Postlock for Xero

Read-only. Always.

Postlock connects to Xero with read-only access - it pulls your balance sheet, detects post-lock changes, and verifies board figures. It can never change anything in your ledger.

The connection

What Postlock reads, and what it never touches.

What we read

Balance sheet: your as-at-date report, pulled once per close
Profit & loss: snapshotted at lock for the restatement comparison
Document history: who posted what and when, for post-lock attribution
Organisation details: your Xero shortcode, for deep links back into Xero

What we never do

✗ Post, edit or delete anything in your ledger
✗ Create invoices, journals or bank transactions
✗ Request write scopes, ever
✗ Access payroll or employee records
✗ Use your data to train AI models

OAuth 2.0 · Xero's standard flow

You connect via Xero's standard OAuth authorisation page. Postlock requests only the scopes it needs. Your token is stored securely server-side and removed the moment you disconnect.

Demo Company by default

Postlock only connects to the Xero Demo Company out of the box. Connecting to real organisations requires an explicit config change - so you can verify the integration safely before touching live data.

Getting connected

Three steps.

Create an account

Connect Xero

From the dashboard, click Connect Xero. Xero's authorisation page opens - click Allow and you're back in Postlock.

Run your first close

Pick a month, open the reconciliation screen, and Postlock pulls your balance sheet. You're reconciling.

Xero App Store certification is on the roadmap - we'll say plainly where we are. See Security for the full data-handling picture.

Find out for free. No card, no sign-up.

Connect Xero read-only and check your last 6 closed months in one pass. Prefer to look around first? The demo company needs no sign-up either.

Read-only Xero connection Never writes to your ledger No lock-in · leave and take everything

Check my closed months · free