Security
Your clients' payment evidence is sensitive. Here is exactly how it is protected.
Tenant isolation, enforced twice
Every record carries your firm's id. Access is checked in the application and again by PostgreSQL row-level security, so a bug in one layer cannot expose another firm's data. The application's database role cannot bypass these policies.
Screenshots are private
Images live in a private bucket. They are only ever served through 5-minute signed links generated after a permission check. Links inside Excel files point to LedgerLens and require you to sign in — no storage URL is ever put in a file.
Encryption
- TLS everywhere, with HSTS.
- Integration secrets (WhatsApp webhook secrets, group invite codes) are encrypted at rest with AES-256-GCM.
- Passwords are hashed with argon2id. Two-factor authentication (TOTP) is available and can be required for your whole firm.
Audit trail
Logins, approvals, edits, reconciliation changes, exports and settings changes are recorded in an append-only audit log, visible to your admins.
Data location and processing
Hosting and storage are in an India region. Screenshots are sent to Anthropic's API (a sub-processor) solely to read the payment details; they are not used to train models.
Retention and deletion
You choose how long screenshot images are kept (6, 12, 24 months or 7 years). Older images are deleted automatically every night; ledger rows are kept. You can export all your data or request account deletion at any time.
Backups
Encrypted nightly database backups are kept for 30 days in a separate bucket, and restores are tested weekly.
Reporting a vulnerability
Email security@ledgerlens.in. We respond within two working days.