We don’t deal with customers directly. I don’t think my business needs this service.

If your business has personally identifiable information on customers, employees, or vendors, then you are required to safeguard that personal information.