Talk to your books.

The connector reads QuickBooks live without keeping a synchronized copy of your ledger. We retain account and connection details, usage records and saved rules. If you use the document box, we store files and extracted text. Autopilot also stores conversations, proposals and history that can contain QuickBooks data. If you connect a vendor portal, our hosted-browser provider keeps its sign-in session so invoices can be collected again. Our privacy policy explains retention and AI providers.

No. You connect through Intuit’s own sign-in, and Intuit gives us a token that opens only your books. We keep that token encrypted (AES-256). Revoke it at any time, from the portal or from Intuit, and access stops at once. Caribooks has no password of its own either: you sign in with a link sent to your email, or with Google or Microsoft.

The database and your files are in Montréal (Supabase, AWS ca-central-1), and the app runs on Vercel in Montréal. Some processing happens outside Canada: Autopilot keeps the state of its runs in Virginia, vendor portal sessions are hosted in the United States, and AI requests go to the providers named on our security page.

Not by us. Caribooks does not sell your data or train models on it, and the models it runs to read documents and run loops are called with no retention and no training. Inside your assistant, the assistant’s own rules apply: Anthropic excludes raw connector responses from training, and with ChatGPT or Copilot your plan and data settings decide.

No one, until you enable write access, company by company. Every delete requires a confirmation.

A new loop only proposes. Each change waits in Approvals with the document behind it until you approve it. Deleting, voiding and sending always need your confirmation, whatever the setting. Every change that gets applied can be undone, and you can pause one loop or all of them.

No. A connected mailbox is searched only for mail from vendors in your books, to bring their invoices into your document box. Caribooks never sends, moves or deletes a message, and you can disconnect the mailbox at any time.

Not yet, and we won’t claim a certification we don’t hold. Our security page lays out what we do today: encrypted tokens, read-only by default, and where each piece of data lives. To ask anything or report a vulnerability, write to support@caribooks.com.

The official connector handles the sales side: invoices, estimates, payment links, customers, plus a profit and loss and a cash flow statement. That is where it stops, and Intuit says as much in its own documentation. Caribooks reaches the rest of the ledger: balance sheet, trial balance, general ledger, receivables and payables aging, vendor bills, expenses, journal entries. Thirty-five reports, across as many company files as you connect. Intuit does publish a developer version that goes deeper, but it runs on your own machine and wants an Intuit developer app and an OAuth callback before it will start. Caribooks gives you that depth with the one-click setup.