Our business only accepts credit card payments via invoices sent directly from Quickbooks. We have very few invoices each year that are paid via credit card, most are done via bank draft.  We do not process, keep or store any credit card payments, or take any credit card information ourselves. It is all done by the customers directly to their invoice.  Do we need to be concerned about PCI compliance? If so, how do we find the SAQ that is mentioned to be able to confirm our status? Thank you for any help you can give.