Security & Trust
Your data is safe, portable, and 100% yours
LEDGER meets IFRS and GAAP standards and follows CBN, FIRS, and Nigeria Data Protection Act (NDPA 2023) requirements, backed by certifications and third-party reviews. Built-in permissions let you control exactly what each user can access.
Ongoing compliance with SOC 2 Type I and Type II reporting standards for data security and privacy.
Data encrypted at rest with AES-256 and in transit with HTTPS/TLS across all connections.
Aligned with Nigeria's Data Protection Act 2023, NDPR, and NITDA guidelines for full local and international privacy compliance.
Enterprise-grade security built into every layer
LEDGER's security architecture is built for Nigerian enterprises and group companies — covering CBN compliance, NDPA data handling, encryption, access controls, and AI security so every naira of financial data stays protected.
Security certifications and encryption standards
Core security controls and certifications that protect data across storage, transit, and access.
SOC 2 Type I
Certified against SOC 2 Type I standards for rigorous safeguarding of data security and privacy.
SOC 2 Type II
Ongoing SOC 2 Type II compliance demonstrating sustained controls over security, availability, and confidentiality.
TLS 1.2 encryption
All data in transit is protected with TLS 1.2 encryption, ensuring privacy across every connection.
AES-256 at rest and in transit
AES encryption secures your data whether stored or moving, delivering robust protection against unauthorized access.
Penetration testing
Regular penetration tests via partnerships with leading security firms, plus an ongoing bug bounty program.
Vulnerability management
Continuous automated scans and clear SLAs for remediating vulnerabilities by severity before they become issues.
Network architecture
Multi-layered network design uses separate security zones and DMZs to control traffic between the internet and internal systems, with extra monitoring at each boundary.
Encryption protocols
Data encrypted in transit with HTTPS/TLS and at rest with AES-256, governed by a Data Classification and Handling policy mapped to data sensitivity.
Change management
Every software change is tracked, approved, and tested through a strict process, with logging that immediately flags unauthorized changes to production.
Data availability and continuity
High availability through network redundancy, rigorous backups, and disaster-recovery plans. A global security team monitors continuously, following NIST and PICERL frameworks.
Authentication solutions
Two-factor authentication via SMS or authenticator app, with native authentication, SSO, and SAML options available across the platform.
Privacy compliance for Nigerian businesses and beyond
Data processed in LEDGER is handled in accordance with Nigerian and international privacy frameworks, including NDPA 2023 and GDPR.
NDPA 2023 compliant
Data is processed in full compliance with Nigeria's Data Protection Act 2023, overseen by the Nigeria Data Protection Commission (NDPC).
NDPR compliant
Aligned with the Nigeria Data Protection Regulation (NDPR) and NITDA's framework for collecting, processing, and storing personal data.
GDPR aligned
For businesses with EU or UK data subjects — including Nigerian companies with international operations — LEDGER processes data in line with GDPR standards.
AI data privacy
AI features are built to comply with NDPA 2023, GDPR, and applicable privacy laws, with stringent handling controls throughout.
Zero data retention for AI
All AI-processed data is deleted post-output and is only ever accessible to your business, never used for model training.
Model integrity
AI models are pre-trained and never learn from your financial data, so your information always stays under your control.
Access control built for Nigerian group companies and enterprises
Granular controls that enforce separation of duties and entity-level isolation — aligned with CBN internal control guidance for financial institutions.
Role-based access control
Define access at the role level with individual permission adjustments for fine-grained separation of duties.
Two-factor authentication
2FA via SMS or authenticator app prevents unauthorized account access for all agents and administrators.
SSO and SAML support
Support native authentication, SSO, and SAML to maintain high security standards without sacrificing convenience.
Principle of least authority
Users access only what they need. Duties are separated cleanly to reduce insider risk and errors.
Entity-level permissions
Isolate access across subsidiaries, branches, and group entities — essential for Nigerian conglomerates managing multiple legal entities under one platform.
Audit-ready access logs
Complete records of every access event to satisfy FIRS audit requirements, CAC filings, and internal compliance reviews.
AI security controls that protect financial data
LEDGER AI is built with security-first principles so AI-powered features do not introduce new risk vectors.
Certifications and compliance standards
LEDGER maintains certifications and legal compliance to meet the requirements of Nigerian enterprises, regulated financial institutions, and businesses operating across multiple jurisdictions.
Secure data handling
All data processed by LEDGER AI is protected under SOC 2 compliance and accessible only to your organization.
Zero retention policy
Data is deleted post-output and never stored or used beyond immediate processing needs.
Pre-trained models only
AI models never learn from your data. Your financial information is never used for training or improvement.
Security & Trust FAQ
Common questions from Nigerian finance teams and auditors evaluating LEDGER security, NDPA compliance, and CBN alignment.
LEDGER uses AES-256 encryption for data at rest and HTTPS/TLS 1.2 for data in transit. A Data Classification and Handling policy governs protection levels based on data sensitivity.
Yes. LEDGER maintains SOC 2 Type I and Type II certifications, covering security, availability, and confidentiality with ongoing compliance reviews.
LEDGER complies with Nigeria's Data Protection Act 2023 (NDPA), the Nigeria Data Protection Regulation (NDPR), and NITDA's data governance guidelines. For businesses with international exposure, LEDGER also processes data in alignment with GDPR.
LEDGER supports native authentication, SSO, and SAML. Two-factor authentication via SMS or authenticator app is available for all administrators and agents.
No. AI models are pre-trained and never use your financial data to learn or improve. A zero data retention policy ensures processed data is deleted post-output.
LEDGER follows NIST and PICERL incident-response frameworks with a 24/7 security team, regularly tested disaster-recovery plans, and network redundancy. Breach notifications are handled in accordance with NDPA 2023 timelines and NITDA's mandatory reporting guidelines.
See how LEDGER keeps Nigerian businesses secure and compliant
Walk through encryption controls, NDPA compliance posture, CBN-aligned access management, and AI security in a focused demo for your finance and IT governance team.
Schedule a demo