Security
Financial software asking to read wallet activity has to earn trust quickly. Here’s what’s actually true today, including the parts that aren’t finished yet.
Public address only
Adding a wallet asks for one thing: its public address. ArcLedger never requests, stores, or transmits a private key or seed phrase, under any circumstance. This is treated internally as a critical, non-negotiable rule, not a feature to weigh against convenience.
Read-only against the chain
ArcLedger reads and organises blockchain activity. It does not write to any smart contract, does not sign transactions, and cannot move funds out of your wallet.
Immutable data stays immutable
Raw blockchain transaction records are insert-only and never modified after import. Your editable bookkeeping context, including categories, descriptions, and notes, lives on a separate layer, so correcting a categorisation never rewrites the underlying transaction history.
Every change is tracked
A manual edit, a rule-driven change, or an archive/delete action all write an audit log entry, recording who or what made the change and the value before and after.
Workspace isolation
Every workspace-scoped query is filtered by workspace. It's the primary defence against one workspace's data leaking into another's view, and it has a dedicated automated test suite.
Rate limiting and injection protection
Authentication and expensive endpoints (sync, export) are rate-limited. CSV exports are sanitised against formula-injection characters before they ever leave ArcLedger.
What’s honestly not true yet
- No independent, external security audit has been performed. Security work to date has been an internal, structured self-review. That’s real work, but it isn’t a substitute for third-party review.
- The privacy notice is an accurate, engineering-written draft, not yet reviewed by qualified legal counsel. It’s published for transparency, not represented as a legally compliant document.
- ArcLedger was built and tested against Arc testnet and moved to Arc mainnet after it launched on September 16, 2026. Mainnet support is new, so there is little real-money production history to point to yet.