@PaymentsGuardian You know that's not strictly true (it depends on many factors, also see comments in this thread with feedback from QB), but hey, you are actually in the business of 'selling' PCI compliance  

And for a fact, I don't need to be paying SecurityMetrics for PCI compliance, which is the whole point of this thread - the heavy handed way QB has communicated this matter and the lack of clear instruction and information. I would guess any of the commentors and readers here have no desire to expose their customer data, be subject to hacks/fraud, or less secure, but the initial 'marketing' emails (not 'communications') from QB were not helpful.