A journal holds something sensitive

Read-only by construction

The broker adapter has two methods: verify credentials and fetch trades. There is no method that places, modifies or closes an order, so there is no code path through which Alpha Ledger could trade your account — not a policy, a property of the code.

Credentials encrypted at rest

Investor passwords and API keys are encrypted with AES-256-GCM before they touch storage, decrypted only at the moment a sync runs, and never returned to the browser in any form.

Row-level security on every table

Ownership is enforced in Postgres, not just in the application. A query issued with your session can only ever return your own rows, so an application bug cannot leak another trader’s journal.

Two-factor authentication

TOTP from any authenticator app, with single-use recovery codes shown once at enrolment.

Rate limiting and audit logging

Every API and AI route is rate limited per user, and sensitive actions are written to an audit log you can export.

No card details, ever

Payments go through Stripe. Alpha Ledger stores only a customer reference so the billing portal works, and never sees a card number.

Deletion actually deletes

One click plus a typed confirmation removes your profile, every trade, plan and screenshot. There is no soft-delete and no recovery window.

Privacy by default

Analytics cookies are off until you accept them, and declining is exactly as easy as accepting. Your trading data is never sold or shared.