Security

Each person signs in to Multiledger, then connects their own Xero login. Xero's consent screen lets them tick each organisation they want to share.

Multiledger can reach only the organisations that person can already open in Xero, at the level their Xero role allows. It does not widen anyone's access.

Workspace admins choose who may use the connector and can narrow each person to a list of organisations.

Multiledger asks Xero only for read-only scopes. It cannot create, edit, approve or pay anything in Xero.

The Xero tokens that let Multiledger read on each person's behalf are encrypted at rest.

Multiledger keeps each organisation's chart of accounts, which it needs to map accounts to the group chart, and the activity log.

It does not keep copies of reports, invoices or transactions. Those are fetched live from Xero when Claude asks and returned to Claude.

Every tool call is logged with who made it, which tool was used, which organisations it covered and the outcome. Workspace admins can see the log.

Data from Xero is never used to train AI models. Xero's developer terms forbid it, and Multiledger does not do it.

Multiledger supplies the data and calculates the totals. Claude's analysis of that data is Claude's own, and Multiledger does not check its reasoning. Check material figures in Xero before you rely on them.

A person can disconnect Xero in Multiledger at any time, or remove the app under Connected apps in Xero.

A workspace admin can switch a person's access off at once.