SECURITY AT CLAWRK

Your business data.
Your control.

Financial records deserve clear boundaries. From the accounting connection to the next reminder, your workspace stays in control of access and action.

Explore our safeguards
CLEAR PERMISSIONS, AT EVERY STEP
QuickBooks OnlineYour accounting records
Receivables sync
Clawrk.Your follow-up workspace

Your team approvesEvery outgoing customer reminder

Balances are checked again before sending.
01 / THE FOUNDATIONS

Practical safeguards.
Built into the work.

Security depends on what a product does every day. These controls protect account access, preserve accounting ownership, and keep decisions with your team.

An extra layer at sign-in

Enable multi-factor authentication with your authenticator app. Recovery codes help you regain access, and session controls let you review and revoke signed-in devices.

Optional MFA · Session controls

Access follows your workspace

Records and actions are checked against workspace membership and role. Owners, administrators, members, and viewers have different permissions. Invited teammates must accept before gaining access.

Workspace isolation · Role-based permissions

Credentials stay protected

QuickBooks sign-in happens with Intuit. Clawrk stores encrypted integration tokens, not your QuickBooks password. Clawrk account passwords are stored as salted hashes.

Intuit OAuth · AES-256-GCM token encryption

Protected transport and storage

HTTPS protects connections to Clawrk. The production database is encrypted at rest and is not publicly accessible. Database backups support recovery, and document storage is private.

Encrypted database · Private storage

Approval before outreach

A prepared reminder waits for your team. Before sending an approved QuickBooks reminder, Clawrk rechecks the accounting balance and recipient. An unavailable check holds the message.

Human approval · Pre-send verification

A history you can follow

Review recorded actions, invoice conversations, and payment promises. Message states distinguish approval, submission, delivery, and failures. Payments and credits remain separate events.

Activity history · Clear delivery states
02 / RESPECT THE LEDGER

Your books remain
in QuickBooks.

Clawrk reads client accounting records for follow-up. Separately, practice owners and admins can sync finalized firm invoices to their own QuickBooks books. Client accounting corrections stay in QuickBooks.

Explore the QuickBooks connection
Intuit App Partner - Gold
  1. 01

    You authorize the company

    Choose the QuickBooks company in Intuit's authorization flow. Your QuickBooks password stays with Intuit.

  2. 02

    Clawrk prepares the next step

    Bring invoices and recorded payments into the workspace. Draft a reminder, review a conversation, or record a promise.

  3. 03

    Your team gives approval

    Review the recipient and wording. A draft cannot enter the sending queue without approval.

  4. 04

    Clawrk checks before sending

    Recheck the connected balance and recipient, along with pauses, promises, and delivery restrictions. Hold the reminder when a check fails.

03 / KNOW WHERE DATA GOES

A clear role
for each provider.

We use service providers for specific parts of the product. Our production infrastructure is in the United States; providers may also process information in other countries.

Amazon Web Services

Infrastructure

Hosts Clawrk, the database, private documents, backups, and operational logs in the United States.

Intuit

Accounting connection

Handles QuickBooks authorization and provides the company records you permit Clawrk to access.

Stripe

Subscription billing

Collects payment details for your Clawrk subscription and provides checkout and the billing portal. Clawrk does not store full card numbers or security codes.

Resend

Email delivery & replies

Processes account emails, approved reminders, incoming replies, and delivery events using the relevant message content and addresses.

Google Workspace

Support

Hosts the support and operational mailboxes used when you contact our team.

OpenAI

Optional reply assistance

Receives selected reply and invoice context only when reply assistance is configured and enabled. Suggestions require review and cannot authorize messages or payments.

We do not sell personal information or use invoice data to target advertisements.

Read the full privacy policy
04 / CONTROL THAT STAYS WITH YOU

Your data.
Your next move.

Access and retention should be understandable. Export your records, manage connections, and make informed decisions about your workspace.

Take your records with you

Export workspace data from Settings. Archiving a client retains its records and history for review. Ending a trial or subscription does not automatically delete the workspace.

Disconnect when you choose

Revoke a QuickBooks connection from the company Accounting tab. Imported history remains available and follow-up is paused. Disconnecting does not change records in QuickBooks.

Close with a clear process

The owner confirms their identity to close a workspace. Access and follow-up stop, and active data is scheduled for deletion after 30 days.

Backup retention & exceptions
BEFORE YOU CONNECT

The details
worth asking about.

Ask a security question
Can Clawrk change invoices or record payments in QuickBooks?

Connected client receivables are read from QuickBooks; make corrections there and synchronize. Practice owners and admins can separately sync finalized firm invoices to their firm QuickBooks books after matching clients to customers. Recording a manual-ledger payment does not transfer money.

What happens if a balance cannot be verified?

Clawrk holds the affected QuickBooks reminder instead of treating an unavailable check as permission to send. Resolve the connection or synchronization issue, then review the current invoice and message before continuing.

Is multi-factor authentication required?

Authenticator-based MFA is available for individual accounts and is optional. We recommend enabling it before adding company data. Password reset does not remove an existing MFA requirement.

Who can see my workspace data?

Your authorized teammates can access records according to their roles. Standard workspace roles cover one company in a Business workspace or all client companies in a practice. Timesheets-only accounts are limited to assigned time access. Assigned reviewers can review team hours; private hourly costs and bill rates are visible only to owners and admins. An invited bookkeeper has only the access granted in that workspace. Service providers receive information needed for their specific functions. Clawrk may access records for authorized support, failure resolution, and misuse investigations, as described in the privacy policy.

Does connecting QuickBooks enable AI features?

No. Connecting QuickBooks or creating an account does not enable optional reply assistance. If that feature is configured and enabled, selected reply and invoice context is sent to OpenAI to generate a suggestion. Your team reviews the result.

Do you have an independent security certification?

Clawrk does not currently claim SOC 2 or ISO 27001 certification. The safeguards described here are product and infrastructure controls. Contact us to discuss your security requirements or request information about processing arrangements.

A DIRECT LINE TO CLAWRK

Trust starts with
an open conversation.

Evaluating Clawrk for your business or practice? Ask about a control, discuss processing arrangements, or report a security concern.

support@clawrk.com

Reporting a security concern

Include the affected page, what happened, and steps to reproduce the issue. Use redacted examples rather than passwords, secrets, or client financial documents.

Operated by Fancydino LLC
Privacy policyTerms of service