Mana Tax handles sensitive financial data. We take that seriously. The platform is built with a security-first architecture, NZ-specific compliance standards, and full transparency about how your data is accessed, used, and protected.
Mana Tax connects to Xero using OAuth 2.0. the same secure authentication standard used by banks and enterprise financial platforms. You authorise the connection, and Mana Tax accesses only what it needs to deliver its services. Your Xero login credentials are never stored on our servers. Mana Tax has both read and write access to your Xero organisation. Read access allows it to analyse your transactions, generate reports, and provide financial insights. Write access allows it to take action on your behalf. Such as creating assets, posting depreciation journals, and pushing invoices. Always with your approval.
All data stored within Mana Tax is encrypted at rest. All data transmitted between your browser, our platform, and Xero is encrypted in transit using TLS. Your financial information is never transmitted or stored in plain text.
Mana Tax is designed and operated in compliance with the New Zealand Privacy Act 2020. We collect only the information required to deliver our services, retain it only as long as necessary, and never sell your data to third parties.
Our platform is built against the OWASP Application Security Verification Standard (ASVS). A recognised framework for identifying and addressing security risks in web applications handling sensitive data.
Mana Tax undergoes independent penetration testing to identify and remediate vulnerabilities before they can affect our customers. Security is not a one-time checkbox. It is an ongoing commitment.
Every action taken within Mana Tax. including all write-back operations to Xero. is securely logged. You have a complete, transparent record of system activity for accountability, compliance, and peace of mind.You can trust that your processes follow the requirements that matter most to you.
Mana Tax is a multi-tenant platform. Your data is fully isolated from other organisations. No other user or business can access your financial data under any circumstances.
We never store your Xero username or password. Authentication is handled entirely through Xero's official OAuth flow. Your credentials stay with you.
Mana Tax is built specifically for New Zealand businesses. Every feature. From GST
calculations to provisional tax forecasting to depreciation rates is aligned with NZ IRD rules
and local compliance requirements. You can trust that your numbers follow the standards
that matter for operating in New Zealand.
