Not keeping bug tracking notes inhouse in an ALM like TFS but instead using SaaS in the sky like Fogbugz...

...will get you dinged points in a PCI audit.