My concern with this is I tried to set this up and when through the steps and when it asks to send you an email to verify you are who you say you are, it never sends the email. I have also received emails from some automated system from security metrics to ask that we become PCI compliant but when you respond to the emails, it goes to a no-reply email and it won't send. These events make me feel like the PCI stuff with security metrics is a load of BS. 

If it is not a load of crap then security metrics needs to get their stuff together. I find it hard to believe that someone who wants us to be compliant with something can't update their stuff to make it look a litter more legit. 

Quick books just seems as though they want more money every year. Why weren't we also notified of this when setting up the QB account. I feel like this is something that should be mentioned and discussed for you to maintain yearly. 

And as it's been stated by others, QB is the one processing the CC information that the customers put in on their end. We are not entering in these customers cards or information. I do not store their information at all.