Security

How we handle your QuickBooks data.

Connecting your books to anything deserves a straight answer first. Here is what Arclite reads, what it never touches, and what we do not have yet.

The short version

Nothing happens without you.

Arclite reads your ledger, and writes back only what you have approved. Data is encrypted in transit and credentials are encrypted at rest. The rest of this page is the detail behind those two sentences.

What Arclite reads

  • Open invoicesWho owes you, how much, and when it was raised.
  • Payment historyHow each customer has actually paid you before. This is what times the forecast.
  • Bills and vendorsWhat is due, to whom, and when.
  • Account balancesThe cash position QuickBooks is carrying today.
  • Your live bank balance, if you connect itOptional, read-only, and only because the QuickBooks balance can lag a few days.

Arclite pulls a copy to build the forecast. Reading changes nothing in your books.

What it writes back

  • PaymentsArclite records and applies payments in QuickBooks, after you approve each one.
  • InvoicesIt can create an invoice or edit one. The change sits there until you approve it.
  • Nothing elseIt does not void, delete or reconcile anything, and it does not touch your chart of accounts.

Every one of these waits for your approval. Nothing posts on its own.

What it never touches

  • Anything you have not approvedNo payment is recorded and no invoice changes until you say so. There is no silent write.
  • Your QuickBooks passwordArclite never sees it and never stores it. You sign in at Intuit, not here.
  • Your customers' inboxesNothing sends to a customer without your approval.
  • Your moneyRecording a payment is a bookkeeping entry, not a transfer. Arclite does not hold or move your money.
  • General-purpose AI trainingOur AI providers are contractually barred from training general models on your data. We do use aggregated, anonymized data that identifies nobody.

If a thing on this list ever needs to happen, you are the one who does it.

The connection

You authorize it at Intuit. You can revoke it at Intuit.

Arclite integrates directly with QuickBooks Online through Intuit's official connection. That matters for one practical reason: the permission is yours, it lives in your account, and you can take it back without asking us.

  1. 1. You authorize at Intuit

    The connection uses OAuth. You approve it on Intuit's own screen, inside your QuickBooks account.

  2. 2. Arclite gets a scoped token

    No password changes hands. Arclite never sees or stores your QuickBooks password.

  3. 3. You revoke it whenever you want

    The authorization lives in your Intuit account. Remove it there and the connection is gone.

  4. 4. The forecast freezes

    With no connection, the numbers stop updating and reminders stop going out until you reconnect.

Connecting your bank is a separate, optional step. It is also read-only. It exists so Arclite can show a live balance instead of the QuickBooks balance, which can lag a few days behind. Skip it and everything else still works.

Access

Four groups. That is the whole list.

  • YouFull access to your own numbers. It is your ledger, connected by you.
  • People you inviteYour bookkeeper, your CFO, your partner. They see what you gave them access to.
  • Your advisorAn advisor sees only the clients who added them. Never the rest of their book, never yours unless you added them.
  • Arclite staffNobody at Arclite looks at your data unless you ask us to help with something specific.

Adding your accountant does not widen the circle.

Invite a bookkeeper, a CPA or a fractional CFO as a collaborator and they see your numbers alongside you. The reverse is also true. An advisor running Arclite across a client book sees only the clients who added them.

  • You chooseAccess is something you grant, one person at a time, from Settings.
  • Scoped per clientAn advisor's view is built from the clients who added them, and nothing else.
  • Support is opt-inNobody at Arclite looks at your data unless you ask us to help with something specific.
Keeping and deleting

Leave, and the data goes with you.

While you are a customer

Arclite stores what it reads from QuickBooks so the forecast stays current without you re-importing anything. It is encrypted in transit, and sensitive credentials are encrypted at rest. Our AI providers are contractually barred from training general-purpose models on it. Aggregated, anonymized data that identifies nobody is used for analytics and product work.

When you cancel

Cancel and you can export your data for 30 days. After that we delete or anonymize it, apart from anything we have to keep to meet a legal obligation. Ask for deletion sooner and we will do it sooner. You can also revoke the QuickBooks authorization inside Intuit first, which stops anything new from coming in.

Being straight with you

What we do not have yet.

SOC 2: not certified.

Arclite is not SOC 2 certified. We are working toward it and we will publish the report when it is done. Until then there is no badge on this page, because there is nothing to put a badge on.

We would rather tell you that now than have you find out in a procurement questionnaire. If your controller needs answers we have not written down here, ask us and you will get a straight one, including where the answer is "not yet".

Everything above holds on the trial too. Start a 7-day trial, nothing charged until day 7, and revoke the QuickBooks authorization at Intuit the moment you want it gone.

FAQ

The questions owners ask first.

The invoices, bills, balances and payment history it needs to build the forecast and rank what to pay. It writes back too: it records and applies payments and can create or edit an invoice. Every write waits for your approval, and nothing posts on its own.

Data is encrypted in transit and credentials are encrypted at rest. Arclite connects to QuickBooks and to your bank through their official connections, and we never see or store your QuickBooks password.

No. Arclite drafts collection reminders and ranks bills for payment. Nothing sends to a customer without your approval, payments never move on their own, and Arclite does not hold or move your money.

You and the people you invite. An advisor sees only the clients who added them. Nobody at Arclite looks at your data unless you ask us to help with something specific.

Not in a way that identifies you. Our AI providers are contractually barred from training general-purpose models on your data. Arclite does use aggregated, anonymized data that identifies nobody, for analytics, benchmarking and product improvement. The Privacy Policy and the Terms both spell this out.

Yes. The connection uses OAuth, so the authorization lives inside your Intuit account and you can revoke it there at any time. Cancel and you can export your data for 30 days. After that we delete or anonymize it. Ask for deletion sooner and we will do it sooner.

Not yet. We are working toward it and will publish the report when it is done. In the meantime, ask us anything about how we handle data and you will get a straight answer.

Connect it and see for yourself.

Seven days, nothing charged until day 7. Revoke the QuickBooks authorization at Intuit any time you want.

$50/month. 7-day trial. Cancel in one click.

Advisor? Book a partnership call