Intuit
Your own published record, as at 2026-08-10.
Your Details
The Macro Picture68
What Is Published8
Your Own Words3
If Intuit receives a compulsory request (whether through a subpoena, court order, search warrant, or other valid legal process) from any government agency or authority (including law enforcement) for access to or information about a Intuit account (including Business Connection Data) belonging to a Customer whose primary contact information indicates the Customer is located in Europe, Intuit shall: (i) review the legality of the request; (ii) inform the government agency that Intuit is a processor of the data; (iii) attempt to redirect the agency to request the data directly from Customer; (iv) notify Customer via email sent to Customer’s primary contact email address of the request to allow Customer to seek a protective order or other appropriate remedy; and (v) provide the minimum amount of information permissible when responding to the agency or authority based on a reasonable interpretation of the request.
Data Privacy Framework. Intuit will use the Data Privacy Framework to lawfully receive Business Connection Data in the United States ... EEA Data Transfers. If GDPR requires that appropriate safeguards are put in place (for example, if the Data Privacy Framework does not cover the transfer to Intuit and/or the Data Privacy Framework is invalidated) the SCCs shall be incorporated into and form an integral part of this DPA. UK Data Transfers. ... the SCCs shall apply and shall be deemed amended as specified by the UK Addendum.
Intuit shall take reasonable measures to provide tools for Customer (at Customer’s election) to delete or return to Customer all Business Connection Data (including copies) in its possession or control, except that this requirement shall not apply to the extent Intuit is required by applicable law or industry rules to retain some or all of the Business Connection Data, or to Business Connection Data it has archived on back-up systems.
Parties You Name6
Register Check3
AI Role By Offering4
Assessment Basis
Produced under Method v1.6 from the entity's fact record. 8 of 8 observations were measured under that generation; the rest read Not Measured, which is a fact about this register's coverage and not a finding about the entity.
Read from 33 first-party surface(s) across 4 assessed offering(s), found by the entity's own link graph and sitemap rather than by guessed paths.
- Fact Record
- Version 1.0, dated 2026-08-10
- Standards Commit
- af541328ca3f
- Register Control Quality
- Both Views
Verification And Challenge
Every finding on this record is a statement about what could be read on your own published surfaces as at 2026-08-10. Correspondence route as recorded on this card input: ror@blacksnowintel.com.
What A Machine Could Not Establish7
7 questions are open and 1 is established, read as at 2026-08-10 under method v1.6.
Publish it: publish a sub-processor list.
quickbooks-online-eu-row Absent; quickbooks-online-uk Absent; quickbooks-online-us-ca Absent; quickbooks-payroll-time Gated; Subprocessor List Completeness: Not Assessable; Subprocessor Locations: No List To Assess · None Named
Where To Put It
No page on your own surfaces was carrying an answer to this question when you were read, so there is no address to correct — this one needs a home before it needs wording.
Where Others Stand
83 organisations in the register publish a sub-processor list. On three of your four assessed offerings you do not, which is what this row is banded on.
What A Published Answer Looks Like
We use a few different third-party subprocessors to help us provide our services to you. These subprocessors process data that you input into the services, which may include personal data.
A question answered plainly in public, by an organisation read as Strong on it. It is not an endorsement of the position the sentence states — Black Snow reads what is published and never recommends what to practise. Read on a published sub-processor page. Claim tier Quoted. The organisation that published it is not named. A name in the original is replaced; nothing else in the sentence is changed.
One is named here, and one is deliberate. The rest of the open questions are listed below without a prescription; what to publish for each, in what order, and drafted machine-readable evidence for all of them, is the Deep Dive.
Still Open
Never Asked
Outside the method generation you were read against, so never put to you. This is Black Snow’s coverage and not a finding about you — and an unchecked field is still not a clean one, which is why it is shown rather than left out.
Deep Dive
The full assessment, plus consulting on what to fix.