LedgerGrid handles receipts, banking details and tax forms. Here is how we keep that information safe and accountable.
Everything is served over HTTPS. Sensitive fields — vendor bank account numbers and W-9 tax forms — can be encrypted at rest with AES-256-GCM so they are never stored in the clear.
Roles decide who sees what. Agents who submit expenses never see raw banking numbers (they are masked to the last four digits), and tax forms are restricted to admins and the accountant.
Every submission, approval, note, payment — and every time someone views banking or tax details — is timestamped and recorded, so there is always a clear record of who did what, and when.
Each company on the platform is walled off from every other. One organization can never see another organization’s requests, vendors, or people.
Passwords are hashed with bcrypt and sessions use signed, http-only cookies. Two-factor authentication is on the roadmap.
LedgerGrid runs on managed, backed-up infrastructure (Netlify and Neon Postgres), so your ledger is durable and available.
Security is a moving target — if you have a specific requirement or a question about how your data is handled, get in touch and we'll walk you through it.