A chat grounded in your own books. It reads your latest Technovault backup through a small set of read-only tools — search the ledger, pull a full record, total balances — and nothing else. Every answer cites the records it read so you can verify it yourself, and when it needs a fact from you (how much a reconciliation is out by, a statement date), it asks before investigating. It flags and explains; you confirm. It flags common GAAP concerns — it is not an auditor and doesn't certify anything.

The one you pick. The engine picker offers Claude Opus 5 (the default) and Claude Fable 5 from Anthropic, GPT-5.6 from OpenAI, and DeepSeek 4 — each labeled with where your data is processed (DeepSeek runs in China; that's your call to make, and your company's administrator can disable any engine for the whole company). Your choice is sticky per user, and the engine you pick is the engine that answers — we never substitute silently. Your question and the ledger excerpts the tools return are sent to your chosen engine's commercial API to produce the answer; we never use your books to train anything. Details on theprivacy andsub-processors pages.

Every engine we offer has to pass our accounting evaluation — a fixed set of planted bookkeeping errors (duplicate deposits, miscoded expenses, reconciliation gaps) that an engine must find, cite, and explain without inventing problems. The current Gemini model (gemini-3.6-flash, evaluated July 2026) didn't pass. The four engines in the picker all did. We re-evaluate new models as they're released, Google's included.

Every subscription — including the 30-day trial — includes a monthly AI allowance. Your exact current allowance and usage are always shown in the app. When it's used up, the AI pauses until next month: it stops, it never charges you by surprise. If you want more, AI plans start at $5/month and add to your included allowance immediately. The full system, including current per-engine rates, is on the AI pricing page.

Backup is read-only, and so is the AI. The only feature that writes is restore — a separate, gated action: you see a preview of the exact changes, approve them in writing, and a pre-restore snapshot is captured first so the restore itself is undoable. Anything that can't be safely written back comes with step-by-step manual instructions instead. Applying a restore also requires a fresh verification code emailed to you, no matter how old your session is.

In Cloudflare R2 (encrypted at rest, zero-egress). Encryption keys are per-company and never sent to the browser. The full sub-processor list is on theSub-processors page.

Click Delete all data in your settings (it asks for a fresh emailed verification code — it's irreversible, so we make sure it's you). We revoke the Intuit grant and purge every backup we hold for that company — deletion is immediate and complete, and we keep no residual backups. We retain only what we're legally required to keep — billing and tax records, plus activity logs (to comply with applicable law and for our mutual protection) — so you can reconnect and reprint past invoices.

Yes. One QuickBooks admin connects the company; after that, anyone can be invited by email — your accountant, your bookkeeper, your staff — and each person signs in with their own Technovault account. Nobody shares a QuickBooks login, and access is set per member, per company. Either side can start it: subscribe and invite your accountant in, or have your accountant set it up and invite you.

The audit trail shows every change across every snapshot — the field that changed and the values on either side of it — attributed by snapshot interval. We show the QuickBooks actor where QuickBooks reliably exposes it, and we won't claim it when it doesn't.

Because every accountant who recommends us shouldn't have to figure out which tier their colleague's clients need. One product, one price, everything included — and every feature we ship reaches every customer the day it ships. We're priced for sustainable growth at scale, not for upsell engineering.