Synced
Trust & Security

Your books are sensitive. We treat them like it.

How Synced stores, protects, and handles your data — written plainly, without security theater.

Certifications

SOC 2 Type 2
In progress — report expected Q3 2026
ISO 27001
Planned for 2026
GDPR
Compliant
Australian Privacy Principles
Compliant

Data handling

Customer data is stored in AWS, in the region you select at signup (Sydney, Ireland, or N. Virginia). Encrypted at rest with AES-256, encrypted in transit with TLS 1.2+. Tenant-isolated with no shared schemas. Retention: data is deleted within 30 days of account closure — sooner on request.

AI & model handling

We do not use customer data to train shared models. Period. Agent behaviour improves from rule updates and per-tenant signals only. Model providers are bound by data-processing agreements that prohibit training on your data, including zero-retention terms with our primary LLM provider.

Access control

Role-based access inside your workspace. SSO via Google Workspace, Microsoft 365, or SAML on the Grow and Firm plans. Session timeouts, device revocation, and an admin audit log for every user action.

Uptime

Target: 99.9% monthly uptime. Incident history and live status at status.syncedhq.com.

Data residency

Available regions: AU (Sydney), EU (Ireland), and US (N. Virginia). Choose the region your ledger is in, and your data never leaves it.

Privacy & sub-processors

A full list of sub-processors is maintained at trysynced.com/trust/sub-processors. You'll be notified of any additions with 30 days' notice.

Start free. Connect Xero in 60 seconds.

No credit card. No forced demo. Connect Xero, drop in a bill, and watch Synced extract, code, and ready it for sync — in seconds.