If your Xero or QuickBooks data disappeared tomorrow, the immediate problem wouldn’t be the inconvenience. It would be the audit trail, the VAT filing history, and the historical reporting your business is legally required to be able to produce. Most agency IT setups protect email and files carefully and leave accounting data completely uncovered, on the assumption that the accounting platform already handles it.
What’s actually at risk if your Xero or QuickBooks data is lost
The risk here isn’t just losing access to current invoices and balances. It’s losing the specific records UK tax law requires you to be able to produce on demand.
VAT records must be kept digitally for six years under Making Tax Digital
Under Making Tax Digital for VAT, digital VAT records must be retained for at least six years from the end of the VAT period they relate to, ten years for businesses using the VAT Mini One Stop Shop scheme. This applies to the underlying digital records used to prepare each return, not just the returns themselves. Losing the source data behind a filing from three years ago is a compliance problem, not just an operational one.
Audit trail continuity matters as much as the numbers themselves
An audit trail shows how a figure was reached, not just what the final figure was. If historical transaction detail is lost, reconstructing a defensible audit trail after the fact is difficult and sometimes impossible, particularly for adjustments, corrections, and anything involving reverse charge VAT treatment.
Historical reporting loss affects decisions you haven’t made yet
Year-on-year comparisons, trend analysis, and anything a lender or investor asks to see going back several years all depend on historical data staying intact. Losing it doesn’t just create a compliance gap. It removes information the business needs for its own decisions.
Xero and QuickBooks do not back up your data the way most businesses assume
Neither platform runs a true backup service in the sense most businesses mean when they use the word.
Cancelling your subscription starts a countdown on your own data
Xero retains data for up to seven years after a paid subscription is cancelled, but access during that period is limited and confidential, not a usable working copy. QuickBooks Online provides read-only access for one year after cancellation, or 90 days if the account was a trial. Neither window is designed as a recovery mechanism, and neither survives a cancelled trial without warning.
| Platform | Retention after cancelling a paid plan | Retention after a cancelled trial |
|---|---|---|
| Xero | Up to 7 years, held confidentially, not a working copy | Data deleted immediately, no retention |
| QuickBooks Online | 1 year, read-only export access | 90 days, read-only export access |
The platform’s retention is not the same as your business’s recovery plan
Even within an active subscription, neither Xero nor QuickBooks offers a built-in way to restore deleted transactions, contacts, or attachments to a specific point in time. A CSV export captures totals but typically loses attachments and the audit trail detail behind each entry, which is precisely the detail HMRC and an auditor care about.
If your business has never checked what happens to your Xero or QuickBooks data if something goes wrong, our IT Support team can help set up proper protection alongside the rest of your backup strategy.
How to set up proper protection for accounting data
Closing this gap follows a straightforward sequence, and it’s worth doing in order.
- Confirm your platform and cancellation type, since Xero and QuickBooks handle retention differently, and a cancelled trial behaves differently again from a cancelled paid plan
- Choose a third-party backup tool built specifically for accounting platform APIs, since neither Xero nor QuickBooks offers a native restore mechanism
- Set backups to run automatically on a schedule, rather than relying on someone remembering to export manually
- Test a sample restore before you actually need one, so you know it works rather than assuming it does
- Confirm the backup captures attachments and audit trail detail, not just transaction totals, since a basic CSV export loses both
- Give ownership of this to whoever owns the finance function, not IT by default, so it doesn’t get forgotten once it’s set up
Skipping the testing step is the most common way this goes wrong. A backup that has never actually been restored is a theory, not a safety net.
What this means for your business
Xero and QuickBooks are excellent at running your day-to-day accounting. Neither is designed to protect your historical data the way a genuine backup service does, and neither’s own retention policy is a substitute for one. Treating accounting data with the same seriousness as email and file backup closes a gap most agency IT setups still leave wide open.
Related articles
- Being in the cloud does not mean Microsoft or Google is backing it up for you
- Your staff now have AI agents running in their Google accounts around the clock – Here’s what your IT policy needs to say
- Client files leak through everyday messaging habits, not big mistakes
FAQs
Does Xero or QuickBooks back up our data automatically?
Not in the way most businesses mean by backup. Both platforms retain some data for a limited period after cancellation, but neither offers a built-in way to restore deleted transactions or attachments to a specific point in time within an active account.
How long do Xero and QuickBooks keep our data after we cancel?
Xero retains data for up to seven years after a paid subscription is cancelled, held confidentially rather than as a working copy, but deletes it immediately if a trial is cancelled. QuickBooks Online provides one year of read-only export access after a paid plan is cancelled, or 90 days after a trial.
How long do we need to keep VAT records under Making Tax Digital?
At least six years from the end of the VAT period they relate to, or ten years for businesses using the VAT Mini One Stop Shop scheme. This applies to the digital records behind each return, not just the submitted return itself.
Who in the business should own accounting data backup?
Whoever owns the finance function, working alongside IT rather than leaving it entirely to either side. Finance understands what needs to be recoverable and why; IT sets up and maintains the actual backup mechanism.
