Your clients' data stays your clients' data.
Every firm is isolated. Every client is isolated within the firm. Nothing crosses tenant boundaries. We don't train AI models on your data.
Every firm is isolated. Every client is isolated within the firm. Nothing crosses tenant boundaries. We don't train AI models on your data.
When the AI proposes a change to QuickBooks, the firm user has to confirm before it commits. Every write is audit-logged and reversible from inside QuickBooks itself.
When you upload a bank statement or check PDF for processing, the file lives in memory just long enough for the AI to read it. The CSV result comes back, the PDF is discarded. Nothing on our disk.
We use Intuit's official OAuth flow. We never ask for your QuickBooks password. You can disconnect any client at any time.
Every sign-in is protected by a second factor — a one-time code from your authenticator app — so a stolen password isn't enough to get into your firm. On by default for firm users, and available for client logins.
Data in transit is encrypted. Data at rest is encrypted. Industry standard, not "we wrote our own."
Two firm roles (Admin and Member), client role separate, super-admin role separate. Permissions are checked on every single API call — not just at login.
booked. is opening to a small group of founding firms. Add your name and we'll email you the moment your firm's spot is ready.