Your books, protected. In plain language.
What we do to keep your records safe, private and yours, without the jargon.
Your company is kept apart
| Separate at the database level | Every record carries its company, and the database itself refuses to show one company's rows to another, even if the app made a mistake. |
|---|---|
| Tested on every change | An automated test tries to reach other companies’ records through every screen and export, and must fail every time. |
Who can do what
| Roles | Owner, Admin, Accountant and Viewer. The server checks the role on every request; hiding a button is never the only protection. |
|---|---|
| Passwords | Stored only as a one-way hash. Repeated wrong passwords lock the account for a while. |
| E-mail verification | An account cannot sign in until its e-mail address is confirmed. |
| Sessions | Signing out ends the session. Resetting your password signs you out everywhere. |
Mistakes are reversible
| Activity log | Every change is recorded with who made it, when, and what the value was before. The log cannot be edited. |
|---|---|
| Recycle bin | Deleting moves a record to the bin. Only an Admin can remove it for good, after typing DELETE. |
| Attachments | Receipts and supplier invoices stay with their records; deleting a record keeps its files until it is permanently removed. |
Your data stays yours
| Export anytime | Invoices, expenses and the ledger to Excel, CSV or PDF: during the trial, while subscribed, and after. |
|---|---|
| Never deleted for non-payment | If a subscription lapses the company becomes read-only. You can still view and export everything. |
| No selling, no ads | We do not sell your data or show you ads. Your records are used only to run the service for you. |
| No AI training | Your records are never used to train artificial intelligence models. The help assistant cannot see them. |
Money and payments
| No card numbers | We never receive or store card numbers. When online payment is switched on, you pay on PayMongo’s own secure page. |
|---|---|
| Transfer receipts | Only Owners and Admins can upload the receipt of a bank or GCash payment, and only our billing team sees it, to confirm the payment. |
Our own access
| A console without your books | Our administration console shows companies, people and subscriptions. It does not show your invoices, expenses or contacts. |
|---|---|
| Every action recorded | Every action our team takes in that console, and every time it opens a company’s details, is written to a log that cannot be edited or deleted. |
| Few people, need to know | Only the people who run PrimerLedger can reach the servers, and only to keep the service working or to help you when you ask. |
If something goes wrong
| We tell you | If a breach puts your data at risk, we tell the Owners of the affected companies without delay, with what happened and what we are doing. |
|---|---|
| We tell the regulator | Where the Data Privacy Act requires it, we notify the National Privacy Commission and the people affected within 72 hours. |
| We learn from it | Every incident is written up, fixed at the cause, and covered by a test so it cannot quietly come back. |
What we do not have yet
| Certifications | PrimerLedger is new and does not hold ISO/IEC 27001 or SOC 2 certification. We will say so here when that changes. |
|---|---|
| Two-step sign-in | Signing in with a code from your phone is not available yet. Use a long password that you use nowhere else. |
Hosting
| Encryption in transit | HTTPS on every page and every request. |
|---|---|
| Encryption at rest | To be confirmed |
| Backups | Every night, with a copy kept off the server. |
| Where the servers are | To be confirmed |
Found a security problem?
Please tell us at hello@primerledger.com with the steps to reproduce it. We confirm receipt within 2 working days and keep you updated until it is fixed.
- Use only your own test account and company; never open, change or delete another company's records.
- Do not run tests that slow down the service for others, and do not use automated scanners against it.
- Give us reasonable time to fix the problem before telling anyone else.
If you follow these rules in good faith, we will not take legal action against you for your research. Our contact for this is also published at /.well-known/security.txt. How we handle personal data is explained in the Privacy Policy; the providers we use are on the Sub-processors page.
Open your books tonight.
Three months free. By the end of the first week, you'll know exactly where your money went.