Fully managed data encrypting service and annotation
platform for teams of all industries.
Xero is the encryption, annotation, and audit layer that sits between your data and everything that touches it — no rewrite required.
Six lines and a key. Xero wraps your existing reads and writes — no schema migration, no proxy hop, no surprises in production.
// wrap a column with one call import { xero } from "@xero/sdk"; const client = xero({ key: env("XERO_KEY"), scope: "customers.email", policy: "tokenize", }); const rows = await client.write({ table: "customers", rows: [{ email: "a@x.io", tier: 1 }], }); // reads stay transparent — keys travel with the role const { email } = await client.read(rows[0].id);
Point Xero at your warehouse, object store, or app. Read-only by default — we never store the data itself.
Tag fields with policies. Sensitivity, retention, owner, access scope — everything travels with the row.
Every read, write, and key event is signed. Audit, replay, or revoke in a single click.
We replaced three vendors and an internal team with Xero. The audit story alone paid for itself in the first quarter.
Field-level keys without changing the schema. We rolled it out in production in eleven days.
Annotations move with the data — that single idea changed how our analysts work. We don't ship without it.
Pay for what you protect, not for seats. Every plan includes the full encryption + annotation layer.
For small teams getting their first column under control.
Everything growing companies need to ship without rework.
Dedicated infra, SLAs, and a deployment engineer in your Slack.
Ship the safer pipeline you've been postponing. Free for the first 5M records — no credit card, no demo gate.