What does it take to get a SOC2 report from QuickBooks? One week, four phone calls/chats and still nothing.

Hello dear, jjmichiels. I appreciate you for informing me about the call that you made.

For now, it is opted not to perform the SOC2 audit report of QuickBooks Online. Our software undergoes annual Payment Card Industry (PCI) and Data Security Standards (DSS) certification. 

Visit here again if you have more questions! It'd be my pleasure to provide you more details of your concern and help you figure them out! Take care!

I clicked on the link you sent me.  Maybe you should read the last two paragraphs.

Compliance for Intuit payroll services

As a public company, Intuit is required under the Sarbanes-Oxley Act of 2002 (SOX), to file an annual certification of our Intuit control environment. The certification is part of the Intuit 10K filing (annual report), which is available online at

Compliance for Intuit payroll services
As a public company, Intuit is required under the Sarbanes-Oxley Act of 2002 (SOX), to file an annual certification of our Intuit control environment. The certification is part of the Intuit 10K filing (annual report), which is available online at https://investors.intuit.com/financials/annual-reports/default.aspx .

The Intuit Online Payroll Services are subject to an annual audit of the control environment following SSAE18 guidance. That results in a SOC 2 Type II report. Distribution of the SOC2 Type II report is limited to external parties who have consented to abide by the SOC specific Non-Disclosure Agreement (NDA). Intuit Online Payroll Services do not undergo an audit for SOC1.

The Intuit Online Payroll Services are subject to an annual audit of the control environment following SSAE18 guidance. That results in a SOC 2 Type II report.  Distribution of the SOC2 Type II report is limited to external parties who have consented to abide by the SOC specific Non-Disclosure Agreement (NDA). Intuit Online Payroll Services do not undergo an audit for SOC1.

Our outside accountant/auditor is requesting the SOC2 report for his audit of our company.  I have been trying for two weeks to obtain this report but continue to hit a brick wall.  I see there are 2 things you have to do to obtain the report.  

• an active payroll subscription
• and consented to abide by the SOC specific Non-Disclosure Agreement (NDA).

Contact us to respond to an inquiry or to obtain a copy of the latest SOC2 report.

II have an active subscription but can't figure out how to do the 2nd step that is required.  I have hit the "Contact us" selection to obtain a copy of the report I have lost count.  Can someone please help me out????? 

Hi Jenny.

Yes, you need to contact support to get a copy of the latest SOC2 report. I'm here to guide you on how to reach out to them through your QuickBooks Online account.

1. Open your QuickBooks Online account, then go to the (?) Help icon.
2. Choose the Talk to a human option (then type it again when prompted).
3. When asked by the bot, enter a short description of your concern.
4. Select I still need a human.
5. Proceed with Contact us.
6. Click Let’s talk, then choose either Get a call or Start messaging. 

If you had the old Help menu interface:

1. Select Contact Us from the Help menu.
2. Type in a short description of your concern under the What can we help you with box.
3. Proceed with the Let's talk button.
4. Select either Start messaging or Get a call button.

For the support's business hours, I encourage checking out the details from this link.

If you have any other questions about the SOC2 report, please let me know by adding a comment below. I'm more than happy to help. Have a good one!

I have followed all the steps you provided, waited for someone on chat for HOURS, I am currently on a call with an Intuit employee and he doesn't have a clue what I am talking about! I have been on the phone with him for almost an hour going in circles. Mind you, this is someone I came into contact with following your directions!

I have obtained these report annually for years and now the email address for qbocaresupport does not repond to the request for the SOC2 report Intuit has and we have an NDA of file with Intuit.

Can someone please advise where to send the request for the current report (SOC2 and the most recent bridge letter?

Thank you,

I am on chat with Intuit again and I cannot believe that there's no means to simply request the SOC2 report that Intuit does annually

Can someone please advise where (email address) to send the soc2 requests?

I can share some information that can help you generate the report that you need, @hvonhaefen. 

To get the SOC2 report, you must have an active payroll subscription and consented to abide by the SOC-specific Non-Disclosure Agreement (NDA).

From here, you can reach our Customer Support for QuickBooks Online (QBO) to have the said report. You can contact them through chat or by arranging a callback. 

Follow the steps below on how to contact them:

1. Go to the Help icon to connect to a live support agent. 
2. Click on the Contact Us button and provide some details about this concern.
3. Provide us some information about your concern in the What can we help you with? box and click on Continue.
4. You'll now be provided options on how to connect to our Customer Support.

You can view this article for more information about the different types of support we offer and their availability: QuickBooks Online Support.

To check all the available reports we have in QBO and on how to customize it, refer to this article: Run reports in QuickBooks Online. 

Let me know if you need further help with your reports and or anything else by leaving a reply below. Keep safe and enjoy the rest of the week!

OK, I finally was able to get the SOC compliance team to send an email with a valid link (thread) where I could respond with the NDA, stating that I am a current customer and agree with the NDA.

I would encourage Intuit to post such in the "help" feature of the payroll so that we can advise the chat staff how to proceed.

I'll take note of this suggestion, hvonhaefen.

