Ask ten accountants whether QuickBooks Online backs up their client data, and nine will say yes. They are not wrong, exactly. Intuit does protect data. Just not in the way most people mean when they use the word "backup."
Understanding the distinction between what QBO protects and what it leaves to you is not an academic exercise. It determines whether a data incident costs you an afternoon or an entire week.
What Intuit Actually Protects
Intuit runs QuickBooks Online on enterprise-grade cloud infrastructure. Their protection covers:
Platform uptime and availability. Intuit maintains redundant servers and load balancing to keep QuickBooks Online accessible. If a server fails, traffic routes to another.
Infrastructure-level disaster recovery. If an Intuit data centre experiences a physical disaster, they have recovery processes to restore the platform. This protects the service as a whole.
Data transmission security. Data moving between your browser and Intuit's servers is encrypted in transit. This protects against interception, not against data loss within your file.
Platform-level security. Intuit manages authentication systems, access controls at the platform level, and security patches for the QuickBooks Online application itself.
This is all genuinely valuable. The problem is that none of it addresses the most common causes of data loss that accounting firms actually experience.
What Intuit Does Not Protect
Your data from your users
The most common cause of data loss in QuickBooks Online is not a server failure or a cyberattack. It is a human being with authorised access making a mistake. A bulk deletion, a miscategorisation, an accidental overwrite. These all happen inside the permissions that Intuit grants to your users.
Intuit's infrastructure protection does not distinguish between a correct change and a mistake. Both are treated as valid writes to the company file.
Your data from connected apps
Third-party integrations, including popular inventory, payments, payroll, and e-commerce apps, write directly to your company file through Intuit's API. When a connected app pushes a bad sync, the resulting data changes are permanent. Intuit does not reverse changes made by apps you authorised.
Your data from subscription lapses
If a client's payment method fails and the QuickBooks Online subscription lapses, access to the company file disappears until billing is resolved. Intuit does not guarantee data preservation during extended lapses.
Point-in-time restoration
There is no way to roll a company file back to a specific date and time. If your file was clean last Thursday and corrupted by Monday, you cannot revert to Thursday's state. QuickBooks Online does not offer company-file-level snapshots to users.
The $100 Line in the Sand
Intuit's Terms of Service cap their total liability for data loss at $100 USD. This figure makes Intuit's position unambiguous. They are responsible for keeping the platform running. You are responsible for the integrity of your data.
For a firm managing a single company file, $100 is an inconvenience. For a firm managing fifty files, each containing years of categorised transactions, the gap between $100 and the actual cost of data reconstruction is staggering.
The QuickBooks Online Advanced Backup (and Its Limits)
QuickBooks Online Advanced includes a native backup feature, currently available in the US only. It provides more protection than lower-tier plans, but it is not comprehensive.
More than fifteen data types are excluded from the native backup, including custom reports, reconciliation history, and bank rules. If your recovery depends on any of these excluded types, the native backup will leave gaps.
For firms on Simple Start, Essentials, or Plus plans, there is no native backup feature at all. Most client portfolios sit on these plans.
What Backup for QuickBooks Online Actually Looks Like
A proper backup for QuickBooks Online creates an independent, automated copy of your company file data outside Intuit's infrastructure. "Independent" and "automated" are both doing heavy lifting in that sentence.
Independent means the backup exists on separate infrastructure. If something goes wrong on Intuit's side, your backup is unaffected. If something goes wrong inside your company file, you have a clean copy to restore from.
Automated means daily snapshots with no manual intervention. Manual exports are the backups that stop happening the first time someone gets busy, which is every week.
What WOW Backup and Restore provides
WOW captures over fifty QuickBooks Online entity types in daily automated snapshots: chart of accounts, customers, vendors, invoices, bills, payments, journal entries, credit memos, purchase orders, deposits, transfers, tax codes, budgets, exchange rates, company settings, and transaction attachments.
A QuickBooks Online restore through WOW provisions a brand-new company file via Intuit's official OAuth flow. Data is rebuilt in strict dependency order and validated to the cent. The original file stays untouched, giving you both versions for comparison.
Connection is through OAuth (no stored passwords) with mandatory two-factor authentication. Data sits in regional AWS storage across Australia, Canada, and the United States.
Pricing runs at $9.95 USD per month per active company file. Inactive files move to WOW Vault at $2.49 USD per month for cold storage. A restore is $149.95 USD one-time per file. Every signup includes one free restore coupon with no expiry, and the first month per organisation is free. First two active organisations are free indefinitely.
What a restore does not cover
Bank feeds will likely need manual reconnection after a restore. Banking connections are tied to a specific company file authorisation, so a newly provisioned file will probably need fresh connections.
A restore rebuilds the complete company file. If you need a single deleted transaction, you restore the file and reference that record from the restored copy.
Practical Steps for Firms
The firms that handle data incidents well share two habits. They connected a backup for QuickBooks Online before they needed one, and they tested the restore process at least once.
A test restore on a quiet Friday takes a few hours and answers every question about recovery time, data completeness, and the reconnection steps for bank feeds. It turns an abstract safety measure into a tested process.
Connect your first company file to WOW Backup and Restore and take the free month. Then test the restore while your data is clean and nobody is watching the clock.