Greetings, @machelle.

Since you’re processing payments, it’s important to note that you’re required to be PCI compliant. While QuickBooks is PCI compliant, this doesn’t automatically make its users PCI-compliant. Also, even though you’re not storing information, you’re still required to ensure PCI compliance and attest to it.

QuickBooks has partnered with SecurityMetrics to help users manage their PCI compliance requirements, and there is a fee involved for using their services. However, if you are already PCI compliant through another provider, you don’t need to pay another company and can simply disregard the marketing emails or any information related to compliance services. 

You can check this article to learn more about PCI requirements: Learn about QuickBooks PCI DSS Compliance Services.

Let us know if you have any other concerns.