Security & privacy (concept)

How a product like Ledgerly would protect your data

Ledgerly is a concept, so it holds no data at all. This page sets out, in general terms, how a real bookkeeping product like it would be expected to keep financial information safe.

What's true today: this site collects nothing. There are no accounts, no server-side storage and no tracking. Demo data and waitlist entries live only in your own browser and you can clear them at any time.

Safeguards a real product would need

Read-only bank access

A real product would only ever be able to read transactions, through a regulated bank-connection provider. It could never move money or make payments.

Encryption everywhere

Data would be encrypted in transit with modern TLS and encrypted at rest, with keys managed separately from the data.

Strong sign-in

Two-factor authentication, passkey support and alerts for new sign-ins would be standard, with sessions you can see and end.

Least-privilege access

Staff access to customer data would be limited, logged and only granted for support you've asked for.

UK and EU hosting

Data would be stored in UK or EU data centres, with regular, tested backups.

Your data, your call

Export everything at any time, and delete your account and data when you leave.

Privacy principles

  • Collect the minimum. Only what's needed to keep your books, and nothing to sell or share for advertising.
  • Be clear about why. A plain-English privacy notice explaining what's collected, why and for how long, in line with UK GDPR.
  • No surprises. No third-party advertising trackers inside the app.
  • Accountant access you control. Invite and remove your accountant yourself; they'd only see what you share.

What this page doesn't claim

Ledgerly has no security certifications, audits, regulatory authorisations or bank partnerships, because it isn't a real company or product. A real product would need to earn those independently and publish the evidence.

This concept site

  • Static pages served from Cloudflare's network, with no database and no forms that submit anywhere.
  • The waitlist checks your email's format, then discards it. Only a first name, business type and a random referral code are kept, in your browser's local storage.
  • The demo app's sample data is stored in your browser. Use Reset demo data or clear your browser storage to remove it.
  • No analytics or cookies are used.