I know how generating the SOC2 report is convenient for you and I hear your urgency in pulling it up. For now, I suggest submitting feedback directly to our product engineers. They may look into this suggestion and consider adding the option in the future update. To submit feedback, you can go to the Gear icon and select Feedback.

Feel free to post again if you have other concerns about QuickBooks. I'll be more than happy to help. Have a good one!

Is there any update on this.  Are SOC2 reports not being done with Quickbooks Online?

Glad to see you here in the Community, @ovhusjp1. I'd be glad to provide information that can help you generate the report you need.

A copy of the report is available to customers who have both of the following:

• an active payroll subscription
• and consented to abide by the SOC specific Non-Disclosure Agreement (NDA).

Please see this for the link for more details on how to contact our QuickBooks products and services support.

I'll be around if you need further assistance. I'm very eager to help. Take care!

I'm having the same problem - Can someone please send me a copy of the SOC 2 report?  I've made 4 calls, used the chat feature, followed the directions and the circular logic.  Companies like Salesforce have a website where various compliance reports are self-serve and downloadable.  

Hi there, Julian. I want to ensure you'll be able to get a copy of the SOC2 report in no time.

I appreciate you for reaching out to our designated team to obtain a copy of the said report. Since you don't get the report, we'll have someone reach out to you via private message regarding this matter. This way, you can discuss together how to generate or send a request for this report.

Please let me know in the comment section below if you have any other follow-up questions. I'm more than happy to help. Have a good one!

The process listed below does not work.  Could you provide an email address to request the NDA that must be signed to obtain the SOC 2 report?  

copy of the report is available to customers who have both of the following:

• an active payroll subscription
• and consented to abide by the SOC specific Non-Disclosure Agreement (NDA).

Contact Us to respond to an inquiry or to obtain a copy of the latest SOC2 report.

I’m chiming in to share some information about this matter, @julianyc.

I recommend contacting our support team since they can process this request for a SOC 2 report on your behalf.

After you’ve received your SOC 2 report, you’ll want to make customization and export them.
Here are some articles to help you:

• Customize reports in QuickBooks Online
• Export reports

Let me know if you need anything else. You can leave a comment down below and I’ll get back to you as soon as I can. Keep safe!

Hello @julianyc! I'm a moderator here in the Community and I'd love to touch base with you in Private Messages so we can discuss this further. 

Here's how you can enable them!

1. Click on your Profile in the upper right hand corner when you are logged into the Community.
2. Go to My profile.
3. Click the blue  Edit button underneath the badges you've earned.
4. Then choose Preferences>>Private Messenger.
5. Lastly turn on Private messages.

After that, feel free to let me know here, or you can click on my username and Private Message me. Look forward to hearing from you!

that doesn't show up as an option..."private messenger" does not appear as an option between "privacy" and "cheers"

There are times that local internet cache files stored in the system can cause unexpected behavior in the product, julianyc.    

When a browser's cache storage is full or corrupted, it can cause error messages or sometimes can cause unusual browser behavior in QuickBooks Online. Let's signing in to QBO using a private or incognito window. This mode doesn't use the existing cache data and helps us confirm browser-related issues.

Here's how: 

• For Google Chrome browser: Ctrl + Shift + N
• For Mozilla Firefox browser: Ctrl + Shift + P
• For Safari browser: Command + Option + P

If it works, go back to your regular browser and clear the cache to delete those temporarily stored files and browsing history. The overtime collection of data can create corruption, however, removing this should fix the issue. You can also use other supported, up-to-date browsers to roll out the possibility of a browser-related issue.       

Feel free to mention my name in your Reply. I'll be around to help. Stay safe!

@julianyc Thanks for taking a look at those steps I provided. If the above troubleshooting from my colleague doesn't work, no worries, I can reach out to you via email. :)

Hi I'm having the same issue obtaining a SOC 2 Report from Quickbooks Online. Calls, operators are clueless, dropped calls, answer is to contact support (circular loop).

I had no problem getting SOC2 report from any of our other vendors, signed an NDA and got the report. 

Compliance for a company who deals with Financial data should be straightforward no?

Anyone has a sure way to get a SOC2 report for Quickbooks online?

Hi joaocorreia!

I understand how it feels to not be able to achieve your goal even after contacting support. I'm here to assist you in getting a SOC2 Report.

QBO or QuickBooks Online undergoes annual Payment Card Industry (PCI) Data Security Standards (DSS) certification. You can visit the Visa Global Registry of Service Providers to validate. It is covered under the Intuit Inc. QuickBooks Online (QBO) listing.

Although you contacted our Support Team already, I still suggest you reach out to them. They can create a ticket and raise it to our internal team so they can provide you with a SOC2 Report.

1. Click the (?) Help icon and enter Talk to a human (then type it again when prompted).
2. When asked by the bot, enter "QBO SOC2 Report".
3. Select I still need a human, then proceed with Contact us or Get help from a human.
4. Choose either Chat or Callback.

You'll want to visit Intuit Security Center if you need more details about Intuit's security and privacy.

Please note that we're always available if you need more assistance with this or other financial reports. I'd be glad to help!

They don't know what I'm talking about, support is useless and because there's no accountability with calls dropped it is just a big waste of time.

https://www.intuit.com/compliance/ - provides access to Intuit's certifications and SOC2 reports.