Xero

Finance & Payments New Zealand Website Reviewed Sept. 2, 2026

Cloud accounting for small businesses: bank feeds, invoicing, payroll, VAT and MTD filing, plus a large app marketplace.

Report an issue with this profile

Certifications & Accreditations

Certification Certifying Body Scope Achieved Expiry Status
ISO/IEC 27001 Accredited third-party certification body Xero online accounting platform and supporting ISMS — — Current
SOC 2 Type II Independent third-party auditor Xero platform; report available to customers on request — — Current

Compliance Frameworks

ISO/IEC 27001:2022
Full
SOC 2 Type 2
Full
GDPR 2016/679
Full
Xero acts as processor for customer data under its DPA; UK and EU data protection terms available

Assess Xero in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.

Supplier Management Free Risk Register