Keeps: every entry and its source
The entry, the invoice, receipt or bank line behind it, and the tool it came from.
Centilio LedgerLayered record
CENTILIO LEDGER / MONEY
Secure accounting software, designed before the first entry.
The books hold what a business earns, owes and pays its people. Ledger is designed so they are encrypted, readable only by the roles you set in Account, traced entry by entry and locked once a month closes. None of it is running yet, and this page says what is designed, not what is certified.
not shipped · wave 3roles from Accountevery entry tracednever used to train anything
Product design preview · Ledger has not shipped. All features, screens and prices are proposals.
Ledger has not shipped yet.
Everything on these pages — the screens, the features, the prices — is Centilio Ledger as designed. Ledger has not shipped: it sits in the third wave of Centilio tools, and there is no app, no beta and no launch date yet. We would rather set out the whole design and say so plainly than publish a thin page and let you guess. Join the waitlist and you will hear first; if you need an invoice today, the free invoice generator works now, with no sign-up.
Boundaries
What Ledger keeps, and what it never does.
The books hold a business’s income, its debts and its payroll. The design starts from what Ledger should never do with them.
Keeps: who did what
Who created, changed, approved, reversed or closed, and when.
Keeps: closed months closed
A closed period changes only with a reason on the record, and on Business with a named approval.
Never: moves money
Ledger records payments; it does not make them. Paying is done in your bank, or in Pay, by a person.
Never: files without you
Returns and summaries are prepared for a person to review and file.
Never: trains on your books
Nothing of yours is used to train anything, inside Centilio or out.
Roles and audit
Roles from Account, and a trail for every entry.
Who may post, approve, close or only read comes from Account, the same login and roles as every Centilio tool.
There is no second list of people to keep in step. When someone leaves and is removed in Account, they lose access to the books at once.
Your accountant has a role of their own: the books, the reports and the trail, and nothing else in your Centilio account. Every entry records who made it, from which tool, and who approved it.
- Owner, bookkeeper, approver, accountant and read-only roles
- Closed months locked, with a reason needed to change one (Pro)
- A named approver for any change to a closed month (Business)
- Audit trail export for an auditor (Business)
Celia’s boundaries
Celia reads only what you can read.
An assistant should never know more of the books than the person asking it. Celia is designed to stay inside that line.
When you ask Celia about a number, it reads the entries you are allowed to read and nothing else. Each figure in its summary links to the entries behind it, so a reviewer can follow any number to its source.
It proposes; it does not post on its own authority. Every entry Celia suggested is marked as such in the trail, with the person who accepted it, so an auditor can tell a human decision from a suggestion.
Standards
The same platform as Drive, Sign and Account.
Ledger is designed to run on the platform that already serves the live Centilio tools.
The books are designed to be encrypted in transit and at rest, inside your organisation’s space, with multi-factor sign-in and device rules from Account. We claim no certification for Ledger: a product that is not built cannot hold one, and when there is something true and dated to say, it will be here.
- Encrypted in transit and at rest
- Roles and multi-factor sign-in from Account
- Exportable at any time, to spreadsheet and CSV files
- Nothing of yours used to train anything
- Regional residency on Enterprise, on request
Questions
About the books, data and trust.
Is Ledger secure today?
Ledger does not exist yet, so there is nothing running to secure or certify. This page is the design, and it will be rewritten with what is true and dated on the day Ledger ships.
Who can see the books?
The people and roles you allow in Account: owner, bookkeeper, approver, accountant and read-only. Each person sees only what their role allows, and Celia is held to the same limit.
Are my books used to train AI?
No. Nothing of yours is used to train anything. Celia reads your entries to serve you, inside your organisation’s space.
Can anyone change a month after it closes?
Not quietly. A closed month is designed to change only with a reason on the record, and on Business only after a named approver agrees. The trail keeps the before and the after.
Does Ledger keep my bank password?
No. Bank feeds are designed to connect through the bank’s own authorisation where one exists, and statement upload needs no bank login at all. Ledger reads transactions; it cannot move money.
Where is my data kept?
In your Centilio account, encrypted in transit and at rest, under roles you control and exportable at any time. Regional residency is proposed on Enterprise.
Do you hold a certification for Ledger?
No, and we will not claim one for a product that is not built. When there is something true and dated to say, it will be on this page.
Hear first when Ledger opens.
Ledger is in the third wave, after Bill, with Spend and Pay beside it. Join the waitlist and you will hear before the announcement. Tell us how you keep the books today and what your year-end looks like; the awkward requirements shape the design most.