Security & control

You decide what AI can see and do.

Finance teams have rules. Ototo checks them every time your assistant reads or changes your books, and keeps a record of who did what without keeping your data.

Least privilege

Read-only until you say otherwise.

Safe defaults

New connections can read reports and records but not change them. Employee information is off.

Company policy

On Connections, turn writes or deletes off for a whole company. Nobody can exceed it, admins included.

Segregation of duties

Set access per user, per company and per tool group. One user enters bills, another pays them.

Activity record

A record of who did what, never what was in your books.

Admins see the user, the company, the action, whether it read, wrote or deleted, how long it took and the result. Never the numbers, the questions or the answers.

Activity recordWho did what, never what was in your books
WhenUserCompanyActionAccessResult
09:42Maya R.Harbor DentalViewed trial balanceReadOK
09:44Maya R.Harbor DentalViewed general ledgerReadOK
10:05Sam T.Atlas LogisticsRecoded 9 purchasesWriteOK
10:07Sam T.Northwind UKTried to pay a billWriteBlocked: no permission
Data handling

We don’t keep your books.

Pass-through

Accounting data passes from QuickBooks to your assistant and is never written to our database, logs or backups.

Encrypted connections

QuickBooks tokens are encrypted with keys in Google Cloud KMS, used only for requests you authorize, and revoked when you disconnect.

Hosted in the US

Ototo runs on Google Cloud in the United States. Sign-in is handled by WorkOS; payments by Stripe.

Subprocessors

Who processes data for us.

ProviderPurposeLocation
Google CloudHosting, database, encryption keys and logsUnited States
WorkOSSign-in and account emailsUnited States
StripePaymentsUnited States
Google WorkspaceEmailUnited States

Report a vulnerability to security@ototo.ai. Questions about personal data: privacy@ototo.ai.

Start with last month’s variances.

Connect QuickBooks, add Ototo to your assistant and ask it to explain last month’s biggest variances. It’s read-only, so nothing in your books changes. 7-day free trial, no card needed.