Security & trust
Specific controls. Honest boundaries.
DeltaLedger handles supplier commitments and financial evidence as sensitive business data. This page separates controls implemented today from work that has not yet been completed.
Invitation-only access, workspace-scoped authorization, encrypted connector secrets, audit history, API controls, and isolated fictional demo data.
Verified identity
Google and Microsoft OAuth sign-in. Workspace access remains invitation-only; authenticating alone grants access to no customer workspace.
Workspace isolation
Server-side authorization rechecks identity, active membership, role, and target workspace for protected reads and consequential writes.
Protected credentials
ERP OAuth credentials are encrypted with AES-256-GCM and bound to their workspace and provider. Ingestion API secrets are stored as hashes, not recoverable plaintext.
Traceable decisions
Material calculations, decisions, role changes, and evidence actions carry attributed audit history. Versioned business evidence is superseded rather than silently overwritten.
API safeguards
Workspace-scoped API keys support revocation and expiration. Requests use scoped permissions, timing-safe credential comparison, idempotency protection, and rate limiting.
Browser and transport baseline
Production is HTTPS-only and sends HSTS, anti-framing, MIME-sniffing, referrer, and restricted browser-permission headers.
Infrastructure and data
A deliberately small production footprint
The application runs on Vercel with PostgreSQL hosted by Neon. Production secrets are held in server-side environment configuration, not shipped to the browser. Customer records are scoped to an organization; the public Nova Robotics demonstration uses a dedicated fictional, read-only workspace.
Current limitations
What we do not claim
- No SOC 2, ISO 27001, or other compliance certification is currently claimed.
- No independent penetration test or third-party security audit has been completed yet.
- SAML SSO, SCIM provisioning, customer-selected data residency, and configurable retention are not currently available.
- Business Central and NetSuite connectors remain beta until validated against real customer tenants.
Pilot data handling
Scope security before importing customer data.
Before a real-data pilot, DeltaLedger and the design partner agree on permitted data, users, retention, export or deletion at pilot end, and any customer-specific identity requirements. A customer should not provide controlled, export-restricted, or regulated data unless it has been explicitly approved in writing.
Responsible disclosure: Send suspected vulnerabilities to mail@delta-ledger.com. Include the affected URL, reproduction steps, and potential impact. Please do not access, alter, or retain data that is not yours.
Machine-readable disclosure information is available at /.well-known/security.txt.