What about customers remotely using QBDT through Right Networks? They have a severe security set up to the point where most QB feature are not even available to update without them and we pay greatly, monthly for that security in the bundle we pay for hosting, so to me this seems like in our situation, the Right  Works security coupled with our same situation as almost everyone in this thread (we never run cards in office, most payments are via ACH unless we open the option for card payments via the invoice in the email and we never touch a card) we are or should be in the clear for this feature?