Document Security
Your generated documents contain customer details, pricing, and other business information. This page explains how Missing Toolkit: Templates protects them, and what you can tell your own clients if they ask.
Reviewed by Intuit
Missing Toolkit: Templates has passed Intuit's security review and is listed in the QuickBooks App Store. Intuit requires every app to clear that review, which includes independent security testing, before it is allowed to connect to customer QuickBooks data or appear in their marketplace.
Where documents are stored
Generated documents are stored in private cloud storage on Amazon Web Services and encrypted while stored, using server-side encryption managed by Amazon S3.
Documents are never published to the open internet. There is no public web address for a document — not a hidden one, not a hard-to-guess one. No such link exists to be shared, guessed, or leaked.
How downloads are authorized
Every download passes through the application rather than being served straight from storage. When you request a document, the application verifies that it belongs to your account before releasing the file.
This matters more than it might sound. Many applications hand out temporary direct links to cloud storage, which anyone holding the link can use until it expires. Missing Toolkit: Templates never issues one. A document cannot be retrieved by anyone outside your account, even if they somehow obtained its address.
Encryption in transit
Every transfer between your browser and the application is encrypted with HTTPS. Encryption is enforced on every request — plain unencrypted connections are refused, not silently downgraded.
Retention and deletion
You decide what is kept:
- Delete any generated document at any time from the Documents page, and it is removed from storage.
- Document previews — the temporary files created when you preview before generating — are deleted automatically within 24 hours.
If your internal policies require that generated documents are never stored at all, contact us. We can discuss an arrangement where a document exists only long enough for you to download it and is then discarded.
Your QuickBooks connection
You connect to QuickBooks through Intuit's own authorization process. Missing Toolkit: Templates never sees or stores your QuickBooks password. The access keys Intuit issues are encrypted where they are stored, and Missing Toolkit: Templates requests read-only access — it does not modify, create, or delete anything in your QuickBooks account.
You can revoke access at any time, either from Team > Integrations in Missing Toolkit: Templates or from within QuickBooks. Access stops immediately.
Protecting your account
Documents are only as secure as the account that can reach them, so account security gets the same attention:
- Two-factor authentication is available on every account.
- Sign-in attempts are rate limited, with lockout after repeated failures.
- Changing your password signs out every other active session.
- Account data is backed up automatically each day.
See Team Settings for managing who has access to your account.
Questions
If you or your clients have security questions this page doesn't answer, get in touch. We're happy to go into more detail.