Support
What access does XeroClarity need from Xero?
We request read-only access via Xero’s standard OAuth 2.0 flow. The scopes used are: accounting.transactions, accounting.contacts, accounting.settings, accounting.reports.read, and offline_access for token refresh. We never request write access and cannot modify any data in your Xero organisation.
What does the 9-phase forensic scan actually check?
The scan runs nine investigative phases: (1) Entity Orientation — your chart of accounts and company structure; (2) Financial Statements — P&L and Balance Sheet; (3) Transaction Forensics — duplicates, round numbers, missing memos; (4) Revenue Analysis — overdue A/R and top customers; (5) Expense Analysis — overdue A/P and vendor concentration; (6) Balance Sheet Integrity — account structure anomalies; (7) Cash Position — unreconciled bank lines and large deposits; (8) Red Flag Inventory — equity postings and tax liabilities; (9) Transaction-to-Balance Integrity — unexplained balance movements.
How long does a scan take?
Typically 30 to 90 seconds depending on the volume of transactions in your organisation and the date range selected. You’ll see live progress as each phase completes.
Is my client’s data stored?
Scan results are held in server memory for up to 2 hours and then discarded. We do not write your Xero data to a database. Your Xero OAuth tokens are stored encrypted (AES-256-GCM) and only used to run scans on your behalf.
Can I run scans for multiple Xero organisations?
Currently one Xero organisation is connected per account. Disconnect and reconnect to switch organisations. Multi-org support is planned for a future release.
What does the PDF report contain?
The report includes: a health score (0–100), executive summary, issue-by-issue detail with transaction-level evidence, a prioritised recommended action list, and a blank bookkeeper notes section for your annotations.
Can I add my firm’s name to the report?
Yes. On the results page, enter your name or firm name in the “Prepared by” field before downloading the PDF. It will appear on the cover page.
My Xero connection expired. What do I do?
Xero access tokens expire after 30 minutes but are automatically refreshed. Refresh tokens last 60 days. If your refresh token has expired, simply click “Connect Xero” again to re-authorise.