Setup guide
RILLA Shield watches every draft and awaiting-payment bill in your Xero organisation and holds anything that looks like invoice fraud, business email compromise, or a supplier bank-detail change — before it gets paid. Setup takes about three minutes.
Sign in to RILLA Shield, open Integrations, and click Connect Xero. You'll be sent to Xero to sign in and choose the organisation you want protected. Approve the permissions and you'll land back on the RILLA dashboard.
On the Integrations page, switch Automatic bill holds ON. From then on RILLA re-checks every draft and awaiting-payment bill each hour and marks anything risky with a HOLD reference and a history note inside Xero.
Add anyone who approves or releases payments under Team. They receive an email (and optional SMS) the moment a bill is held, with a one-tap link to review the evidence.
Open Held bills to see why RILLA stopped it — changed BSB, changed account name, new email domain, ABN status, or a network scam match. Verify by phone using the supplier's historical number, then release or reject. Every decision produces an insurer-grade evidence PDF.
accounting.transactions
Read bills to score them, and write the HOLD marker back onto a risky bill. RILLA never pays, approves, voids or deletes a bill.
accounting.contacts.read
Read supplier contact details (bank account, email, phone) to build the 12-month supplier fingerprint. Read only.
accounting.settings.read
Read your organisation name so the dashboard shows the right entity. Read only.
offline_access
Keep the hourly bill sweep running without asking you to sign in again.
RILLA Shield never initiates a payment, never changes a supplier's bank details, and never approves a bill on your behalf.
Can RILLA pay or change my bills?
No. RILLA only adds a HOLD reference and a history note to a bill it considers risky. It cannot pay, approve, void or delete anything in Xero.
How often does it check?
Every hour, plus an immediate check whenever a new bill appears in the sweep window. A deeper supplier re-verification runs nightly.
What happens when I disconnect?
The HOLD markers already written stay on those bills so you keep the audit trail, but RILLA stops reading your organisation immediately and your tokens are deleted.
Where is my data stored?
In Australia. See the privacy policy and sub-processor list for the full detail.
Multiple Xero organisations?
Yes — connect each organisation separately from the Integrations page. Team and multi-org plans cover more than one entity.
Email admin@rillashield.app and we'll reply within one business day (AEST), or book a 15-minute setup call from the support page.