Your data, kept in Canada.
How we protect the leave and employee records you trust us with.
The app, its database and uploaded files run in DigitalOcean's Toronto data centre. See every service we use.
Every database query is locked to one company with Postgres row-level security, so one company can never read another's records.
HTTPS (TLS) for every connection. The database and file storage are encrypted at rest, and calendar sign-in tokens are encrypted again with AES-256.
Microsoft 365 or Google Workspace sign-in, so you control access and offboarding. Passwords are stored only as salted bcrypt hashes.
Attachments, photos and HR documents are never public. Each download is checked against the person's access first.
Approve-from-email links are signed, single-purpose and expire after 7 days. Repeated failed sign-ins are slowed down and blocked.
The database is backed up daily, with point-in-time recovery, by our hosting provider.
No advertising or analytics trackers on this website or in the app. We don't sell or rent personal information.
On the Complete plan, the audit log records who changed balances, policies and settings, and when.
Found a security issue?
Please email hello@ledgeably.com with the details. We'll reply within two business days and keep you updated while we fix it. Please don't access other people's data or disrupt the service while testing.