Security

Linking a bank account is a big ask. Here is exactly what Ledger can and cannot do.

Read-only by design

Ledger requests balance and transaction data only. There is no payment or transfer capability in the product.

We never see your login

You approve access at your bank through SimpleFIN Bridge and hand Ledger a read-only token — your bank password is never entered into Ledger.

Encrypted end to end

TLS in transit, encryption at rest, and access tokens kept in server-side secrets that never reach your browser.

Your rows, only yours

Every account, transaction and budget row is scoped to your user id at the database level — not just in the UI.