Security

Your data is separated

Every company has its own database. There is no shared customer table between businesses, so one company can never read another's records, even by mistake.

Logging in

• Passwords are stored only as salted bcrypt hashes; we cannot read them.
• Optional or mandatory two-factor login with an authenticator app, and one-time backup codes.
• Repeated wrong passwords lock the login for a while; every session can be seen and signed out from Security settings.
• The Android app can be locked with your fingerprint.

Access inside your company

• Role-based access — Admin, Accountant, Sales, Purchasing, Viewer and a read-only CA login for your accountant.
• Field-level permissions can hide cost prices or lock prices and discounts by role.
• Sensitive changes (users, permissions) ask for the password again.
• Every create, change and delete is written to an audit log with who and when.

Stored secrets and backups

• Payment-gateway keys, email and WhatsApp passwords and e-invoice credentials are encrypted with AES-256-GCM before they are stored.
• Databases are backed up every night and kept for the configured number of days.
• The application connects to the database with a least-privilege login that can read and write data but not change the database structure.

In transit

The website and the app talk to the server only over HTTPS. Payments are handled entirely by Razorpay (PCI-DSS compliant) — card and bank details never touch LedgerLine.

You can always leave with your data

Export everything at any time: Settings → Company → Download all my data (Excel), the Tally export (XML) for your accountant, and PDF copies of every document.

Report a problem

Found a security issue? Write to with the details. We respond within two working days and credit responsible disclosure.