Documentation needed from QuickBooks for PCI Compliance
Quickbooks handles all credit card payments from our customers. I am trying to complete the Self-Assessment Questionnaire A. As the TPSP, Quickbooks needs to provide written information so we meet the Questionnaire’s requirements. I need a link to the document(s) needed or contact information for someone who can help. QB’s "help/ contact us" folks don't seem to know anything about credit card processing or PCI compliance. The Merchant Payment Terms of Service, QB’s Attestation of Compliance, and QB’s Attestation of Validation do not meet the requirements.
12.8.2 requires a written agreement from QB, stating they are “responsible for the security of the account data it may store, process, or transmit on behalf of the customer or to the extent the TPSP may impact the security of a customer’s cardholder data and/or sensitive authentication data.”
12.10.1 requires an incident response plan, which requires a way to contact QB immediately if there is an issue.