You control who sees what
No one has access to your organisation’s data unless you invite them into your account. You control what users can see and do in Xero.
Extra security at log in
Two-step authentication adds an extra layer of security to help protect your account. Each time you log in, you’ll need to enter a unique code generated by an app on your smartphone.
Used by many internet banking and online services, two-step authentication makes it much harder for anyone to hack into your account.
Your personal information stays private
We know that data security is important to you. We keep your information private, and only use it for agreed purposes.
For instance, if you need help with a feature in Xero, you can choose to let Xero Support view your data while they help you.
Safeguards for data stored in the US
We use top-tier, third-party services located in the US to host our online and mobile services. This means that personal information is transferred to servers in the US. To satisfy the requirements relating to the transfer of data from the EU to the US, we have agreements in place with each of our hosting providers that use European Commission model contract clauses.