I have received an email from QBO stating that we should cover PCI compliance. The question is Does QBO not already provide PCI compliance with us?

Yes, you must meet PCI compliance requirements to avoid fines, audit costs, and additional restrictions, Enes1. Allow me to provide more information on this topic.

Intuit and QuickBooks products are listed as compliant on the PCI Security Standards Council website. While QuickBooks applications are secure, other applications on your local computer or network can compromise the security of your environment. Using QuickBooks Payments services does not automatically guarantee PCI compliance.

To add PCI services, Intuit has partnered with SecurityMetrics to simplify the PCI compliance validation process. SecurityMetrics charges merchants an annual fee. If you choose to use SecurityMetrics, you need to create an account with them. After completing SecurityMetrics’ FastPass, you can select the PCI package that best meets your requirements. From there, complete a Self-Assessment Questionnaire (SAQ) and set up your scans.

For more details about PCI DSS compliance, refer to these articles:

• Learn about QuickBooks PCI Compliance
• Learn about the PCI DSS Compliance Services

For future reference, you may want to understand how QuickBooks Payments processes bank data and transactions. Check out this article for more information: Learn about Level 3 data processing in QuickBooks Payments.

Do you have other questions about being PCI DSS Compliant or having payments-related concerns? Don't hesitate to return here. We're here to help and would be delighted to assist you!