{"id":104331,"date":"2025-02-23T01:22:32","date_gmt":"2025-02-23T01:22:32","guid":{"rendered":"https:\/\/peraltafinancing.com\/accounting\/why-am-i-getting-so-many-emails-about-quickbooks-pci-compliance\/"},"modified":"2025-02-23T01:22:32","modified_gmt":"2025-02-23T01:22:32","slug":"why-am-i-getting-so-many-emails-about-quickbooks-pci-compliance","status":"publish","type":"post","link":"https:\/\/fivemor.com\/?p=104331","title":{"rendered":"Why Am I Getting So Many Emails About QuickBooks PCI Compliance?"},"content":{"rendered":"


\n<\/p>\n

\n
\"Upset<\/a><\/figure>\n

There\u2019s been a ton of confusion lately among QuickBooks Online users due to a series of emails from Intuit about the importance of PCI compliance<\/a> (that part\u2019s true, it is important), which they follow up with a plug to encourage you work with their \u201cpartner,\u201d SecurityMetrics. Problem is, they are surprisingly quiet about the fact that QB Payments\u2026 is already PCI compliant.<\/p>\n

From Intuit<\/a>:
It\u2019s important to note that QuickBooks applications themselves maintain a high level of security. However, the security of your overall environment can be influenced by other applications used in conjunction with QuickBooks. As for the use of QuickBooks Payments services, it\u2019s essential to understand that merely utilizing these services does not automatically make you PCI compliant. It\u2019s also crucial to recognize that as a merchant, you hold the responsibility of safeguarding payment card information and adhering to PCI compliance requirements.<\/em><\/p>\n

Short answer \u2014 chances are that you don\u2019t need to pay their \u201cpartner\u201d (aka Intuit is likely receiving referral fees) to confirm that you and your clients are probably already PCI compliant if you\u2019re using QB Payments. But that doesn\u2019t mean you shouldn\u2019t review your workflows and integrations with other software to see if there\u2019s a step in your process that doesn\u2019t comply.<\/p>\n

Here\u2019s what my amazing colleague, the QB Rockstar herself, Alicia Katz-Pollock, had to say about it on facebook<\/a>:<\/p>\n

You know those emails Intuit is sending about PCI Compliance? QB Payments is already compliant. At issue is how you\u2019re gathering those credit card numbers and bank account data.<\/em><\/p>\n

If you\u2019re using a workflow where the client enters the info, you\u2019re fine. If you\u2019re talking to the customer and manually entering it into QBO, you\u2019re fine, though you also need to be on an isolated computer, not on a network, if you\u2019re typing in the info.<\/em><\/p>\n

But if you\u2019re still using those old forms QBO used to provide, or have the information written down, or are saving it in your computer system, you\u2019re NOT fine.<\/em><\/p>\n

You do NOT need to hire the service in the email and pay $150\/year. All you have to do is self-assess, and change your procedures if you\u2019re out of compliance.<\/em><\/p>\n

Here is the official document!
https:\/\/listings.pcisecuritystandards.org\/documents\/SAQ-InstrGuidelines-v3_2.pdf<\/a><\/em><\/p>\n

A follow-up question she received:<\/p>\n

Q: For old clients who completed an agreement years ago with those old QBO forms, how do you move to compliance for those? Just delete and get rid of their old forms?
A: Yes, delete any forms you have saved (and empty your trash)!<\/em><\/p>\n

(Side note: Alicia\u2019s company Royalwise<\/a> is my #1 go-to for technical training in QuickBooks, whether for small business owners or bookkeepers, and I\u2019ll be doing a class for her later this year! Here\u2019s my affiliate link for her catalog<\/a> \u2014 check it out.)<\/p>\n

Another good friend in the QuickBooks world, Dan DeLong, of School of Bookkeeping<\/a> (yes, that\u2019s another affiliate link), wrote up a blog post where you\u2019ll discover<\/a>:<\/p>\n