I'm in the same boat as the above.. frustrated at Security Metric's threats, real and implied.  That's not the way to do business unless you are a scammer..   My company is a non-profit, and we process donations entirely through QuickBooks Online.  We never touch a credit card, or its associated data.  Our donors respond to an invoice, use whatever payment method they like, and the money goes straight to our bank.  No credit card data storage or transmission by my company, ever.  I'm happy to fill out whatever Intuit form (SAQ) there is to attest to same, but I'm not going to go through Security Metric's paywall to do that.  Get better, Intuit.  QBO is excellent and I would hate to stop using it, but I certainly can do that if you insist on insulting your customers.