Snapshot 38850

Document
Security page
URL
https://www.xero.com/us/security/
Fetched
HTTP status
200
Content type
text/html
Fetch mode
static
Size
315220 bytes
SHA-256 (raw)
b3ec9496ca738c6b666da6b4410856d328108c0fd048d4a9f021299d1b27eee9
SHA-256 (normalized text)
5252e2ad93e07e28db7fc41395ec43bd8a611eb89cbd439777930dcb812a229b

Normalized text

Scripts and page chrome removed; this is what change detection compares.

ISO 27001 security standard compliance
Xero is certified as compliant with ISO/IEC ISO27001:2022, the premier global information security management system (ISMS) standard.
Log in to download the ISO 27001 certificate
SOC 2 security assurance audits
Xero produces Service Organization Control (SOC 2) reports based on independent audits of Xero’s cloud-based accounting system.
Log in to download the latest SOC 2 report
Request security assurance reports
If you don’t have a Xero login, you can request the latest available ISO 27001 certificate or SOC 2 report by completing a request form.
Request security reports
PCI DSS v4.0, SAQ A compliance
We comply with the Payment Card Industry Data Security Standard. We're a level 2 merchant & outsource card processing to level 1 providers.
Multiple layers of protection for data
We provide multiple layers of protection for the information you trust to Xero, including encryption when it’s transferred and stored.
Data protection at Xero
Multi-factor authentication for access
Multi-factor authentication (MFA) is designed to prevent anyone but you from accessing your Xero account, even if they know your password.
How MFA works
Robust network and data center security
Security controls protect access to and within our environment, including firewalls, intrusion protection systems and network segregation.
Best-in-class availability
Multiple redundancy technologies for our hardware, networks and infrastructure help to keep Xero running if any component fails.
Vulnerability Disclosure Program
Xero's VDP helps ensure security issues are constantly reported and resolved securely.
More on Xero’s VDP
Your online safety
We design security into Xero from the ground up, but you can take additional precautions to help keep you safe online.
Keeping your Xero account safe
If you have questions about security or notice any unusual activity related to Xero, visit Xero Central.
Read support articles about security on Xero Central
Phishing and malicious emails
If you suspect you received a phishing email and it says it’s from Xero, don’t click on anything in the email.
Report by forwarding the email to phishing@xero.com
Xero security noticeboard
Find updates on Xero’s security noticeboard about known phishing and other scams targeting our community.
Check out the security noticeboard
Get one month free
Get one month free on any Xero plan.
Get one month free
See all features