Security
What we promise, and how we keep each promise.
We handle sensitive financial data. Here is specifically how we protect it, written so you can repeat it to your own clients.
We never change your QuickBooks.
BetterFinanceView can only read your clients' QuickBooks Online books. There is no code in it that creates, changes, or deletes anything there, so the promise doesn't depend on a setting or a policy.
Promises
What we promise, and how.
We never change QuickBooks.
HowBetterFinanceView can only read QuickBooks. Nothing in it can create, change, or delete anything there.
Your controlDisconnect a client from BetterFinanceView or from QuickBooks at any time.
Your firm's data stays yours.
HowEvery record belongs to one firm. Database access rules and checks in our server code keep each firm's data separate.
Your controlOwner, Admin, Reviewer, and View-only roles.
Connections are locked down.
HowEverything between your browser and our network travels encrypted, our servers are in the United States, and your QuickBooks connections are stored encrypted. Clients connect through Intuit, so we never see a QuickBooks password.
Your controlIf a connection stops working, we flag it in the app so you can reconnect.
AI sees only what each job needs.
HowFor some flagged items, Claude (Anthropic's AI) gets the details it needs to suggest the right account or explain a spending jump: the date, vendor, amount, and accounts involved, but not your client's name.
Your controlSuggestions are never applied for you. Your data is not used to train AI models.
Safeguards
More detail.
QuickBooks Desktop files
QuickBooks Desktop (IIF) support is on the way. Those files hold full transaction detail, so before it launches we will publish how they are stored, how to delete them, and how long your firm can keep them.
Team roles
Team members are Owners, Admins, Reviewers, or View-only. Reviewers can act on issues but cannot change firm settings or billing. View-only members can see everything and change nothing.
Where it runs
The app and database run on servers we operate in a data center in the United States, behind Cloudflare. Everything between your browser and our network is encrypted. We back up our servers and keep each backup for up to 90 days.
Passwords and sign-in
Passwords are scrambled one way before we store them, so even we cannot read them. Accounts require a verified email address, and password resets go only to that address.
QuickBooks connections
Connections to QuickBooks renew automatically in the background. If one stops working, we flag it in the app so you can reconnect, instead of quietly retrying.
Things we don't do
A short list. Hold us to it.
AI
Exactly what Claude sees.
When an audit flags a transaction as miscoded, or as uncategorized with a known vendor, Claude suggests a better account. For big spending jumps, it explains the increase and what to check. Each audit sends at most 20 items, and Claude never gets your client's name. For each item it gets:
- the date, vendor, and amount, where the item has them
- the account it's coded to now
- for a miscoded item: the account that vendor usually goes to, and how many of its past transactions went there or were left uncategorized
- for a spending jump: the account's total and number of transactions in the audited month, and its average monthly spend over the three months before
- when suggesting an account: up to ten account names and numbers from the client's chart of accounts
We don't use your data to train AI models, and suggestions are never applied to your books for you. Anthropic processes this data under its Commercial Terms, which do not allow it to train models on this data.
Found a security issue?
Please disclose it responsibly to [email protected]. We take every report seriously and respond promptly.