About Forge Ledger
A personal finance tool built for people who'd rather forecast than firefight.
Our mission
Most personal-finance software treats money as a record-keeping problem: log what you spent, look at it later, feel bad. Forge Ledger flips that — we're built around the future, not the past.
Our mission is to make personal financial forecasting feel like craftsmanship, not chores. A way of creating a more assured financial future for yourself. You should be able to see a shortfall coming three months out, know which recurring bill is going to bite, and adjust before it costs you. No AI guesswork, no bank-screen-scraping — just the maths, your data, and a clear view of what's ahead. Although live updates from banks is a planned upgrade for the future!
Our Beginnings
This all started as an excel spreadsheet I built for my parents to help them manage their cash flow when they retired. In order for them to keep money in higher interest accounts or in their pension pots for as long as possible to avoid reduced interest rates . It was also to help them plan ahead for larger purchases such as holidays, a new car, etc.
After a while I started using the spreadsheet myself in order to control, plan and understand my money situation better. From there I got ideas on how to make things better for myself. But (in truth) didn't have the excel skills to deliver it and I didn't fully like what was on the market currently. That's where an AI built website/app came about.
I hope it helps you bring stability and control to your finances, the same way it has for me!
Your data, kept safe
Forge Ledger holds the future of your finances — we take that responsibility seriously. Here's how your account is protected, in somewhat plain English... aka the boring, but reassuring part:
Passwords are never stored in plain text
Your password is run through bcrypt (the industry-standard one-way hash used by NHS Digital, GOV.UK, and most major banks) before it ever touches our database. Even we can't read it. We also check every new password against the Have I Been Pwned breach database, so you can't reuse a password that's been leaked elsewhere.
Every connection is encrypted in transit
All traffic between your browser and our servers runs over TLS 1.3 (HTTPS) — the same encryption your online banking uses. We enforce HSTS, meaning your browser refuses to ever connect over plain HTTP, even by accident.
Session security designed for real life
Login sessions use httponly, secure cookies — they can't be stolen by a malicious browser extension or a script on another tab. If you suspect a device was compromised, the Log out everywhere button in `/account/settings` → Security invalidates every active session instantly across every device.
Your card details never touch our systems
When you pay for one of our upgrade tiers, the checkout form is hosted entirely by Stripe — a PCI-DSS Level 1 payment processor. Forge Ledger only ever sees a session ID; your full card number, CVV, and expiry stay inside Stripe's vault. If our database were ever breached, no card data would be exposed because none of it lives here.
Encrypted-at-rest on a managed database
Your transactions and account balances live in MongoDB Atlas (managed in the UK / EEA region), which encrypts every disk block with AES-256 and runs daily automatic backups with point-in-time restore. We don't host your data on a laptop in a cupboard — promise.
Defence in depth at the application layer
Rate limits on every endpoint (so brute-force login attempts get blocked), strict security headers (preventing clickjacking, MIME-sniffing, and referrer leakage), CSRF-safe cookies, and a brute-force lockout after 5 failed logins on the same account. None of this is the headline of a finance app — but the absence of any of it is why other services get hacked.
Your data is yours — and easy to leave with
From `/account/settings` → Privacy & data you can download a complete JSON snapshot of everything we hold for you, anytime. Under UK GDPR that's your Right of Access (Article 15), and we make it a one-click button instead of a 30-day email request. If you delete your account, we hold the data for 30 days (in case you change your mind — log back in and it's restored automatically) and then hard-delete every row across our entire database. That's the Right to Erasure (Article 17), genuinely fulfilled.
No bank scraping, no selling your data
Forge Ledger currently doesn't connect directly to your bank — you enter transactions yourself or import via CSV. That means we never need your banking password, and our breach risk has nothing to do with your money in the bank. We also don't sell, share, or rent your financial data to advertisers or data brokers, full stop. Once Open Banking for the Titanium tier starts being built we will comply with all related laws and security protocals.
If something here is unclear, or you're a security researcher with a finding you'd like to disclose, please use the contact us section at the bottom of our pages. We aim to reply within 5 working days, and we read everything.
Manage which cookies we use. You can change this at any time.
Disclaimer on projected balances
Forecasts are only as good as the data you provide and maintain. Always ensure you input the most accurate future bills, debts, income, expenses, etc. to get the most accurately forged financial future possible.
Forge Ledger does not provide regulated financial advice. Projections are mathematical extrapolations from the recurring transactions and balances you enter — they are not investment recommendations, tax advice, or a substitute for speaking with a qualified advisor. We make no guarantee that any forecasted balance will be accurate; real-world events (job changes, unexpected bills, market shifts) can and will affect outcomes.
Invite friends and family
If Forge Ledger has saved you a bank-fee overdraft or just helped you sleep better, bring another hammer to the anvil:
Join the community
Forge Ledger's community lives on social — that's where you can get setup tips from other users, share what's worked for you, and shape what we build next.
Terms & Conditions
By using Forge Ledger you agree to the following.
1. Your data is yours
You own everything you put into Forge Ledger. We store it to provide the service. You can export or delete it at any time. We do not sell, share, or rent your financial data to advertisers, brokers, or any third party.
2. No financial advice
Forge Ledger provides forecasting tools, not regulated financial advice. Decisions you make based on the projections are your own. See the disclaimer above.
3. Service is provided "as is"
We work hard to keep the service reliable and accurate, but we offer no warranty that it will be uninterrupted, error-free, or fit for any specific purpose. To the maximum extent permitted by law, Forge Ledger is not liable for indirect or consequential loss arising from use of the service.
4. Acceptable use
Never share your account details with anyone. Don't use Forge Ledger to launder funds, evade tax, or commit fraud. If you do, we'll close your account and may be legally required to report it.
5. Subscriptions
Paid plans (Steel / Damascus / Titanium) are billed monthly or annually via Stripe. You can cancel anytime — cancellation takes effect at the end of your current billing period. Refunds are handled on a case-by-case basis; reach out and we'll be reasonable.
6. GDPR & contact
Forge Ledger is operated by a UK sole trader. For data-protection enquiries (subject access requests, deletion, complaints) use the contact us options provided. We aim to reply within 5 working days.
7. Changes to these terms
If we make material changes, we'll notify you by email at least 14 days before they take effect. Continued use of the service after that constitutes acceptance.
Last updated: 26 July 2026.