Security

Your clients' books, kept like your own

A CPA practice holds its clients' TINs, officers and financial records. Here is how StatLedgr protects them.

Your clients’ data

Encrypted at rest, field by field

Client TINs, addresses, phone numbers, emails and registration numbers, officer and signatory names and license numbers are encrypted with AES-256-GCM, each field under its own derived key.

Encrypted in transit

Every connection is served over HTTPS, and browsers are told to use HTTPS only.

Each firm sees only its own clients

Every request is checked against the firm you’re signed in to. A member of two firms works in one at a time and switches explicitly.

Nightly backups

The database is backed up every night.

Accounts and access

Passwords are hashed

Passwords are stored as bcrypt hashes, never in readable form.

Sessions expire

A sign-in lasts at most 10 hours, and a session can also be ended early from the server.

Roles inside the firm

Owners manage billing; admins manage clients, templates and the team; staff work only on the companies assigned to them.

Review before print

Staff can print a year’s statements only after the owner or an admin approves it.

Accountability

An audit log of every change

Every create, update and delete, every print and export, and every sign-in is recorded with who, when and which company. The record survives even if the company is later removed.

Support access is view-only

When our support team opens an account to help with a problem, the session is read-only, ends after an hour, and is recorded.

No card details on our servers

Online payments go through the payment provider’s secure checkout page. Card and wallet details never reach StatLedgr.

Error reports stay with us

Application errors are logged on our own servers with personal details removed. They aren’t sent to an outside tracking service.

Start with one real client

Create an account and choose Create a new firm to start on the Free Trial. Prepare one client's statements end to end, print the package (watermarked TRIAL) for your partner to review, then choose a plan from Billing.

GCashMayaCredit / debit cardOnline bankingBank transfer / OTC