Security Built Into Xaro
How Xaro protects your company's data: separate accounts, encrypted connections and credentials, careful sign-in and recoverable backups.
How Your Data Is Protected
Questions, or a security concern to report? Email support@xaro.co.
Encrypted Connections
Xaro is served over HTTPS, so what passes between your browser and Xaro is encrypted in transit.
Your Data Kept Separate
Every company's records belong to its own account, and each request is checked against that company before anything is read or changed.
Sign-In Without Passwords
Sign in with a one-time code sent to your email or a passkey on your device. Codes expire after five minutes and allow three tries.
Encrypted Integration Keys
Keys and passwords for connected services are encrypted before they are stored, never shown again after you save them, and used only on Xaro's servers.
Controlled Support Access
If Xaro support needs to look at your account, access is read-only, ends within thirty minutes, and is recorded in your audit log.
Encrypted Backups
Your data is backed up automatically to encrypted off-site storage, with a documented process for restoring it.
