Trust & Security

Private. Encrypted. Yours.

How Synced stores, protects and handles your data. Written plainly.

Certifications.

  • SOC 2 Type 2

    In progress, report expected Q3 2026

  • ISO 27001

    Planned for 2026

  • GDPR

    Compliant

  • Australian Privacy Principles

    Compliant

  • Data handling

    Stored in AWS, in the region you choose at signup: Sydney, Ireland or N. Virginia. AES-256 at rest, TLS 1.2+ in transit, tenant-isolated with no shared schemas. Deleted within 30 days of account closure, sooner on request.

  • AI & model handling

    Your data never trains shared models. Agents improve from rule updates and per-tenant signals only. Model providers are bound by data-processing agreements that prohibit training on your data, with zero-retention terms from our primary LLM provider.

  • Access control

    Role-based access in your workspace. SSO via Google Workspace, Microsoft 365 or SAML on the Grow and Firm plans. Session timeouts, device revocation and an admin audit log for every action.

  • Uptime

    99.9% monthly uptime target. Incidents and live status at status.syncedhq.com.

  • Data residency

    AU (Sydney), EU (Ireland) or US (N. Virginia). Choose the region your ledger is in, and your data never leaves it.

  • Privacy & sub-processors

    The full list lives at trysynced.com/trust/sub-processors. Any addition comes with 30 days' notice.

Start free.

Connect Xero. Drop in a bill. Watch it get coded.