Money
Wallets, payouts, escrow, marketplace settlement, balances in several currencies.
Holds: Authorise now, capture later.
Ledger by RODMENA · free today
Books that always balance. For money, credits and stock.
Ledger is a hosted double-entry ledger with an API. Every transaction balances, every entry is permanent, and every balance can be proved — rules the database itself enforces, not just our code. Free to use today.
112
automated tests
101
database certification probes
54
live probes against the running service
4
internal audit gates
194,432 / 0
requests served / errors in the ten-minute load test
Figures re-counted from the ledger repository on 2026-09-05; every audit was internal, by an independent internal auditor. How the numbers are produced.
In one paragraph
Books the way a bank keeps them
Ledger keeps books the way a bank’s core ledger does: every movement of money, credits or stock has a source, a destination and a permanent record. The rules that protect the books are enforced inside the database, so neither a software bug nor an insider can bypass them. It has passed four internal audit gates and repeated adversarial re-audits, with every finding fixed and re-verified, and it is checked continuously by live probes against the running service.
What it keeps books for
Money, credits and stock, on the same rules
Credits
API credits, prepaid packages, loyalty points, gift cards, entitlement units.
Holds: Reserve for the duration of a job; complete on success, release on failure.
Stock
Goods on hand, warehouse transfers, seats and licences.
Holds: Reserve against a basket; released on expiry if checkout never completes.
How it works
Four steps from nothing to a balanced set of books
1
Define what you count
Create an asset type for each thing you keep books of — pounds, credits, seats — and the accounts that hold it, each with its own floor.
2
Post balanced transactions
Every movement names where the value comes from and where it goes. If the two sides do not match, the ledger refuses it before anything is written.
3
Reserve, then settle
Put a hold on funds or stock, complete it when the sale goes through, or release it. Anything you forget is released for you when it expires.
4
Read the books back
Current balances, balances at any past moment, and a statement that never shifts under you — the same records an auditor would ask for.
The getting-started guide shows every request and response, captured from a running instance.
What the database enforces
The guarantees are rules of the database, not promises in our code
Six of the twelve. Each names how it is enforced and which live check guards it.
Every transaction balances
What leaves one account arrives in another, for each kind of asset in the transaction. A transaction that does not balance is refused before anything is written.
Enforced by the database, at the moment it commits.
History cannot be edited
Entries are permanent. Nobody can change or delete them, including us. A mistake is corrected with a new, visible transaction that reverses it.
Enforced by the database: no edit or delete path exists on the journal.
Amounts are exact
Money, credits and stock are counted in whole minor units, so nothing is ever rounded away. Amounts travel as text, never as approximate numbers.
Enforced by the database column type and a build check that refuses approximate arithmetic on any amount path.
An account cannot go below its floor
Every account declares its floor: zero for a customer wallet, a negative limit for an agreed overdraft. A movement that would breach it is refused, even when many requests race for the same balance.
Enforced by the database: balances are locked in a fixed order before checking, and a constraint is the final wall.
A retried request cannot move money twice
Every write carries a key you choose. If your connection drops and you send the same request again, you get the original answer back and nothing moves a second time.
Enforced by the ledger write and its receipt committing together, in one database transaction.
One customer can never see another
Your credential is your boundary. Records that belong to someone else do not exist as far as your requests are concerned, and a request without a valid boundary is refused rather than answered.
Enforced by two independent layers, the second inside the database, failing closed.
Who it is for
Built for the people who sign off on the books
For finance leaders
The books cannot go out of balance, cannot be edited after the fact, and can be reconciled at any time. Corrections are visible entries, not quiet fixes.
For engineering leaders
One API, exact amounts, safe retries and holds. The hard problems of a ledger are solved once, in the database, so your team never has to solve them in application code.
For platforms
Give each of your own clients an isolated ledger under your account, mint their keys, suspend and restore them, all through the API.
No surprises
What is open today, and what is not
Where things stand today
Accurate as of 2026-09-05
- Price
- Free today: 10,000 API calls a month on the ledger-free plan.
- Getting a tenant
- Tenants and keys are provisioned personally by RODMENA; partners then self-serve their own clients through the API.
- Self-service sign-up
- Not yet. We provision each tenant personally and mint the first key for you.
- Web console
- Not yet. Everything is done through the API and the documentation.
- Uptime commitment
- None on the free plan. The support model and severity definitions are published on the company site.
- Speed figures
- Not published until measured on reference hardware.
- Try-it sandbox
- Planned as the next stage: a preloaded sandbox anyone can try without an account.
Pricing
Free today
The free plan includes 10,000 API calls a month with a burst allowance for busy moments. There is nothing to pay, no card to enter and no trial that expires. What it does not include — an uptime commitment, self-service sign-up — is stated plainly on the pricing page.
Pricing in fullQuestions
Frequently asked
Is Ledger only for money?
No. It keeps books for money, for credits such as API credits, loyalty points and prepaid packages, and for stock such as goods, seats and licences. Anything that is counted and must not be created or destroyed outside a recorded transaction belongs in it.
Can one transaction move money and stock together?
Yes. Balancing is checked separately for each kind of asset in the transaction, so a sale can move goods out and money in as one record. Both sides settle together or neither does.
How is this different from a quota or metering service?
Metering counts consumption. A ledger records ownership: units that were purchased, can be refunded and can be disputed, where every movement has a source, a destination and a permanent record.
Can an account be overdrawn?
Only if you give it a negative floor on purpose, as an agreed overdraft. Every account declares its floor, and a movement that would breach it is refused by the database itself, even under heavy concurrent traffic.
What happens if my request times out halfway?
Send it again with the same key. The ledger either completed the write and replays the original answer, or it did not and the retry does the work. There is no state in which money moved but you were never told.
What does it cost?
Nothing today. The free plan includes ten thousand API calls a month. There is no uptime commitment on the free plan, and access is provisioned personally by RODMENA.
Who has audited it?
An independent internal audit team at RODMENA, working adversarially, through four stage gates and repeated re-audits. No external body has reviewed the ledger. The full history, including the findings, is published on the assurance pages.
Free today. Access is provisioned personally by RODMENA.
Tell us what you keep books of and we will set up a tenant, mint your first key and walk you through the tour.