The security of your data, a priority at Ledgerly

Your invoices, your clients, your numbers. The data you entrust to invoicing software is among the most sensitive in your business. At Ledgerly, security isn't an option bolted on at the end, it's a foundation, designed from the very first line of code. Here, in full transparency, is how we protect what belongs to you.

An end-to-end encrypted connection

Ledgerly is accessible only over HTTPS. Your browser and our servers communicate over an encrypted channel that cannot be read or altered in transit. We go beyond the minimum, our domain is on the browsers' HSTS preload list, which forces a secure connection from your very first visit, without the slightest window of vulnerability.

Your data encrypted, even on our side

The most sensitive information in your documents is encrypted with the AES-256 algorithm, a standard used notably by the banking sector. In practice, even in the event of unauthorized access to the database, this information would remain unreadable. Each account has its own key, your data and another user's never mix.

A locked-down access

You can enable two-factor authentication in seconds, an extra code on top of your password. You stay in control of your trusted devices, and any unusual login can be reported to you. Repeated attempts are automatically slowed down and then blocked, to shut down brute-force attacks.

An app hardened against injections

Ledgerly applies one of the strictest Content Security Policies on the web. In short, we lock down what the browser is allowed to execute, which neutralizes the most common attacks against online applications, such as malicious code injection. This rigor is measurable, and above all rare, Ledgerly is among the few sites to earn the top A+ grade on the leading independent benchmarks, securityheaders.com and the Mozilla Observatory.

European hosting and GDPR compliance

Your data is hosted at Infomaniak, an independent European player recognized for its commitment to privacy and ecology. We comply with the GDPR, you remain the owner of your data, and you can export it or request its deletion at any time.

Backups and monitoring

Your data is backed up regularly and in encrypted form, so that a technical incident never turns into a loss. Behind the scenes, we continuously monitor abnormal behavior and receive an immediate alert at the slightest anomaly, so we can react fast.

Transparency, in security too

We publish a responsible disclosure policy, any researcher who discovers a vulnerability can report it to us easily and within a clear framework. Because the best security isn't the kind that hides, but the kind that keeps improving.

In short

Choosing Ledgerly means entrusting your invoicing to a tool designed to protect your business every day. We invest in security not because it's mandatory, but out of respect for your work.

Want invoicing that's calm, compliant and secure? Try Ledgerly today.