Data Security

Last updated October 2026

Your financial documents never travel as email attachments. They are shared only through the Ledger Clean client portal.

How files are protected

  • Files are stored in private storage — there are no public links to any document.
  • Downloads use signed links that expire after a short time.
  • Database-level access rules ensure each client can only see their own organisation's projects, files and messages.
  • Only verified email addresses can access the portal; inactive sessions are signed out automatically.
  • Each upload records who uploaded it and when.
  • Allowed file types and sizes are checked before upload.

Deletion

You can remove your own uploads before work begins, and Ledger Clean can permanently delete files on request or once a project is closed.

Privacy by design

We collect the minimum information needed, we only ever request read-only access to your accounting software where it's genuinely needed (and always with your agreement first), and the public contact form never accepts file uploads.