FifthFirm

QuickBooks Online Integration

Last updated: April 27, 2026

Overview

FifthFirm connects to QuickBooks Online (QBO) to power AI-assisted bookkeeping, financial reporting, reconciliation, and advisory features. The integration uses Intuit's official OAuth 2.0 protocol — the same secure method used by all Intuit-approved apps.

FifthFirm is an Intuit-approved application. We never see or store your QuickBooks password. All access is through secure OAuth tokens that you can revoke at any time.

Prerequisites

  • An active QuickBooks Online subscription (Plus or Advanced recommended)
  • Admin access to the QBO company you want to connect
  • A FifthFirm account with Owner or Admin role

How to Connect

1

Navigate to Integrations

From your FifthFirm dashboard, go to Dashboard → Integrations.

2

Click "Connect QuickBooks"

Click the Connect QuickBooksbutton on the QuickBooks Online card. You'll be redirected to Intuit's authorization page.

3

Sign in to QuickBooks

Sign in with your Intuit/QuickBooks credentials. If you have multiple companies, select the one you want to connect.

4

Authorize access

Review the permissions FifthFirm is requesting and click Connect. You'll be redirected back to FifthFirm.

5

Verify connection

Your dashboard will show your company name, cash balance, and recent transactions pulled from QBO. The integration card will show "Connected" status.

That's it! FifthFirm will automatically keep the connection active. If the access token expires, we refresh it automatically — no action needed on your part.

What Data We Access

FifthFirm accesses the following QBO data types to provide its services:

Data TypeAccessUsed For
Chart of AccountsRead & WriteAccount categorization, financial statement structure
Transactions (invoices, bills, payments)Read & WriteBookkeeping, reconciliation, cash flow analysis
CustomersReadClient reporting, AR aging
VendorsReadAP management, expense analysis
Journal EntriesRead & WriteMonth-end adjustments, accruals
Financial Reports (P&L, BS, CF)ReadDashboard KPIs, financial statements
Bank TransactionsReadReconciliation, categorization
Company InfoReadDisplay company name, verify connection
Write access is used only when you explicitly approve an action (e.g., applying categorizations, posting journal entries). FifthFirm never modifies your QBO data without your review and approval.

Permissions & OAuth Scopes

FifthFirm requests the following OAuth 2.0 scopes:

ScopeWhat It Grants
com.intuit.quickbooks.accountingRead and write access to accounting data (chart of accounts, transactions, customers, vendors, items, and reports)
openidBasic identity verification
profileYour name for display purposes
emailYour email for account matching

We request the minimum scopes needed to provide the Service. We do not request payroll, employee, or tax filing scopes unless you explicitly enable those features.

Security & Privacy

  • OAuth 2.0: We never see or store your QBO password. Access is granted via secure tokens issued by Intuit.
  • Token storage: Access tokens are encrypted at rest (AES-256) and stored per-client in our database. They are never exposed in logs, URLs, or client-side code.
  • Auto-refresh: Access tokens expire after 1 hour. FifthFirm automatically refreshes them using the refresh token — no manual re-authorization needed.
  • Refresh token lifetime:Refresh tokens are valid for 101 days. If unused for 101 days, you'll need to re-authorize.
  • No data selling: We never sell, rent, or trade your QBO data to third parties. See our Privacy Policy.
  • AI model training: Your financial data is NOT used to train AI models. AI features use pre-trained models applied at runtime only.

How to Disconnect

You can disconnect QuickBooks from FifthFirm at any time using either method:

Method 1: From FifthFirm

1

Go to Integrations

Dashboard → Integrations → QuickBooks Online card.

2

Click "Disconnect"

Click the Disconnect button. FifthFirm will revoke the OAuth tokens and delete cached QBO data within 30 days.

Method 2: From QuickBooks

1

Open QBO Settings

In QuickBooks Online, go to Settings (gear icon) → Manage Apps.

2

Find FifthFirm

Find FifthFirm in the list of connected apps and click Disconnect.

After disconnecting, FifthFirm retains your account and settings but can no longer access QBO data. You can reconnect at any time by going through the connection flow again.

Troubleshooting

Connection shows "Error" or "Expired"

Access tokens expire every hour and are refreshed automatically. If you see a persistent error, the refresh token may have expired (101-day lifetime). Go to Integrations → Reconnect to re-authorize.

Data not updating

FifthFirm fetches live data from QBO on each dashboard load. If data appears stale, check that the transaction exists in QBO first. There is no sync delay — changes in QBO appear immediately in FifthFirm.

Wrong company connected

Disconnect the current company (see above), then reconnect and select the correct company during the Intuit authorization step.

"Insufficient permissions" error

The QBO user who authorizes the connection must have Admin access to the company. Ask a QBO admin to perform the connection, or have them grant you admin access first.

Still having issues?

Contact support@fifthfirm.com with your organization name and a description of the issue. We typically respond within 1 business day.

FAQ

Can I connect multiple QBO companies?

Yes. Each client in FifthFirm can have its own QBO connection. Go to the client's detail page and connect their specific QBO company.

Does FifthFirm work with QuickBooks Desktop?

Not currently. FifthFirm integrates with QuickBooks Online only. If you use QuickBooks Desktop, Intuit offers a migration tool to move to QBO.

What happens to my data if I cancel FifthFirm?

Your data remains in QuickBooks — FifthFirm never moves data out of QBO. Upon cancellation, we delete cached data within 30 days. Financial records required for regulatory compliance are retained for 7 years per our Privacy Policy.

Is FifthFirm SOC 2 certified?

We are currently pursuing SOC 2 Type II certification. Contact us at legal@fifthfirm.com for our current security documentation and DPA.