For Dq Treat locations, what is a 'Configuration Exception' according to the FDD?
Dq_Treat Franchise · 2025 FDDAnswer from 2025 FDD Document
- 17.2. "Configuration Exception" shall mean a written exception to a configuration policy from Dairy Queen, describing the Participating Location and the requested exception in sufficient detail to allow Acumera to fulfill the request.
Source: Item 17 — The following paragraph is added to the end of Item 17 of the Disclosure Document: (FDD pages 70–378)
What This Means (2025 FDD)
According to Dq Treat's 2025 Franchise Disclosure Document, a 'Configuration Exception' refers to a specific, written authorization from Dairy Queen that allows a Dq Treat location to deviate from the standard security configurations and policies established for the Dairy Queen system. This exception is required for franchisees who want Acumera (the company that establishes firewall configuration and policy) to configure their equipment in a way that doesn't align with the standard security protocols.
For a Dq Treat franchisee, this means that if they need a non-standard configuration for their equipment, they must first obtain written approval from Dairy Queen. This approval needs to detail the specific location and the requested exception clearly enough for Acumera to implement it. Dq Treat has committed to responding to these requests within two business days.
It's important to note that Acumera is willing to implement these configuration exceptions, even if they contradict Acumera's own recommendations, PCI-DSS standards, or general data security best practices. However, Acumera assumes no liability for any issues that arise due to fulfilling these requests. This places the responsibility and risk associated with non-standard configurations squarely on the franchisee. Furthermore, Acumera will not allow non-CDE network traffic within the CDE unless a Configuration Exception from Dairy Queen is provided. Similarly, Acumera will not open firewall ports for non-business related needs without a Configuration Exception from Dairy Queen.
This process highlights the importance of adhering to standard security configurations to protect card data and minimize potential liabilities. Franchisees should carefully consider the implications of requesting a configuration exception and ensure they understand the associated risks before proceeding. It also demonstrates the need for clear communication and documentation when requesting deviations from established security protocols.