The official answer does not actually answer our questions and it took a user to call and answer for us.  I want to echo the question once more and really would like a concrete official answer.  Since we do not process or save anything regarding payments, why are we being pushed to do this compliance process?  The security of our desktop computers where we send our invoices from has no bearing to the question.  We do not store and process the payment systems.  Intuit is responsible for that. So once again, why are we being pushed this? I literally panic from the 12,000 emails I get about this which compresses my eyebrows every time.