Source: [Security and control — Ledgermast](https://www.ledgermast.com/security/)

Security and control

# Your books, kept to yourselves

Control who can see the books, who can prepare work, and who can approve it.

### Two-factor sign-in

Authenticator-app codes with one-time recovery codes, for every user who wants them.

### Roles and book access

Each person sees and does only what their role allows, down to which books they can open.

### Duties enforced by the database

Segregation of duties and approval ceilings are checked again below the application, not just in the interface.

### Separated organizations

Every organization’s records are isolated with row-level security in the database itself.

### Hardened in the browser

Forms are protected against cross-site requests, and a strict content security policy runs no third-party scripts.

### Your way out stays open

Every core register exports to CSV, including after a trial lapses to read-only.

## Explore the controls in practice

Read how [permissions and configurable segregation of duties](https://www.ledgermast.com/product/approvals/#roles) apply to your team, how [posted history is preserved](https://www.ledgermast.com/product/ledger-integrity/), and how [exports remain accessible](https://www.ledgermast.com/product/data-exports/).

For data handling and retention, see the [Privacy Policy](https://www.ledgermast.com/privacy/).

## Your last accounting system.

Start the 90-day trial and run your books in it properly. If you decide not to subscribe, your organization becomes read-only and every record, report, and export remains available.

[Start your free trial](https://ledgermast.com/register)