Data location
Where your data lives.
An invoice line next to a client name is health information, so it matters where it sits and who can reach it. Here is each part, and the provider that holds it.
The short version
Your records sit in Sydney. Your login sits with Clerk in the US.
Those are two different systems, so we say where each one is rather than putting one label over both.
Supabase, Sydney region
Practice and financial records- Practice records, financial data, connector state, and the files you upload or forward to your practice address are stored in Supabase's Sydney region.
Clerk, United States
Sign-in identity and sessions- Signing in, and the session that keeps you signed in, are handled by Clerk. Clerk runs in the United States, and holds the name and email address on your login.
Three fields
What Ledger Map stores about a person- Ledger Map itself stores the Clerk user id, the email address and the display name. That is what connects a person to a practice, and to the approvals and audit records they leave behind.
Who else touches it
The services behind Ledger Map, and what each one sees.
These are the providers Ledger Map runs on. Each line says what that provider handles on our behalf.
- SupabaseDatabase and file storage, Sydney region
- Practice records, financial data, connector state, encrypted connector credentials, and the files you send us.
- ClerkSign-in and sessions, United States
- Your name, your email address, and the session that keeps you signed in.
- VercelWeb application hosting
- The requests you make to Ledger Map and the pages rendered back to you.
- RenderBackground worker hosting
- The records the worker moves while it syncs with Xero, Zanda, and Stripe, and the jobs it runs.
- StripeSubscription billing, and payout data when you connect a Stripe account
- Your billing details, and the payouts and charges from a connected Stripe account.
- ResendService email
- The recipient, subject, and body of the email Ledger Map sends you.
- AnthropicReading a document we have no parser for
- Text with identifiers redacted first. If a practice explicitly opts in, an image or PDF can be sent without text redaction because visual files cannot be redacted the same way. Every proposed row still requires human review.
Your own connections
Xero, Zanda and Stripe hold their own records under your account with them, on the terms you already have with each provider. Ledger Map reads and writes there only while you keep the connection authorised, and you can revoke it at their end.
A fuller processing summary, including the provider terms we are still collecting evidence for, sits in our privacy document. Ask us and we will send you the current version.