No one has access to your organisation’s data unless you invite them into your account. You control what users can see and do in Xero.
Two-step authentication adds an extra layer of security to help protect your account. Each time you log in, you’ll need to enter a unique code generated by an app on your smartphone.
Used by many internet banking and online services, two-step authentication makes it much harder for anyone to hack into your account.
We know that data security is important to you. We keep your information private, and only use it for agreed purposes.
For instance, if you need help with a feature in Xero, you can choose to let Xero Support view your data while they help you.
If your computer or laptop is lost, stolen or broken, your account is backed up and protected online in the cloud. Xero’s online storage means you can log in from any device with an internet connection and you're good to go.
Data is encrypted using industry-standard data encryption, multiple layers of firewalls are in place, all access to our data centres and servers is controlled and monitored 24/7, and we perform regular security audits.
We replicate your data between data centres in different locations so that Xero is up and running most of the time.
We’ll let you know the latest news on phishing and other scams on our Security Noticeboard. We’ll also give the latest recommendations on how to protect yourself from them.
