Your QuickBooks stays as it is
- WhatIF only reads from QuickBooks. It never creates, changes or deletes anything in your books.
- The connection keys are stored encrypted. You can disconnect at any time in Settings > Integrations, or from QuickBooks itself.
AI and your numbers
- Your numbers are read by Claude, made by Anthropic, to write your analysis and reports.
- They are never sold and never used to train AI.
Where your data lives
- WhatIF runs on Base44, an app platform that stores your records and handles sign-in.
- Files you upload are stored privately with Cloudflare R2, encrypted, under Cloudflare's SOC 2 Type II security controls. WhatIF opens them with links that stop working after a few minutes.
Backups
- Every night a copy of your organization's records and the files you uploaded goes to separate, private backup storage. Each night's copy is kept for 30 days.
- QuickBooks connection keys and invitation codes are removed before anything is copied.
- We rehearse a restore every month, one organization at a time: a check rebuilds it from a backup into a separate copy, then checks that each kind of record comes back with the same count, every uploaded file comes back unchanged, the newest month's totals match, and nothing in the copy still points at the original.
- Data you delete stays in the backups for up to 30 days, then it is gone.
Your data is yours
- Admins can download everything WhatIF keeps for your organization at any time, from Settings > Data & activity: spreadsheets (CSV) and JSON files, with links to your uploaded files.
- Deleting a document erases its file from storage right away.
- Deleting your organization removes its records and erases its uploaded files right away.
Who changed what
- Admins can see a record of important changes in Settings > Data & activity: who changed the organization's settings, the team and its roles, invitations, the plan, the QuickBooks connection, uploads, budgets, deleted data, finalized reports, and who downloaded the data.
- Changes to grants are kept in each grant's own history.
- No one can change or remove an entry, short of deleting the organization.
Signing in
- Sign in with an email and password (a code sent to your email confirms a new account), or with Google, Microsoft or Apple.
- Two-step sign-in: WhatIF's sign-in service does not offer its own two-step codes yet. For two-step protection today, sign in with Google, Microsoft or Apple and turn on two-step verification in that account. Your WhatIF sign-in is then protected by it.
Analytics
- Google Analytics and PostHog load only if you allow them. Each person is asked once on each device, and can change their answer on the Privacy Policy page.
- They never record what you type, and session recording is off.
Payments
- Payments are handled by Stripe. Your card number never reaches WhatIF.
Questions, or a security concern? Email [email protected]. More on our website: whatifmachine.ai/trust.