Security, Transparency & Transaction Integrity
We implement industry-grade defense-in-depth to safeguard Mauritanian digital wallet payments, protect customer data, and deliver dependable software platforms.
Security Architecture Overview
AFRIKYIA applies a comprehensive defense-in-depth model, enforcing least privilege and zero-trust verification across all operational layers.
End-to-End Transport Security
Strict TLS 1.3 enforcement with preloaded HSTS headers and modern 256-bit cipher suites.
Hardened Security Headers
Strict Content-Security-Policy (CSP), framing restrictions, and cross-origin resource isolation.
Server-Side Input Sanitization
Strict typing and payload validation preventing SQL injection and payload corruption.
Mauritanian Digital Wallet Security
Our payment processing engine stops financial tampering and replay attacks across Bankily, Masrvi, Sedad, and Click via NexConnect gateway.
Constant-Time Verification
Cryptographic credential matching completely immune to timing side-channel attacks.
Atomic Idempotency Guarantees
Database-enforced constraints preventing duplicate captures or duplicate license deliveries.
Strict Amount & Currency Matching
Disputed flagging and auto-freeze on any discrepancy between order and settlement.
Cryptographic Audit Trail
Immutable SHA-256 payload logging ensuring full transaction traceability and forensics.
Independent Security Assessments & Testing
Our digital store and payment webhooks undergo rigorous automated testing and structured threat assessments.
| Scope | Methodology | Status | Verified Outcome |
|---|---|---|---|
| Payment Webhooks & Callbacks | TDD Security Suite & Fuzzing | Verified | 19 fraud and replay scenarios neutralized |
| Public and Admin APIs | OWASP API Security Top 10 | Compliant | Strict authorization and secret isolation |
| Transport Encryption & SSL | Qualys SSL Labs Benchmark | A+ Rated | TLS 1.3 with active HSTS Preload |
| Database & Row Level Security | Least-Privilege RLS Audit | Secured | Internal tables hidden from anonymous access |
Standards & Security Frameworks
We clearly distinguish between reference benchmarks and formal third-party certifications:
OWASP ASVS 5.0
Evaluation FrameworkApplication Security Verification Standard used to design and evaluate our internal security controls.
OWASP API Security Top 10
Continuous ReviewPeriodic audit ensuring resilience against authorization bypass and data leakage.
PCI DSS Alignment (SAQ-A)
Delegated ProcessingNo cardholder data is retained on our servers; transactions are routed through accredited banking channels.
Responsible Vulnerability Disclosure
We welcome security researchers and ethical hackers to responsibly report potential security findings:
- Send detailed reproduction steps directly to our security mailbox: security@afrikyia.com
- Do not degrade production availability or access confidential customer records.
- Allow our engineering team 48 to 72 hours to review and patch before making any disclosure.
- We acknowledge valid submissions and maintain transparent remediation records.
Privacy & Data Protection
We strictly adhere to data minimization, collecting only information vital to product license delivery.
Operational Status & Monitoring
Critical platform components are continuously monitored for uptime, reliability, and security integrity.