Reconciliation and subscription-model permissions of data stored across independent ledger instances of a database. A system includes a resource manager coupled to a plurality of client accounts. The system includes an execution platform and a shared permissioned ledger comprising independent processing and storage nodes for executing data operations for the plurality of client accounts. The resource manager defines a settlement group comprising one or more client accounts and authenticates an observer node associated with the settlement group. The resource manager assigns ingested data an encryption level on a key hierarchy based on content of the ingested data.