Account protection
Email verification and optional multi-factor authentication help prevent unauthorized access.
Data separation
User-scoped access controls keep authenticated ledger records separated by account.
Protected files
Receipt uploads use controlled access rather than permanent public file links.
Local exports
CSV exports are generated in your browser and are not sent to an additional export service.
Financial-data integrity
Security also means protecting the meaning of your records. Gorilla Ledger keeps currencies separate, excludes internal transfers from operating income and expenses, uses strict amount parsing, and hides totals when required data cannot be verified.
What you can do
- Sign in only from magic links you requested and never forward them.
- Enable MFA and configure a backup authenticator.
- Review account security regularly.
- Export important records and store the files securely.
- Contact us immediately if you suspect unauthorized access.
Responsible disclosure
If you believe you have found a vulnerability, email hello@savvyrilla.tech. Please do not access another person's information, disrupt the service, or publicly disclose an unresolved issue.