Ledgerline

Security

Security review? We brought the paperwork.

Ledgerline holds your most sensitive financial records. We built the controls we would want if the roles were reversed — and we documented all of them.

Audit trail

SOC 2 Type II Hosted in Canada
  • Oct 2, 9:41 AM Priya Raman Period locked
  • Oct 2, 9:38 AM Priya Raman Approved 12 of 12 exceptions
  • Oct 1, 4:12 PM Marcus Lee Resolved FX variance, INV-2291
  • Oct 1, 8:02 AM Ledgerline Auto-matched 1,284 of 1,318 lines

SOC 2 Type II

Ledgerline is audited annually against SOC 2 Type II, covering security, availability and confidentiality. The current report and our pen-test summary are available under NDA during evaluation — ask on any demo call.

  • Annual third-party audit
  • Continuous control monitoring
  • Public trust page on request

Data hosted in Canada

All customer data is stored and processed in Canadian data-center regions (Toronto primary, Montréal backup). No financial data leaves Canadian jurisdiction, including backups and support tooling.

  • Toronto primary region
  • Montréal encrypted backups
  • No cross-border replication

SSO and access control

SAML 2.0 and OIDC single sign-on with Okta and Microsoft Entra ID, SCIM provisioning and deprovisioning, and role-based access that separates preparers, reviewers and approvers.

  • SAML 2.0 & OIDC
  • Okta · Microsoft Entra ID
  • SCIM provisioning
  • Preparer / reviewer / approver roles

Immutable audit trail

Every match, flag, rule change and approval is written to an append-only log with actor, timestamp and before/after values. Export the full trail for any period as an evidence package your auditors can navigate.

  • Append-only, tamper-evident log
  • Per-period evidence export
  • 7-year retention by default

Common review questions

What security teams ask us first

How is data encrypted?
AES-256 at rest, TLS 1.2+ in transit, with per-tenant encryption keys. Bank credentials are never stored — feeds connect through institution-issued tokens.
Who can see our data internally?
Support access is break-glass only: time-boxed, approved by a customer contact, and fully logged. Engineers have no standing access to production financial data.
Do you use our data to train models?
No. Matching models are trained only within your own tenant, on your own matching history. Nothing is shared across customers.
What happens on contract end?
You can export every period, match and audit entry in open formats at any time, and we delete tenant data within 30 days of contract end on written request.

Send us your questionnaire

We'll return it completed, with the SOC 2 report and pen-test summary attached under NDA — usually within two business days.

Book a demo