Actions, approvals and the ledger live in Studio, the local workbench that ships with the RailCall station. Your credentials never leave your computer, and every action is sealed into a receipt you hold.
Hosted run receipts and credit are viewable here without installing anything.