Security

Built to protect money-out data.

LedgerGrid handles receipts, banking details and tax forms. Here is how we keep that information safe and accountable.

Encrypted in transit and at rest

Everything is served over HTTPS. Sensitive fields — vendor bank account numbers and W-9 tax forms — can be encrypted at rest with AES-256-GCM so they are never stored in the clear.

Least-privilege access

Roles decide who sees what. Agents who submit expenses never see raw banking numbers (they are masked to the last four digits), and tax forms are restricted to admins and the accountant.

A complete audit trail

Every submission, approval, note, payment — and every time someone views banking or tax details — is timestamped and recorded, so there is always a clear record of who did what, and when.

Company isolation

Each company on the platform is walled off from every other. One organization can never see another organization’s requests, vendors, or people.

Secure authentication

Passwords are hashed with bcrypt and sessions use signed, http-only cookies. Two-factor authentication is on the roadmap.

Reliable infrastructure

LedgerGrid runs on managed, backed-up infrastructure (Netlify and Neon Postgres), so your ledger is durable and available.

Security is a moving target — if you have a specific requirement or a question about how your data is handled, get in touch and we'll walk you through it.