How we handle your data
The free Xero Data Health Check, in plain terms. You connect Xero (read-only) or upload an export, we run a read-only check, we show you the report, and we keep nothing.
What you provide
Either three CSV files exported from Xero (contacts, accounts, and transactions) plus the reporting period, or a read-only Connect Xero authorisation plus the period. Either way the data can contain business and personal information about your contacts, accounts, and transactions.
If you Connect Xero
Connecting Xero is optional and read-only. You authorise access on Xero's own consent screen; we use the connection once to read your contacts, accounts, and transactions for this single check, then discard the access token immediately and disconnect the organisation from our app at Xero, so nothing stays connected. We never store the token, never request a refresh token, and never write anything back to Xero. You can confirm, or revoke, the connection at any time from your Xero account.
What we do with it
Each upload is written to a throwaway temporary location for the length of the single request, handed to the deterministic checking engine, and discarded when the request finishes. We do not write your data to a database, an object store, or a log. We do not use it to train anything, and we do not share it with any third party.
No data reaches any AI
The check is deterministic Python end to end. No language model and no AI provider sees your file or any field in it. Every finding originates in auditable code, not in an AI call. This is a hard rule of the platform: the checking layer imports no AI-provider code at all.
Read-only
We never change your Xero data. Whether you upload a CSV or connect Xero, we only ever read: no write-back to Xero, and the Connect Xero scopes we request are read-only. The report is a remediation list for you or your adviser to action inside Xero.
What we keep
Nothing tied to your upload: no copy of your files, no copy of the report, no record of the contents. Transient infrastructure logs may record that a request happened and whether it succeeded, but not what was in it. A connected report sits in memory for ten minutes so your browser can collect it, then goes. The CSV report exists only in the response sent to your browser, so use the download button to keep a copy.
Not tax advice
The report is a data-quality remediation list, not tax advice and not a compliance ruling. You decide what to action in Xero.