Enter your idea

Audit trail definitely required for any addition, deletion, amendments to to all data within a data file

Essential and critical for all areas where there is addition, deletion, amendment to any and all data in Xero files.

This was requested in 2023. https://productideas.xero.com/forums/967127-practice-tools/suggestions/47575646-practice-manager-audit-trail-for-client-history

This functionality was accepted but has not made it into Xero Partner Hub. This is a TPB requirement and almost 3 years has passed since this was requested. Please urgently address this.

I'm just looking in XPH and there's no History or Audit Trail on client records. Tax Manager has limited details of edits and status changes. But Bank accounts, TFNs, personal details - there is just no method or record of what has been changed or accessed.
There's no way to track who has updated or changed a client record at all. With the Privacy Act requirements we should be able to see even who has viewed a client record.
An imagine if you had a staff member who decided to maliciously change or delete client details. Bank accounts, TFNs, personal details.
I think this is really important, and should be basic functionality for software, particularly when we are dealing with legally sensitive personal information.

An emaill notification of a new user being added to the file plus a history of who added someone the file should be set up as a security to the those who manager users. This audit trail is important to the security of the files and a good backup check.

Building on this, the existence of client-level history makes a strong case for extending audit visibility across the broader XPM data model - particularly into job-level activity.

From an ecosystem perspective, there’s also a practical way to support this alongside any native UI approach.

Enabling structured, high-quality change events via the XPM API (e.g. webhooks) would make it possible to capture a complete, time-based history of changes across both clients and jobs.

This would allow:

- A consistent audit model across client records, job records, and associated activity
- Independent preservation of change history over time
- Greater flexibility for firms to build reporting, controls, and review workflows

One key consideration, based on experience with other endpoints, is signal quality (Invoices implementation is excessively verbose). For audit data to be usable in practice, events need to be:

Field-level and meaningful (e.g. assigned user, due date, status)
Clearly structured (who, what, when)
Manageable in volume (to avoid excessive noise)

A combined approach - consistent native audit visibility plus structured event capture - would create a much stronger foundation for both operational transparency and long-term record integrity across XPM.

It’s encouraging to see that audit trail capability has already been recognised as important within Practice Manager (e.g. client history).

From a Control‑C perspective, this highlights something broader - consistency of record across XPM.

As firms rely on XPM to manage clients, jobs, deadlines, and responsibility, it becomes part of the system of record when outcomes are reviewed. That reliance isn’t limited to client changes - it extends directly to job ownership, due dates, status progression, and time allocation.

If audit visibility exists in some areas (e.g. client history) but not others (e.g. job lifecycle), the overall record becomes fragmented.

Without a complete history of who changed what, and when across both client and job layers, it becomes increasingly difficult to evidence and verify how outcomes occurred over time.

At that point, this moves beyond a feature gap into a data integrity and defensibility consideration.

We expect this to become more important as workflows become increasingly dynamic - particularly with more system-driven changes occurring via integrations and automation.

If XPM is used to assign accountability, it should also support visibility into how that accountability was established — consistently across the full record.

Strong support for building this out across jobs as well as client history. The value is in the completeness and continuity of the record, not isolated audit points.

Campbell
Control-C Founder

We need this ASAP!!!

This is something we have been asking for for years.

This cannot happen quick enough!

Translation:

"While we recognise that this is critical functionality that our software is missing, we'll get around to it eventually! Maybe. lol, please just stop asking."

🙄

In old invoicing in the history section it showed who an invoice was sent to, now it only shows that it was sent (SENT BY and DATE). It would be nice to be able to prove that the invoice was sent to a specific person. I cannot attach screen shot as it shows client email addresses, however can provide should it be required.

An audit trail for client history would be invaluable. Also (and I'll post a new idea for this), our current PM system syncs to Companies House, which is extremely useful and time efficient when onboarding new clients

I'm sitting with a situation now where staff are saying that Xero is changing info, and I can't prove that it is them doing it. Now they say that they can't trust Xero.

This is critical from a fraud perspective. What's to stop an employee from changing a client's bank account details, receiving a refund, and then changing them back?

Hi,

I would also like the status changes per job to be logged to show who changed what and when on the state tab of the job under notes.

I agree this is really important. Especially given the integration with other systems, eg Class, Nowinfinity, etc.

This is important because some changes are made due to the interaction with other programs and some made by staff. If there are continual errors this feature with help find the cause.

important for identifying training areas and reduction of errors