Security

Trust is a product feature

Sensitive evidence stays in the secure app. Ambient channels deep-link — they never become shadow evidence stores. Signing in with Google does not silently grant Gmail or Workspace data access.

• Read-only first

  TightLedger only ever reads your connected accounts, and can never move your money. Every connection is explained in plain language and can be disconnected at any time.

• Human approval

  External actions show exact recipient, message, amount, and consequences before approval.

• Evidence provenance

  Every material assertion links to typed evidence and the authoritative source.

• Step-up authentication

  High-risk approvals, role changes, exports, and recovery-code access require recent auth.

• Tenant isolation

  Organization, legal entity, role, and audit context are shared across surfaces.

• Retention & deletion

  Customers control source data retention; support access is time-bound and audited.