SECURITY AND TRUST
Security
Read-only access to Xero.
XO Report reads your Xero figures into Excel and Google Sheets. It cannot change anything in Xero, it never sees your Xero password, and you can disconnect it at any time.
Last updated November 2026
You sign in on Xero's page.
We never see your password.
Xero's own consent screen shows what XO Report may read, and you choose the organisation. XO Report gets an access token, not your password.
- OAuth 2.0
- The standard Xero uses for every connected app. Xero adds one organisation per sign-in.
- Encrypted tokens
- Access tokens are encrypted (AES-256-GCM) before they are stored, and renewed automatically.
- Your Xero roles still apply
- To connect an organisation, your Xero user needs the permission to connect apps there.
Read-only, by design.
Nothing in Xero can change.
Every accounting permission XO Report asks Xero for is read-only. That holds for the formulas, the tables and the reports, in Excel and in Google Sheets.
XO REPORT CAN READ
- Organisation details and settingsName, base currency, tax rates, tracking categories.
- Chart of accounts and budgetsFor formulas such as XO.BALANCE and XO.BUDGET.
- Contacts, invoices and billsPlus credit notes, payments, bank transactions and manual journals.
- The financial reportsProfit & Loss, Balance Sheet, Trial Balance, aged and bank reports.
XO REPORT CANNOT
- Create, change or delete anything in XeroEvery accounting permission XO Report asks Xero for is read-only.
- See your Xero passwordYou sign in on Xero’s own page.
- See your card numberStripe takes the payment.
- Sell your Xero data or use it to train AIYour Xero data is used only to run XO Report for you.
Your figures land in your file.
Our copy is short-lived.
Xero data travels over HTTPS from Xero, through our servers, into your workbook. To keep formulas quick, the servers keep a short-lived copy, and an hourly clean-up deletes expired copies.
- Transactions: about 5 minutes
- Invoices, bills and similar lists.
- Reports: up to 30 minutes
- Profit & Loss, Balance Sheet, Trial Balance and the rest.
- Reference data: up to 1 hour
- Chart of accounts, tax rates, tracking categories.
No Xero financial data is stored permanently on our servers. The add-in also keeps a short-lived copy on your computer. The Refresh button in the add-in is designed to skip these copies and fetch fresh figures from Xero.
Disconnect any time.
From XO Report or from Xero.
Once disconnected, XO Report can no longer fetch from Xero for that organisation. Copies already cached expire within the times above, and figures already in your workbook stay.
- In your XO Report account
- Open Advanced and click Disconnect next to the organisation (the person who pays, or a trial user). Managing organisations
- In Xero
- Remove XO Report from the connected apps in your Xero settings.
- Delete your account
- Xero access is disconnected straight away; your data is erased after a 30-day cooling-off period. Account deletion
Payments and infrastructure.
The parts you don't see, run on providers built for it.
- Payments by Stripe
- A PCI DSS Level 1 processor. Card details go straight to Stripe; we never see or store card numbers.
- HTTPS everywhere
- Every connection, from Xero to your workbook, uses TLS encryption.
- Hosting
- Website on Vercel. Back end on Supabase, with row-level security on the database.
- Abuse protection
- A rate limit on the sign-in callback and bot protection at the edge.
- Account pages
- A nonce-based script Content Security Policy on the account routes.
- Monitoring
- Automated monitoring for availability and errors.
Your data, your rights.
Under GDPR and similar laws you can access, correct or delete your personal data at any time.
What we collect, why, and how long we keep it is in the Privacy Policy. The service terms are in the Terms of Service.
Questions about security? Email us at .
Questions people ask.
- Can XO Report change anything in my Xero file?
- No. Every accounting permission XO Report asks Xero for is read-only, so no formula, table or report can create, edit or delete anything in Xero. The same goes for Excel and Google Sheets.
- Does XO Report store my Xero financial data?
- Not permanently. To keep formulas quick, our servers keep a short-lived copy of what Xero returned: transactions for about 5 minutes, reports for up to 30 minutes, and reference data such as the chart of accounts for up to 1 hour. After that it is no longer used, and an hourly clean-up deletes it. The add-in also keeps a short-lived copy on your own computer. The Refresh button in the add-in is designed to skip these copies and fetch fresh figures from Xero.
- How is the connection to Xero protected?
- You sign in on Xero’s own page with OAuth 2.0, the standard Xero uses for connected apps. XO Report receives an access token, never your password. The tokens are encrypted (AES-256-GCM) before they are stored, and every connection uses HTTPS.
- How do I disconnect XO Report from Xero?
- On your XO Report account page, open Advanced and click Disconnect next to the organisation (the person who pays, or a trial user, can do this). You can also remove XO Report from the connected apps in your Xero settings. XO Report then can no longer fetch from Xero for that organisation; figures already in your workbook stay.
- Who handles payments?
- Stripe, a PCI DSS Level 1 payment processor. Card details go straight to Stripe; XO Report never sees or stores your card number.
- Can I delete my account and data?
- Yes. You can ask for your account to be deleted at any time. Your Xero access is disconnected straight away, and your data is erased after a 30-day cooling-off period. The privacy policy lists the few records that are kept, such as billing records required by accounting law.
Try it on your own Xero file.
14 days free, no credit card. Read-only from the first click.
Free trial · No credit card · Cancel anytime