Email CC004044-4045 U
Email dated December 20, 2016 12:10PM, from Pat
Hrubesh to Dev Team, Randy Isaacman et al., Subject:
Source Code Location/Instructions.
Email CC012023 V
Email dated May 24, 2016 9:49AM, from Mike Russo to
John Vighetti, Subject: RE: Gateway Team.
Email CC011981-11982 W
Source Code – John Vighetti Source Code CCGATEWAY-6250-9992ff6 X
Source Code – John Vighetti Source Code CCGATEWAY-7402-68934f1 Y
Source Code – Patrick Hrubesh Source Code CCGATEWAY-7278-6e08bc9 Z
Source Code – Patrick Hrubesh Source Code CCGATEWAY-7312-a23d4fc AA
Source Code – Patrick Hrubesh Source Code CCGATEWAY-7351-2149751 BB
Source Code – Patrick Hrubesh Source Code CCGATEWAY-7363-494c6c2 CC