INTUIT INC.

Evaluation of Disclosure Controls and Procedures

Based upon an evaluation of the effectiveness of disclosure controls and procedures, Intuit’s Chief Executive Officer (CEO) and Chief Financial Officer (CFO) have concluded that as of the end of the period covered by this Quarterly Report on Form 10-Q, our disclosure controls and procedures as defined under Exchange Act Rules 13a-15(e) and 15d-15(e) were effective to provide reasonable assurance that information required to be disclosed in our Exchange Act reports is recorded, processed, summarized, and reported within the time periods specified by the Securities and Exchange Commission and is accumulated and communicated to management, including the CEO and CFO, as appropriate to allow timely decisions regarding required disclosure.

Changes in Internal Control over Financial Reporting

There were no changes in our internal control over financial reporting that occurred during our last fiscal quarter that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.

Inherent Limitations on Effectiveness of Controls

Our management, including our CEO and CFO, believes that our disclosure controls and procedures and internal control over financial reporting are designed to provide reasonable assurance of achieving their objectives and that they are effective at the reasonable assurance level. However, no matter how well conceived and executed, a control system can provide only reasonable and not absolute assurance that the objectives of the control system are met. The design of any control system must reflect the fact that there are resource constraints and the benefits of controls must be considered relative to their costs. There are also limitations that are inherent in any control system. These limitations include the realities that breakdowns can occur because of errors in judgment or mistakes, and that controls can be circumvented by individual persons, by collusion of two or more people, or by management override of the controls. Because of these inherent limitations in a cost-effective control system, misstatements due to error or fraud may occur and not be detected.