ledger@on-prem:~$

Enterprise resource planning built for organizations where data sovereignty isn't a preference — it's a mandate. Every query resolves on your hardware. Every audit log stays in your building.

ITAR-CompliantHIPAA-ReadySOC 2 Type IIFedRAMP-CompatibleAir-Gap Capable
Outbound Data Requests
0
Last 90 days
On-Prem Query Resolution
0%
All modules
Encryption Cycles / sec
0
AES-256 active
Active Audit Log Entries
0
Since deployment
AES-256 Encryption PipelineACTIVE
INGESTSTOREQUERYAUDIT
Network Topology — Data Residency Map
Your Facility Blocked Egress
SECURED PERIMETERBLOCKEDBLOCKEDBLOCKEDBLOCKED
// interactive comparison

How does your current ERP compare?

Select your current platform. Watch each privacy metric resolve. Every red cell is a door your data can walk through.

Compare against:
0 / 3 interactions
Privacy Metric
Ledger
SAP S/4HANA
Data Residency
100% On-Premises
Multi-tenant cloud
Telemetry & Usage Data
Zero outbound telemetry
Sent to SAP servers
Encryption at Rest
AES-256, customer-managed keys
~SAP-managed keys
Audit Log Ownership
Full ownership, never exported
SAP retains copies
ITAR Workflow Support
Native, certified
~Requires add-on
Air-Gap Deployment
Fully supported
Not supported
Vendor Breach Exposure
Zero — no vendor holds your data
SAP breach affects you
Silent Background Syncs
None — fully verifiable
Active background syncs
Secure / On-Prem
Risk / Cloud Exposure
Partial / Configurable
// module architecture

Where does your data live, exactly?

Click any module to see the full architecture diagram. Every data node, every storage location — documented and verifiable.

Every journal entry, every reconciliation, every year-end close executes entirely within your on-prem SQL cluster. No financial data traverses the public internet at any point.

// data residency map — Finance & Accounting
Your Facility Perimeter
Chart of AccountsYour SQL Server✓ Secured
AP/AR LedgersYour SQL Server✓ Secured
Financial ReportsYour file server✓ Secured
Audit TrailYour audit DB✓ Secured
Bank FeedsAir-gapped import only✓ Secured
External Network — All Egress Blocked
Vendor CloudThird-Party APIsTelemetry ServersAnalytics Pipelines

All financial computation runs on your hardware. Bank reconciliation uses encrypted file import — no live API connections to financial institutions.

Vendor contracts, purchase orders, and sourcing decisions stay inside your perimeter. Supplier communication is routed through your own mail server — never through Ledger's infrastructure.

// data residency map — Procurement
Your Facility Perimeter
Vendor MasterYour SQL Server✓ Secured
Purchase OrdersYour SQL Server✓ Secured
Contract StorageYour file server✓ Secured
Supplier CommsYour SMTP server✓ Secured
Spend AnalyticsYour BI server✓ Secured
External Network — All Egress Blocked
Vendor CloudThird-Party APIsTelemetry ServersAnalytics Pipelines

Supplier portal runs on your DMZ server. External vendors access a controlled endpoint you own — Ledger never relays data through its own network.

Personnel files, security clearance records, and payroll data are the highest-sensitivity assets in any organization. Ledger HR stores everything in your encrypted on-prem database with role-based access controls you define.

// data residency map — Human Resources
Your Facility Perimeter
Employee RecordsYour encrypted DB✓ Secured
Payroll DataYour payroll server✓ Secured
Clearance RecordsAir-gapped vault DB✓ Secured
Benefits DataYour HR server✓ Secured
Performance ReviewsYour SQL Server✓ Secured
External Network — All Egress Blocked
Vendor CloudThird-Party APIsTelemetry ServersAnalytics Pipelines

Security clearance module operates on an isolated subnet with no external routing. Payroll processing uses your existing banking EDI infrastructure.

Manufacturing resource planning, inventory optimization, and demand forecasting run on your compute. Machine learning models train on your data and stay on your servers — model weights never leave your facility.

// data residency map — Supply Chain
Your Facility Perimeter
Inventory MasterYour SQL Server✓ Secured
MRP EngineYour compute cluster✓ Secured
Demand ForecastsYour ML server✓ Secured
Logistics DataYour SQL Server✓ Secured
Supplier EDIYour EDI gateway✓ Secured
External Network — All Egress Blocked
Vendor CloudThird-Party APIsTelemetry ServersAnalytics Pipelines

ML demand forecasting runs entirely on-prem. EDI transactions with suppliers route through your existing AS2/SFTP gateway — Ledger never touches that data stream.

Independent Verification

Every architecture claim is documented in our technical whitepaper with network diagrams, firewall rule examples, and third-party audit findings.

Download Whitepaper →
// field reports
"
"We got burned by a SaaS ERP breach in 2023. Forty thousand employee records. Ledger was the only platform where our security team could look at the firewall logs and see nothing going out."
MH
Margaret Hollister
CFO · Vantage Precision Manufacturing
3,200 employees · Mid-market manufacturer
// compliance frameworks
ITAR
Export Administration Regulations
HIPAA
Health Insurance Portability
SOC 2
Type II Certified
CMMC
Cybersecurity Maturity Model
DFARS
Defense Federal Acquisition
NIST 800-171
CUI Protection Framework
Deployment track record
0
Breach notifications
since 2019
47
Compliance audits
passed first try
100%
Audit log integrity
cryptographically signed
// deployment

Deploy Your Trial Instance

Your trial runs entirely on your hardware. We ship a Docker image to your ops team. No data leaves your network during evaluation — the same guarantee we make in production.

01
Receive Docker image via secure transfer
< 5 min
02
Deploy to your on-prem Kubernetes or bare-metal
< 30 min
03
Connect to your existing Active Directory
< 15 min
04
Import sample data from your current ERP
< 1 hour
Not ready to install?

Download the Architecture Whitepaper. 42 pages of network diagrams, firewall configurations, and third-party audit findings. Built for your security review meeting.

01 / Identity

No personal emails. No marketing lists. One email to confirm your trial instance.

Ready to see the proof?