Did you ever get a straight answer? Here we are 10 months later (after your post) and in my search for "where to send the assessment" I stumbled on this thread, plus a few others that are equally upsetting. We used Security Metrics last year and will never use them again. They have very, very poor business practices. Piranhas! I paid them July 15, 2024 and they started harassing me in September! Saying my account was set to expire. Fear tactics. I complained to QBs and they eventually laid off, until the last two months. They are now hounding me via repeated emails, several emails a day. After a few days they started calling me DEMANDING I call them back. Emails just kept coming in along with repeated phone calls, that went to voicemail. I'm now blocking their phone number. They are using the same pressure as you might experience from a nasty car salesman (not all car salesmen are bad, but many use this same badgering method). This is a total money grab and Quickbooks should be ashamed of themselves for unleashing this beast on their customers. We pay plenty to do business here and should be treated with some form of respect. Our business doesn't retain any card data. Everything is entered on QBs online. We don't even take credit or debit if we can help it. The card fees were eating us alive and we went to ACH billing. We have maybe 4 or 5 accounts at the most who are using a card, with no saved data on our end. I really need these people to leave me alone and for someone to tell me where to submit my "Self-Assessment". After reading everything in this community it appears that I didn't even need to complete the assessment. Security Metrics could have mentioned that before they took my money. Someone should have mentioned to us that we did not have the pay the crooks! That we could self assess. QBs give a link the the standards but evidently hasn't read rules themselves!
Message to Quickbooks: I have completed the SAQ, my business is compliant. Since you are providing no way to send it to you, I will be filing it into my file cabinet. If you ever create a department to manage the process of compliantcy please let us know.
