—Security & TrustSOC 2 Type II · GDPR · ISO 27001

Trust, documentedfrom the ground up.

Compliance, encryption, access and audit — the controls finance teams rely on, written by people who take them seriously.

SOC 2 Type IIGDPRISO 27001CCPA

01Compliance

SOC 2 Type IIAudited annually by an independent third party

GDPRData processing agreement and EU representation

ISO 27001Information security management, certified

CCPACalifornia consumer privacy, supported

02Encryption

At restAES-256 across databases, backups and object storage

In transitTLS 1.3 for all connections, HSTS enforced

Key managementEnvelope encryption with rotated, isolated keys

03Data residency

RegionsChoose US or EU at the workspace level

In-region backupsLedger, audit trail and backups stay in-region

No trainingYour data is never used to train models

04Access & identity

SSO / SAMLEnforce single sign-on across your team

SCIM provisioningAutomated user lifecycle from your IdP

Role-based accessLeast-privilege roles and scoped permissions

Two-factorRequired for password accounts

05Audit logging

Immutable trailEvery action recorded with actor, time and reason

Exportable evidenceScoped, read-only access for auditors

RetentionConfigurable retention up to unlimited

06Reliability

Uptime SLA99.99% on enterprise plans

Status pagePublic, historical, and subscribable

BackupsPoint-in-time recovery, tested regularly

07Subprocessors

Amazon Web ServicesCloud infrastructure & hostingUS / EU

SnowflakeData warehousing (optional)US / EU

StripeBilling & paymentsUS

PostmarkTransactional emailUS

DatadogObservability & monitoringUS

Responsible disclosure

Found something? Tell us, and we will act.

We welcome reports from security researchers and respond within one business day. Good-faith research is always safe with us.

Report tosecurity@ledger.example

PGP keyAvailable on request

ResponseWithin 1 business day

—Get started

Close the books likeit's a discipline.

Trade month-end firefighting for quiet confidence. Start free, or bring a real close and see Ledger against it.