Security

Money that's safe before it's shared.

Royalties sit in a track pot for up to a month before the 1st. Here's exactly where that money lives, who can move it, and how every signature on a split sheet is kept as evidence.

How money is held

Your money, ring-fenced.

TrackLedger never mixes royalties with its own money. Income lands in safeguarded client accounts held with regulated banking partners in the UK and Nigeria, and each track's share is tracked to the penny in its own pot.

  • ASafeguarded client accounts. If TrackLedger disappeared tomorrow, the money in the pots would still belong to the people on the sheets — not to us, and not to our creditors.
  • BOne pot per track. Income is matched to a track before it's split, so one song's earnings can never cover another song's payout.
  • CPayouts only to verified people. Every collaborator confirms their identity and their bank, card or mobile money account before a single pound, naira or euro goes out.

The basics

Locked down by default, not as an upgrade.

Every plan, including the free one, gets the same protection. Security isn't a tier.

Encrypted everywhere

AES-256 for stored data, TLS 1.3 for everything moving. Bank details are tokenised and never shown in full, even to our team.

2-step sign-in

An authenticator app or passkey on every account. Changing payout details always asks for a second check.

SOC 2 Type II in progress

Our audit window opened in July. Until the report is out, we'll walk any label or publisher through our controls on a call.

GDPR & NDPR rights

Wherever you are, you can see, correct, export or delete what we hold about you under UK, EU and Nigerian data law.

Audit trail

Every signature is evidence.

A split sheet is only worth something if you can prove who agreed to it. TrackLedger records every version, every change and every signature with the time, place and device — and nobody, including us, can edit that history.

  • AAppend-only history. Old versions are kept, never overwritten. A change creates a new version that everyone affected has to sign.
  • BTamper-evident. Each signed sheet is sealed with a cryptographic hash, so any later edit would show.
  • CReady for a dispute. Download the full trail as a signed PDF for a lawyer, a society or a label's business affairs team.
Low Tide · audit trailVerified
14:31:08Sheet v3 created by Marlow FenLondon · iPhone · TrackLedger web
14:33:52Kofi Lune signed 30% · productionLondon · Android · TrackLedger app
14:35:10Tess Reyes signed 20% · guitarLondon · iPhone · TrackLedger web
14:36:41Marlow Fen signed 40% · topline, lyricsLondon · iPhone · TrackLedger web
16:02:19Ama Osei signed 10% · feature vocalLagos · Android · via link
16:02:20Sheet sealed · hash 9f3a…c71e4 of 4 signed · registrations queued

Your data

Your data, your call.

Your splits, credits and statements belong to you. We hold them so the money moves — that's the whole arrangement.

Export everything

Split sheets as signed PDFs, statements as CSV, credits as DDEX-ready files. One button, any time, on any plan.

Close your account

We delete your personal data within 30 days. Signed sheets you're on stay with your collaborators, with your name, because they agreed to them too.

Never sold, never shared

No ad networks, no data brokers, no "anonymised" listening data sold to anyone. We make money from plans and payout fees, full stop.

Responsible disclosure

Found a gap? Tell us first.

Email security@trackledger.fm with what you found and how to reproduce it. We'll reply within two working days, keep you updated while we fix it, and credit you publicly if you'd like. We won't take legal action against good-faith research.

  • 48hFirst reply
  • WeeklyFix updates
  • CreditIf you want it

Questions

The things people actually ask.

Usually from a manager, a lawyer, or a bandmate who's been burnt before.

It's still yours. Pot balances sit in safeguarded client accounts, separate from TrackLedger's own money. If we ever wound down, those balances would be paid out to the people on each signed sheet, and you'd keep every PDF and statement.

Not without you. Changing where you're paid needs your 2-step check, and we email you and pause that payout for 48 hours. Nobody on your track — not even the person who started the sheet — can touch your details.

It's a recognised e-signature. TrackLedger signatures count as electronic signatures under UK and Nigerian law, and the audit trail shows who signed, when and from where. For big deals, your lawyer can still review the sheet before anyone signs.

Almost nobody, and it's logged. Support can only open your account when you ask them to, for a set time. Every look is recorded in your account history, so you can see exactly who viewed what.

Still stuck?

A real person on our London or Lagos team replies within one working day.

Before the bounce

Settle the split before the session ends.

Start a split sheet in the room, send it round, and let every share find its own way home. Free for every track you make.

  • £0Split sheets, forever
  • 11 minSession to fully signed
  • 1stPaid every month