Trust
Trust and security at Ledger
Your finances are personal. Here is how Ledger protects them, who stands behind the product, and what control you have over your data.
Who is behind Ledger
- Company: Ledger Financial, LLC, registered with the Colorado Secretary of State.
- Operating location: East Tennessee, United States.
- Built by: Bryan Gross, developer, with a background in software development, real estate and mortgage lending. Read the full story on the about page.
- Support: support@ledgerpersonalfinance.com
How your data is protected
- In transit: every connection uses HTTPS.
- At rest: sensitive fields such as account numbers, saved logins, tax details, client contact details and many notes are encrypted with AES-256-GCM. Uploaded documents and receipts are encrypted on disk.
- Passwords: stored only as a one-way Argon2 hash, never in readable form.
- Two-factor sign-in: required for every customer and every administrator.
- Sessions: review the devices signed in to your account and end any of them from Account & security.
- Staff access: administrator access is limited by role, and administrator actions are recorded in an audit trail.
Bank connections and payments
- Plaid connects your bank accounts if you choose to. You enter your online banking username and password with Plaid, and Ledger never sees or stores them. You can disconnect a bank at any time.
- Stripe handles subscription payments. Card details are collected and stored by Stripe. Ledger keeps only your plan, billing status, and the card brand and last four digits.
- You can also use Ledger with no bank connection by entering accounts by hand or importing statements.
AI features and your data
- Ledger uses Anthropic (the Claude AI service) for the Lumen assistant and for features that read documents for you, such as receipt scanning, credit report import and home inventory photos. When you use one of these features, the text or image involved is sent to Anthropic to produce the result.
- Ledger does not sell your personal information and does not share it for advertising.
Your control over your data
- Download: Account & security > Download my data gives you a copy of your information.
- Delete: Account & security > Delete my account removes your data from our systems, except records we must keep for legal, tax or fraud-prevention reasons. Copies in backups are overwritten on the normal backup cycle.
- Emails: turn reminders and the weekly summary on or off at any time.
- Rights: depending on where you live, you may have additional rights to access, correct, delete or port your data. Contact support to use them.
How we describe our tax and financial features
- Ledger organizes your information and prepares it for review by you and your tax professional. Estimates, forecasts and reports depend on the information you enter, so review tax information with a qualified professional.
- Tax articles on this site list their sources and show the date they were last reviewed.
Read the details
- The privacy policy explains what we collect, who we share it with and how long we keep it. The terms of service explain the rules for using Ledger.
Common questions
Does Ledger store my bank login?
No. You enter your online banking credentials with Plaid, and Ledger never sees or stores them.
Is two-factor sign-in optional?
No. It is required for every customer and every administrator.
Can I delete my data?
Yes. Use Account & security > Delete my account. You can also download a copy of your data first.
Does Ledger sell my data?
No. Ledger does not sell your personal information.