Security
Trust, held to a bank statement’s standard.
Nomad Ledger reads your accounts, it never moves your money. Connections are read-only by default, and everything is encrypted in transit and at rest.
Read-only by default
We reflect the truth of your accounts. Moving money always requires your explicit action, in your own bank.
Encrypted end to end
TLS in transit, AES-256 at rest. Credentials are tokenized through your provider, so we never store bank passwords.
Least-privilege access
Team roles grant only what a person needs. Every sensitive action is logged with a traceable ID.
01 / Compliance
Built for the questions your accountant asks.
We are pursuing SOC 2 Type II (audit in progress) and are GDPR-aligned from day one. Data residency and audit exports are available, so a review is a lookup, not an investigation.
Security questions? security@nomadledger.com