Product

Every Xero record, captured nightly. Restored on demand.

CINDA reads your Xero file through a scoped, read-only OAuth connection, encodes a differential snapshot, encrypts it with a key only you can revoke, and seals it to immutable storage in Australia. Then it does it again tomorrow. And the next 2,555 nights after that.

The pipeline

Five stages. Hands-off.

01 · Connect

Scoped OAuth

Read-only token, every Xero organisation in your tenant. Revocable any time from your dashboard.
OAuth 2.0
02 · Pull

Differential read

Only changed records since last snapshot. Fast on big files, gentle on the Xero API.
Diff · merkle-checked
03 · Encrypt

AES-256 sealed

Snapshots are encrypted before they ever leave compute. Your KMS key gates every read.
AES-256-GCM
04 · Store

Immutable WORM

Object-locked storage in Sydney. Ransomware can't overwrite what literally cannot be modified.
S3 Object Lock
05 · Verify

Daily integrity test

Each snapshot is checksum-verified and a sample is restore-tested every night. Failures alert immediately.
SHA-256 manifest
What's captured

Twelve record domains. Every field.

CINDA doesn't sample. It pulls every record, every field, every attachment from every Xero organisation you connect — and indexes them so you can find a single invoice from 2021 in under a second.

Sales

Invoices

Full line items, taxes, tracking categories, payments, credit notes, repeating templates.
Purchases

Bills & expenses

Bills, expense claims, purchase orders, prepayments, overpayments and credit notes.
Master data

Contacts

Customers, suppliers, contact persons, addresses, banking details, default discounts.
Ledger

Manual journals

All journal entries with debit / credit splits, narrations and tracking dimensions.
Banking

Bank transactions

Statement lines (reconciled & unreconciled), bank transfers, bank rules and feeds.
Tax

BAS & GST returns

Activity statement workings, lodged returns, payroll YTD and STP reporting.
Inventory

Items & stock

Tracked inventory, item codes, average costs, sales / purchase accounts.
Fixed assets

Asset register

Fixed asset register, depreciation, disposals and pooled assets.
Documents

Attachments

Every receipt, invoice scan, file attached to any record — in original format.
Setup

Chart of accounts

Account structure, tax rates, branding themes, payment services, organisation settings.
People

Users & roles

Access permissions, user roles, login history and authorisation events.
History

Audit trail

Full who-changed-what-when chain — the evidence ATO and insurers ask for.
Restore

Any record. Any day. One click.

Find first. Restore second.

CINDA indexes every record from every snapshot — full-text searchable across contacts, invoice numbers, journal narrations and audit-trail events. Filter by date range, organisation, user, or amount.

Pick the version of any record on any of your captured days. Compare two days side-by-side. Restore a single record back to Xero by CSV re-import, or recover the full file to a fresh Xero organisation in a disaster.

Sign up now
Snapshot timeline · Acme Logistics ● Live
Apr 28
29
30
May 01
02
03
04
05
06
07
08
09
10
11
RecordINV-2026-0417
ContactAcme Logistics Pty Ltd
Amount$284.50 incl. GST
Status (May 08)Approved · Awaiting payment
Status (May 09)⚠ Deleted by james@acme.com.au
Restore to Xero Export CSV Compare days
Where your backups live

CINDA is the software. You choose the storage.

CINDA is an Australian software company. We build the engine that automates, encrypts, and verifies Xero backups — you decide where the encrypted snapshots are written. Three options, same software, same guarantees. The first two are included in your CINDA licence. The third is a managed hosting service.

Option A

Your local infrastructure

Write snapshots to a NAS, SAN or server you already own. Air-gapped storage, fully owned encryption, no cloud dependency — ideal for data-sovereignty and regulated environments.

  • Works with NetApp, Pure, Dell EMC, Synology, QNAP
  • SMB / NFS / S3-compatible targets
  • BYO encryption keys & HSM
  • Included with your CINDA licence
Self-hosted storage · on your network
Option B

Your private cloud

Write snapshots to a storage bucket in your own AWS, Azure or GCP tenancy. Your VPC, your keys, your audit trail — CINDA just orchestrates the backup. Most common choice for mid-market firms.

  • S3, Azure Blob, GCS, Cloudflare R2, Backblaze B2
  • BYO-KMS for encryption keys
  • Region of your choosing — AU, EU, US
  • Included with your CINDA licence
Your cloud account · you pay the storage bill
Trust & controls
AES-256At rest
TLS 1.3In transit
ImmutableWORM storage
BYO keysYou hold the keys

Sign up — your first snapshot runs tonight.

No payment up front. Leave your details and a specialist will be in touch.

Sign up now Talk to us