I just got a call from "QB official Partner" SecurityMetrics, for PCI Compliance and I will tell you it feels very scammy. When I told him that I would not pay for compliance he said "OK, I will note your file that you are refusing to be compliant". I called QB and was told that if I am not housing the credit card information or saving the data that it is QB that is responsible to being compliant. I have to tell you this is all confusing, and honestly, I felt a little threatened by the guy that called me.