CSV-first Software Spend Review: prove it on one export before you connect live

The overview guide covers how a bookkeeping or CAS firm runs a Software Spend Review across a client book. This piece is the proof step most firms take first: one transactions export, no live connect, a white-labeled leave-behind you can show a client or a partner.

If you want the full firm workflow, start with How to run a Software Spend Review across a client book. If you want to see whether the review holds up on real ledger lines before you touch OAuth, stay here.

Why firms start with an export

A CSV is a smaller ask than connecting live books. The firm can prove the review on one client's transactions export without OAuth, without partner sign-off on a new connection, and without asking the client to adopt an app. The findings engine is the same one used for live QuickBooks Online and Xero.

A CSV-first review answers a narrower question: do recurring software charges show up clearly enough on this client's books that a branded findings report is worth delivering?

You already hold the export. The client does not need a ShadowLedger account. You do not need to connect QuickBooks Online or Xero yet. You get a real report shape on real transactions, not a pitch deck.

That is enough to decide whether the review belongs in your advisory toolkit.

What a good transactions CSV looks like

A useful export has a transaction date, an amount, and a payee or vendor description for each line. Cover 12 or more months when you have them, and include the expense accounts where software is actually paid. Thin history often means thin findings. The CSV can come from any source, not only QuickBooks Online or Xero.

The free CSV audit accepts a transactions export from any source you already have: books export, bank, or another ledger. It is not limited to QuickBooks Online or Xero files.

Live OAuth connect later is QuickBooks Online and Xero only. Google Workspace is not open. Do not promise it.

A useful export usually has:

• A date range that covers recent spend. Prefer 12 or more months when you have it. Thin history often means thin findings.
• Transaction date, amount, and a payee or vendor description the firm already recognizes.
• The expense accounts where software and recurring tools actually land for that client.
• Enough rows that annual invoices and ACH debits are in the file, not only card-like merchant names.

You do not need a perfect chart of accounts cleanup first. You do need the lines where software was paid. If software sits in miscellaneous expense and never hits the export, the scan will look empty for the wrong reason.

Exact export click-paths vary by product and version. If your team is unsure which report to pull, escalate internally rather than inventing a menu path for the client.

What the firm gets as a white-labeled leave-behind

The point of the CSV pass is not a private spreadsheet. It is a client-ready artifact under your firm brand.

A firm-grade handoff looks like this:

• Your logo on the report.
• Prepared by your firm.
• Prepared for that client.
• Delivered as a PDF or a revocable share link.
• Findings framed as vendors, cost, and why a line was flagged, not as a critique of how the books were kept.

The client never logs into ShadowLedger. They never need a ShadowLedger account for you to run or deliver the review. You stay the face of the work.

Site demo dollars, if you show /demo, are sample figures on a made-up company. Use them to explain report shape. Never present them as this client's results.

When to move from CSV to live QuickBooks Online or Xero

Move to live connect when the first branded report landed, the firm wants the same review on more clients, and you want recurring re-scans without re-exporting. Live connect is QuickBooks Online and Xero only. Confirm the engagement letter covers a third-party tool first. The client still never logs into ShadowLedger.

Stay on CSV when you want proof on one company with no card and no OAuth. That is the free audit path at /sign-up?intent=free.

Move to live connect when:

• The first branded report landed and the firm wants the same review on more clients.
• You want recurring re-scans without re-exporting every week.
• Accountant access you already hold is enough to connect, and the engagement letter covers a third-party tool.

The Firm path is built for a book of clients, not a one-off file. Firm trial details and list pricing live on /for-bookkeepers. Keep free audit and Firm trial separate: free is one company and no card; Firm trial requires a card and is for the full book.

CSV and live connect use the same findings engine. You are not switching products when you graduate from export to sync. You are changing how often the data refreshes.

Honest scopes when you do connect

Be plain with partners and ProAdvisors before anyone clicks Connect.

• Xero: true read-only OAuth scopes for the accounting data we use. No payroll. No bank feeds.
• QuickBooks Online: Intuit has no read-only accounting scope. Production access uses read and query calls after Intuit's app assessment. Writes are blocked in our code. We do not create, edit, or delete books data.

Confirm the engagement letter covers sharing client data with a third-party tool before OAuth. The client still does not log into ShadowLedger. The firm connects with access it already holds.

Google Workspace remains closed. Do not put it on a roadmap slide for a prospect.

What this CSV-first path is not

• Not a promise that every export will produce a thick findings list. Date range and which accounts you exported still matter.
• Not unused-seat or unused-login reclaim. A ledger records what was paid, not who logged in.
• Not a card-only spend dashboard for one company. ACH, checks, invoices, and direct debits are part of why the books matter.
• Not a substitute for SOC 2. We do not have SOC 2. Point to /security and /dpa when someone asks.
• Not a reason to invent customers, logos, testimonials, or average savings.

How to start

Pick one client where software and recurring tools show up in the books. Export a transactions CSV from whatever source you already use for that client. Run the free audit at /sign-up?intent=free. Brand the report. Hand the PDF or share link to the client without sending them through another login.

If the leave-behind is useful, decide whether live QuickBooks Online or Xero sync is worth it for the rest of the book. Firm overview and trial entry are on /for-bookkeepers.

For the broader firm workflow beyond this proof step, read How to run a Software Spend Review across a client book.