Accounting & Tax AI
Just Ask Xero (JAX)
Medium riskXero's agentic AI companion that answers questions and performs accounting tasks over client ledgers, in beta for accountants and bookkeepers.
Is Just Ask Xero (JAX) safe for confidential data?
JAX's data terms are better than the OpenAI headline suggested: Xero states that data entered into JAX is not used to train the underlying large language models, and that its commercial arrangements with LLM providers — AWS, Microsoft Azure, Google Cloud, and OpenAI — ensure data sent to them is not retained to train their models. Read that carefully, though: it is a no-training commitment, not a blanket zero-retention guarantee that nothing is stored during processing. The medium rating reflects three things: the product is agentic (it acts on ledgers, not just answers about them), it is in beta with terms and behavior still moving, and firm-side governance of which staff can point JAX at which client organizations is young. Xero's OpenAI collaboration on JAX's web research features is what triggered the where-does-my-data-go scrutiny — and the published answer largely holds up.
Risk by plan
The same product often carries very different terms depending on the tier — consumer plans are where the exposure concentrates.
Beta access under the firm's existing Xero terms; beta features and data commitments can change faster than GA products, so re-verify at each expansion of use.
Data handling
Training on inputs
Xero states data entered into JAX is not used to train the large language models, and that its agreements with LLM providers prevent data sent to them being retained for training. This is a no-training-retention commitment rather than a promise that nothing is stored transiently during processing.
Retention
Ledger data remains under standard Xero subscription terms; Xero does not publish a precise retention window for JAX conversation history, so confirm current beta terms at Xero Central before firm-wide rollout.
Residency
Xero processes data through global cloud providers (AWS, Azure, GCP) plus OpenAI for certain features; specific processing regions for JAX are not published. Canadian firms should factor cross-border processing into PIPEDA-driven client notices.
Compliance
- SOC 2Not verified
- GDPR / DPANot verified
- HIPAA BAANot verified
Certifications typically apply to specific tiers and contracts — confirm scope in writing before relying on them.
New to these frameworks? See our plain-language guides to SOC 2 and the other AI compliance standards.
Enterprise controls
- Runs inside existing Xero user permissions
- Published responsible data use commitments
- Contractual no-training terms with LLM providers
- Beta feature flags controlled per user
Frequently asked questions
Does Xero's AI train on my data?
Xero says no: data entered into JAX is not used to train the LLMs, and its commercial arrangements with providers including OpenAI, AWS, Azure, and GCP prevent data sent to them being retained for training. The precise wording is a no-training commitment rather than zero retention — transient processing storage is not ruled out — which is normal for the category but worth stating accurately in your own client disclosures.
Is Just Ask Xero safe to use on client ledgers during the beta?
The data terms are reasonable, but agentic beta software acting on live client books deserves staged adoption: start with read-style queries, review any transactions JAX creates the way you would a junior's work, and keep the beta's terms under periodic review since they can change before general availability. The bigger control is Xero permissions — JAX can only reach what the signed-in user can.
Our staff already ask ChatGPT their Xero questions — does JAX fix that?
Partly, and that is exactly why the distinction matters: JAX sits under Xero's terms with no-training commitments flowed down to LLM providers, while a personal chatbot account sits under consumer terms with none of that. Rolling out JAX gives staff a sanctioned path, but firms still need visibility into the unsanctioned one, because the habit of pasting client financials into free tools rarely disappears on its own.
Policy changelog
- Initial entry published from Xero's published JAX documentation and data use commitments.
Sources
- Xero Central: About Just Ask Xero (JAX) for accountants and bookkeepers (beta)
- Xero: Just Ask Xero (JAX) product page
This profile summarizes the vendor's published policies as of the verification date. It is not legal advice.
Just Ask Xero (JAX) is probably already in your organization.
Sanitized AI shows you who is using it and redacts sensitive data from prompts before it leaves your control.
More AI tool profiles
Generative AI tax research platform for tax practitioners, answering US and Canadian tax questions with citations to primary authorities.
AI-plus-human bookkeeping automation for accounting firms, connecting to client general ledgers and bank feeds to automate transaction categorization and close work.
Excel-embedded intelligent automation platform for audit and finance teams that extracts and cross-references evidence from client documents inside the workpaper.
AI-native audit and advisory platform for CPA firms where AI Field Agents perform engagement work such as controls testing and evidence review under practitioner supervision.