Security and privacy
Nothing posts to your books without your yes. Bank access is read-only, email access is scoped to receipts and invoices, and your data is never used to train AI. Two outside parties checked Penni before it could read a single customer email.
Verified by outside parties
Penni reads Gmail through one scope, gmail.readonly, and that access is classed by Google as restricted. Google verified Penni for it in September 2026, which is why you see no unverified-app warning when you connect. Penni reads the inbox for receipts, bills and invoices, keeps the transaction fields, and discards the raw email.
Google requires apps that read restricted data to pass the Cloud Application Security Assessment (CASA), run by an authorized lab. Penni passed on September 11, 2026, assessed by TAC Security: forty-eight of forty-eight controls, with a Letter of Validation issued to Google. CASA is a security assessment, not a certification, and we never call it one.
How Penni protects your financial data
Penni connects to QuickBooks through Intuit's secure OAuth. We never receive, store, or see your QuickBooks login credentials.
Your financial data is used to do your books, and nothing else. It is never used to train AI models. Ever.
Penni writes to your QuickBooks, the system of record. Leave anytime and your books are right where they have always been.
When you link a bank account through our data partners Quiltt and MX, Penni receives transactions and balances read-only. We never see your banking password and can never move money.
All data is encrypted with TLS in transit and encrypted at rest. Access tokens are stored securely with row-level security.
When you connect email, Penni reads only to detect financial transactions. It extracts the data and discards the raw email.
We keep only what is needed to run your account. Extracted transaction fields, not your whole inbox or full statements.
What Penni can and cannot see
The services Penni relies on
Your data flows through established, audited providers, governed by their own enterprise security and privacy programs.
Common questions about privacy
No. We never sell, rent, or share your personal or financial information with third parties for their own commercial purposes. Period.
Anytime. Revoke access from QuickBooks or your Google account in seconds, or cancel from your billing portal. Once disconnected, Penni can no longer access your data.
Your accounting data stays in QuickBooks, so your books are always yours. You can request full deletion of your Penni account data anytime.
Never. Your data is used to operate your account and nothing else. For full detail, see our Privacy Policy.
Connect QuickBooks securely in two minutes. Nothing posts without your yes. Encrypted, revocable anytime.
Start free →