Security & Trust
Security-first architecture.
Security controls are being implemented in line with the requirements of our future regulated operating environment.
Two-factor sign-in
Optional authenticator-app codes, required for sensitive actions once enabled.
Secure authentication
Email verification, password reset and automatic sign-out after inactivity.
Transaction verification
Every money movement requires your transaction PIN; repeated wrong attempts lock the PIN.
Encrypted communications
All traffic between your device and ₦airaCap is encrypted in transit.
Role-based access
Staff access is limited by role, and admin actions require two-factor sign-in.
Audit logging
Sign-ins, PIN changes, trades, transfers and admin actions are permanently recorded.
Data protection
Full BVN and NIN numbers are never stored in readable form.
Secure infrastructure
Database access rules ensure you can only ever see your own data.
Backup and recovery
Regular backups of platform data.
Monitoring
Errors and suspicious activity are monitored.
Incident response
A defined process to investigate and notify affected users.
We will publish relevant certifications and regulatory information as they become applicable.