Skip to main content

Get 50% OFF QuickBooks for 3 months*

Buy now
Switch to QuickBooks and 70% off for 3 Months
September 17, 2024
Question

Who should I send PCI compliance-related material to in QuickBooks and/or Intuit? Is there a specific contact I should send this material to?

  • September 17, 2024
  • 1 reply
  • 14 views
I would like to affirm our business's PCI compliance with QuickBooks, but I'm not exactly sure what documents to send or who to send them to. I'd appreciate any help you can give me.

1 reply

Moderator
September 17, 2024

Good day to you, David. I'm here to provide additional details about your QuickBooks Payment Card Industry (PCI) compliance concern.

 

Since you are already PCI-compliant outside Intuit, you don't need to be compliant with Intuit for as long as cardholder information and authentication data are protected.

 

That said, you don't need to submit the certification to us, as Intuit does not require proof of PCI compliance at this time. You can keep it since we don’t need to retain this on our side unless you have had a breach or

Common Point of Purchase inquiry.

 

In case you want to comply with us, you can refer to these resources that answer frequently asked questions about the partnership between Intuit and SecurityMetrics for the PCI compliance process:

 

 

Don't hesitate to click the Reply button below if you have further questions or concerns about PCI compliance. We're always looking forward to assisting you. Stay safe always!

March 15, 2026

Are you saying that I don't need PCI Compliance through Intuit because I am compliant with another company? Especially when we don't handle any sensitive information in Intuit like credit card/debit card information.

QuickBooks Team
March 15, 2026

Hi, MI. Yes, you don’t need separate PCI compliance through Intuit. Just keep using your current PCI provider. PCI compliance is about the overall security of your business when handling sensitive card data, rather than being tied to any specific software. Your existing PCI validation is your proof that your business is secure.

 

You can revisit this thread if you have follow-up questions.