AI tools and client data

Is Intuit Intelligence safe for client data?

Short answer: Whether Intuit Intelligence is safe for client data turns on which plan your staff are on, which account they signed in with, and what you have told them they may put in it — not on the product itself. On Simple Start and Essentials and on Plus, Intuit may use what staff type to train its models. Every fact on this page is Intuit's own, quoted from its own pages and dated, and where we did not find a statement this page says so rather than filling the gap. Obsidian Ridge's free 30-day AI security assessment shows which AI tools your staff actually use.

By Kfir Yair, CISSP. Published . Updated .

See which AI tools your staff use

Plan by plan, in Intuit’s own words

The AI inside QuickBooks: it categorises transactions, drafts invoices, answers questions about the books and can take actions in them. A firm does not install it — it arrives with the subscription, over the client ledgers already there. Intuit shipped it as Intuit Assist.

What you are askingSimple Start and EssentialsPlus
Trains the vendor's models by defaultYes. Intuit lists training its own models among the purposes it may use personal information for.“Improve and develop our products and services by analyzing how they are used and interacted with, by training our artificial intelligence models…” source, read Yes. Intuit lists training its own models among the purposes it may use personal information for.“Improve and develop our products and services by analyzing how they are used and interacted with, by training our artificial intelligence models…” source, read
How to turn training offNot found in the pages we read.Not found in the pages we read.
How long data is keptThere is no period. Intuit says a deletion request does not end its retention where it has another reason to keep the record.“Even if you submit a deletion request or if our contractual relationship has ended, we may be required to maintain your personal information…” source, read There is no period. Intuit says a deletion request does not end its retention where it has another reason to keep the record.“Even if you submit a deletion request or if our contractual relationship has ended, we may be required to maintain your personal information…” source, read
What an admin can see or controlRole-based access and a guardrail for what the AI may do unsupervised, set by whoever administers the books.“Set the guardrails for what QuickBooks runs on its own and who can access based on roles.” source, read Role-based access and a guardrail for what the AI may do unsupervised, set by whoever administers the books.“Set the guardrails for what QuickBooks runs on its own and who can access based on roles.” source, read
Single sign-onNot found in the pages we read.Not found in the pages we read.
Business Associate AgreementNot found in the pages we read.Not found in the pages we read.
Where the data is processedNot found in the pages we read.Not found in the pages we read.

An empty cell is not a reassurance and not a criticism. "Not found in the pages we read." means the Intuit pages listed under Sources, read on the dates shown, do not answer it — so there is nothing for us to repeat, and something for you to ask Intuit before client information goes near it.

What this means for

The duty does not change because the tool is new. What changes is where the client information ends up.

  • Law firms. A client confidence pasted into a personal account has left the firm’s control. Our law firm page sets out the duties we build evidence for; the decision here is whether a personal account may touch a client matter at all.
  • Dental and medical practices. We didn't find a BAA statement in the pages listed below; ask Intuit before any patient data goes in. See dental practices.
  • CPA and accounting firms. Your written information security plan has to describe the tools people actually use, not the ones you approved. See accounting firms.
  • Financial advisers. Client account data in a personal assistant is the exposure; see financial advisers.
  • Software teams. A coding assistant reads the repository and can run commands, so the question is what it can reach, not what it was asked. See what AI agents on work laptops can reach.

How to tell which version your staff use

The plan is the whole answer, and you cannot tell from the outside. Three ways to find out, in order of how much they prove.

  1. 1. Ask

    Quick, free, and incomplete. People forget the tool they installed once and the account they signed in with.

  2. 2. Look at the billing and the admin console

    This finds what the business pays for. It does not find a personal account, which is the one that matters here.

  3. 3. Look on the computers

    A tool somebody installed themselves never appears in an IT list. Obsidian Ridge’s free 30-day AI security assessment takes a quiet inventory for 30 days and shows what each tool could reach, then a CISSP goes through it with you. See the assessment, or read a sample set of findings.

Settings to check today

From Intuit’s own documentation. Each one is a change somebody can make this afternoon.

  • Decide what the AI may share outside QuickBooks before anyone connects it to anything, because Intuit makes that your call.“Your financial data lives securely in QuickBooks and is shared only where you decide.” source, read
  • Route the exceptions to a person. Intuit says they go to you or your accountant, so decide which, and tell them.“Exceptions go to you or your accountant for review.” source, read
  • Keep the audit history. Intuit says an action can be undone and the original records stay, which is what you would show a reviewer.“Any action taken in your books is reviewable, reversible, and yours.” source, read

Worth knowing

  • Intuit's AI providers are service providers under the same privacy statement, so the training purpose above is not the only place client data travels.“Service providers or agents also include AI providers, including generative AI providers.” source, read
  • Intuit publishes this for the QuickBooks connector to Claude. The privacy statement quoted in the table above lists training Intuit's own models among its purposes. Both are Intuit's own statements; ask Intuit which applies to your plan.“Intuit does not use your QuickBooks data to train Claude.” source, read
  • The same connector page says this about Intuit's agreements. Ask Intuit which models and which agreements it covers for your plan.“Intuit’s agreements explicitly prohibit the use of customer data for model training.” source, read
  • The connector writes as well as reads, so a prompt can create a client-facing document. Intuit says a deletion is confirmed first; a creation is not.“Claude can create invoices too, not just read them.” source, read

Questions we get asked

Is Intuit Intelligence safe for client data?

Whether Intuit Intelligence is safe for client data turns on which plan your staff are on, which account they signed in with, and what you have told them they may put in it — not on the product itself.

On Simple Start and Essentials and on Plus, Intuit may use what staff type to train its models.

Every fact on this page is Intuit's own, quoted from its own pages and dated, and where we did not find a statement this page says so rather than filling the gap.

Does Intuit train its models on what we put into Intuit Intelligence?

On Simple Start and Essentials and on Plus, Intuit may use what staff type to train its models. On Simple Start and Essentials, Plus: Yes. Intuit lists training its own models among the purposes it may use personal information for.

Intuit's own words: "Improve and develop our products and services by analyzing how they are used and interacted with, by training our artificial intelligence models…" (read 2026-11-03).

How long does Intuit keep what we put into Intuit Intelligence?

On Simple Start and Essentials, Plus: There is no period. Intuit says a deletion request does not end its retention where it has another reason to keep the record.

Intuit's own words: "Even if you submit a deletion request or if our contractual relationship has ended, we may be required to maintain your personal information…" (read 2026-11-03).

Can an administrator read what we put into Intuit Intelligence?

On Simple Start and Essentials, Plus: Role-based access and a guardrail for what the AI may do unsupervised, set by whoever administers the books. Intuit's own words: "Set the guardrails for what QuickBooks runs on its own and who can access based on roles." (read 2026-11-03).

Will Intuit sign a Business Associate Agreement for Intuit Intelligence?

We didn't find a BAA statement in the pages listed below; ask Intuit before any patient data goes in.

How do we find out which version of Intuit Intelligence our staff are using?

Intuit sells this to practices rather than to individuals, so there is no personal account to find.

What decides the answers above is which plan your practice is on and what your own administrator has switched on, both of which are in your subscription and your admin console rather than on anybody's laptop.

Obsidian Ridge's free 30-day AI security assessment covers the tools nobody approved, which is the other half of the picture.

Sources

Intuit’s own pages, with the date each was read. Nothing on this page comes from anywhere else.

All 35 tools, side by side, or run the AI tool risk checker over the ones you know about.

Other tools people ask about

Same question, different answers. The ones in the same category are the ones staff swap between.