Security

Data is encrypted in transit using TLS 1.3 and at rest using AES-256.

Secrets and credentials are stored in dedicated, access-controlled key management.

Role-based access ensures each user sees only the data relevant to their role.

Administrative access is restricted, logged, and reviewed on a regular basis.

Key actions across lending, collections, HR, and accounts are captured in immutable audit logs to support compliance and investigation.

Customer data is logically isolated so that one organisation’s data is never exposed to another.

If you believe you have found a security issue, please contact our team so we can investigate and respond quickly.