If we do not take credit card payments with cards in hand, but instead only allow customers to pay via the credit card payment links (using Intuit Merchant Services) sent by the Quickbooks software to our client, is it REQUIRED that we create an account and pay a fee to Security Metrics? Is it required that we complete the SAQ?