Most people do not read the cancellation fine print until they need it, and by then it is the wrong time to find out. You hit cancel because you are switching platforms, winding down a business, or consolidating accounts. The confirmation email lands. A few weeks or months later, someone asks for a record you assumed you still had access to, and you discover you do not.
What actually happens to your Xero data when you cancel your subscription is not a single event. It is a sequence, with different things becoming unavailable at different stages. Understanding the timeline matters because each phase removes options you had in the previous one.
This article walks through what happens at each stage and what you can do about it. The short version: by the time you cancel, the protective work should already be done. If it is not, your window to act is shorter than you think.
The Cancellation Day Timeline
The moment you submit the cancellation, three things change at once.
Your Xero organisation moves from active status to read-only. Billing stops, which is the part everyone notices. Access for any non-admin users may shift, depending on your plan and configuration. Any connected app integrations that depended on API write access stop working as designed, though some may continue to read data until the read-only window itself closes.
What does not change on cancellation day: the data is still there, still queryable from inside the platform if you log in. The change is in what you can do with it. You can look. You can take screenshots. In many cases you can still run reports and download exports. What you cannot do is post new transactions, run a payroll cycle, or use Xero as a working accounting system.
This is the moment when an existing Xero Backup is worth its weight in audit hours. If you set up automated backups months or years earlier, you already have a clean Xero full backup outside of the platform. If you did not, the read-only window is your last chance.
What Read-Only Mode Actually Means
Read-only is not a static state. It is a countdown.
What you can still do
During the read-only window, most users can still log in. You can view transactions, run standard reports, and export reports to PDF or CSV. You can take screenshots of organisation settings, tax configurations, and chart of accounts structures. For many businesses, this is the period where they realise something important is missing from their exports and scramble to fill the gap.
What you cannot do
You cannot post new transactions, edit historical records, run payroll, reconcile bank feeds, or send invoices. Connected apps that rely on writing back to Xero stop functioning. Bank feed connections begin to wind down. If you discover an error in a prior period, fixing it through Xero is no longer possible.
The exact duration of read-only access depends on your region, plan type, and Xero's current policies. The practical window for meaningful data extraction is shorter than most users expect, and it varies. Treat it as days, not months.
After Read-Only Ends: The Quiet Phase
Once the read-only window closes, Xero retains the data on their platform for a further period. This is passive storage, not access. You cannot log in. You cannot download. You cannot run reports. The data exists somewhere on Xero's infrastructure, but for practical purposes, it is no longer yours to use.
Xero's published position is that retained data can be made available again if you reactivate the subscription within their retention window. Reactivation reopens access and restores the organisation to a usable state. The catch is that reactivation requires paying for a renewed subscription, and the retention period itself varies by region and plan.
If you cancelled because the cost was the problem, paying to reactivate just to extract data is an expensive way to solve what should have been a five-minute pre-cancellation task. This is the gap that proper Xero Backup Services exist to close.
Reactivation Is Not a Backup Strategy
Some teams treat Xero's retention as a backup. It is not.
Three reasons it does not hold up. First, retention windows can change, and they vary by region and plan. Building a recovery plan around a third party's policy means you are exposed every time that policy is updated. Second, reactivation costs money and takes time. If you need an urgent record for a tax audit or a legal request, the speed of a backup-and-restore process beats subscription reactivation every time. Third, retained data is whatever you left in Xero at cancellation. If something was corrupted, deleted, or misclassified before you cancelled, the retained copy carries the same problem.
A proper Backup and Recovery Xero solution avoids all three issues. It creates an independent copy of your Xero organisation, held outside of Xero's platform, available regardless of subscription status.
The Shared Responsibility Gap at Cancellation
The shared responsibility model applies before, during, and after cancellation. Xero protects the platform. You are responsible for your data and your records.
This becomes sharper at cancellation because your statutory record-keeping obligations do not end when your subscription does. Australian businesses generally have ATO record-keeping obligations measured in years. Canadian businesses face CRA requirements that run for a similar period. United States businesses have IRS retention rules that vary by record type. None of these obligations are satisfied by Xero's internal retention. They are satisfied by your own copy of your records, held independently.
A Backup and Recovery Xero solution is what closes this gap. The Xero backup you create today is the record you can produce in three or five years, regardless of what happens to the subscription in between.
Real-World Cancellation Scenarios
A small business switches accounting platforms during a busy season. The migration team exports the current year carefully, but nobody thinks about three years of historical records. The new system goes live. Xero is cancelled. Six months later, the bookkeeper needs to defend a deduction from two years ago. The read-only window has closed. The records are not available.
A business is wound down on short notice after the owner retires. The Xero subscription is cancelled by the outgoing bookkeeper as part of closing down. Twelve months later, a tax matter requires documentation from the final operating year. Without a Xero full backup created before cancellation, the records have to be reconstructed from bank statements.
A new staff member cancels the wrong subscription. The error is caught the next day, but the cancellation is already in flight. With ongoing automated backups in place, the disruption is limited to reconnecting bank feeds in a restored organisation. Without them, the situation is significantly worse.
What's actually at risk: Historical transactions, contacts, chart of accounts, attachments, and the audit trail. Restoring Xero organisations from a Backup Xero files set means rebuilding into a new Xero organisation, separate from anything live. Bank feeds need to be reconnected manually, and bank transfers fall outside Xero's API scope.
How WOW Backup and Restore Protects You Through Cancellation
WOW Backup and Restore runs automated daily backups of your Xero organisation while your subscription is active. A Xero daily backup captures transactions, contacts, chart of accounts, tracking categories, attachments, and configuration. Attachments are included at no additional cost. Pricing is $9.95 USD per Xero organisation per month, with no per-seat fees.
If you cancel Xero, the backups you took while subscribed remain available. You can download them in CSV format for long-term archiving, or restore them into a new Xero organisation later if you reactivate or open a new subscription. Restores create a new Xero organisation rather than overwriting any existing one. Typical restore time is 1 to 3 hours, with up to 1 to 2 days for very large organisations because of Xero's API rate limits. Bank feeds need manual reconnection after the restore, and bank transfers fall outside Xero's API scope.
Regional data residency holds: Australian data stays in Australia, Canadian data in Canada, United States data in the United States. Two-factor authentication via an authenticator app and a full access audit trail are included.
Conclusion
Backup Xero before you cancel, not after. The window for action is shorter than most users realise, and the cost of getting it wrong is measured in days of reconstruction work or years of missing records.
If you are planning to cancel, or even considering it, the right time to create a Xero backup is now. A current backup is what makes the cancellation decision reversible, the transition manageable, and the record-keeping obligations achievable.
Don't lose years of financial records to a cancellation
Visit WOW Backup and Restore to set up automated daily backups for your Xero organisations. $9.95 USD per organisation per month, attachments included, regional data residency for AU, CA, and US.