Dumpster Controls · agent page

This is the agent-optimized version of https://dumpstercontrols.io/help/quickbooks/quickbooks-security-model: the same content as the human page, without scripts, styles, animations or navigation. People should open the full page.

Canonical page
https://dumpstercontrols.io/help/quickbooks/quickbooks-security-model
Last updated
2026-08-22
Tokens
1,136 tokens (cl100k_base), within the 2,000-token budget for a help page
Size
9.1 KB for this page, against 20 KB for the human page (54% smaller)
Markdown
https://dumpstercontrols.io/help/quickbooks/quickbooks-security-model.md, or send Accept: text/markdown to the canonical URL
Cite as
Security model: how your QuickBooks credentials and data are protected. Dumpster Controls. https://dumpstercontrols.io/help/quickbooks/quickbooks-security-model (accessed 2026-10-05).
More for agents
Facts sheet · llms.txt · llms-full.txt · All agent pages · Product manual

QuickBooks Integration · updated 2026-08-22

Security model: how your QuickBooks credentials and data are protected

Everything the integration does to keep your books and your Intuit access safe, in plain language.

  1. ## OAuth 2.0 with Intuit, never passwords
    Connecting uses Intuit's official OAuth flow: you sign in on Intuit's own page and authorize the specific QuickBooks company. Dumpster Controls never sees or stores your Intuit password. The authorization handshake is protected by a signed, single-purpose state token that expires in 10 minutes and is bound to your company and your user, which blocks cross-site request forgery and cross-company injection.
  2. ## Tokens encrypted and bound to your company
    Access and refresh tokens are encrypted at rest with AES-256-GCM. The encryption is additionally bound to your company id, meaning a ciphertext moved to another company's record will not decrypt. Tokens are never logged, never returned to any browser, and never visible to staff.
  3. ## Strict access control
    Only owners and admins of your company can connect, disconnect or read the sync log. The tables holding connections, entity maps and the queue are locked to zero direct client access; every read goes through server-side functions that re-verify your role and your company on each call. Even the connect callback re-checks, at completion time, that the person who started the flow is still an admin.
  4. ## Country guard
    At connection time the integration verifies that the QuickBooks company country matches your Dumpster Controls company country (US with US, Canada with Canada), preventing a ledger in the wrong tax jurisdiction from ever being linked.
  5. ## Revocation, both directions
    Disconnect in the app revokes the grant with Intuit and destroys the stored tokens immediately. Revoking from Intuit's side (your Intuit account, My Apps) is detected: syncing stops, the connection is marked as needing attention, and the app shows a reconnect warning. Either way, no orphan access remains.
  6. ## Blast radius by design
    The integration holds the minimum scope (accounting only), touches only entities it created or explicitly matched, and is one-way in V1: nothing in QuickBooks can modify your Dumpster Controls data. Every sensitive action (connect, disconnect, kill switch changes) is audit-logged.

© 2026 Dumpster Controls. All rights reserved. Made in the USA.

Frequently asked questions

Is Dumpster Controls really free?

Yes. The software is free: dispatch, online booking, the driver app, invoicing, the Tresha AI assistant and every other feature, with no monthly fee, no trial period and no credit card to sign up. The only cost on the free plan is optional card processing when a customer pays by card through the platform: 2.99% plus $3.99 per transaction on the free plan. An optional Unlimited plan at $169 per month lowers that to 2.99% plus $0.30. Prices as published on dumpstercontrols.io/pricing on 2026-09-23.

Do you charge per driver, per truck or per order?

No. There is no per-driver, per-truck, per-user or per-order fee, and no order limit. A company with one truck and a company with twenty pay the same for the software: nothing.

Is there a contract?

No. There is no contract, no minimum term and no setup fee. You create the account yourself, and on the free plan there is nothing to cancel because nothing is billed. The optional Unlimited plan is billed month to month.

Which countries and languages are supported?

Dumpster Controls serves hauling companies in the United States and Canada. The app interface and the Tresha AI assistant are available in English, Spanish and Portuguese. The public pages, such as the blog, the help center and the landfill finder, are in English.

How do I switch from another dumpster software?

Create a free account at dumpstercontrols.io/login, with no sales call and no credit card. Then import your customers from a CSV file using the template provided in the app; past orders can also be imported from a CSV. Container sizes and pricing are set up in Settings. The landfill database, with 1,750 active US and Canadian landfills as counted on 2026-10-01, is already loaded, so disposal sites do not need to be typed in. Step-by-step guides are at dumpstercontrols.io/help.