Security & Trust

Four walls around every ledger.

Your ledgerOne tenant · one vault
TLS — encrypted in transitAES-256 — encrypted at restTOTP 2FA — on every accountTenant isolation — at the database level

The receipts

Verified, tested, accountable.

Infrastructure

  • Daily backups — 15-minute recovery point
  • Stateless API, horizontal scaling
  • Maintenance windows under 2 hours, under SLA

Testing

  • Annual third-party penetration tests
  • Recurring internal security reviews
  • Replay attacks blocked by ID deduplication

Privacy

  • GDPR & CCPA honored — DPA available
  • Minimal collection, by principle
  • Full deletion within 30 days, no questions
SOC 2 Type II

Independent audit initiated — security, availability & confidentiality controls under third-party review. Target certification Q4 2026.

In progress

Found a vulnerability? We respond within 72 hours. Please report privately before public disclosure.

security@arklis.com →

Bring your books. We'll guard them.

14 days free, full features — and your data stays yours.