The Tax Administration Act 1994 was amended on 2 November 2012 to enable the Commissioner to authorise "persons" (like Xero and other SaaS providers) to hold, on behalf of tax payers, records outside New Zealand.(see Section 22 (2BA)). In March 2013 the IRD released a Standard Practice Statement "SPS 13/01: Retention of business records in electronic format, application to store records offshore and application to keep records in Maori". We are also approved by the IRD to hold our customer's accounting records on our offshore servers. The approval can be found here: Third party providers approved to store taxpayer electronic records offshore. If you would like to learn more about Xero's security and a blog post about the IRD approving us for offshore record keeping, please see the links below. Xero Blog: Xero has offshore data storage approval for NZ customers
Our software has never been breached and we have never lost any customer data. We invest heavily to protect your sensitive financial information against unauthorised access and system failures, ensuring your data is guarded to the highest level. Xero Website: Security in Xero
Our shredder is a medium security (P-3) shredder that shreds paper into unreadable Cross-cut sized particles (sized 4 x 50mm) making it ideal for sensitive and confidential data.