Global Compliance
Koriepay is audited regularly by independent third parties to ensure our systems comply with global financial security regulations.
PCI-DSS Level 1
Koriepay is a certified PCI Level 1 Service Provider, the highest level of certification in the payments industry.
SOC 2 Type II
We undergo annual SOC 2 Type II audits evaluating our security, availability, and processing integrity controls.
GDPR & NDPR
Strict adherence to European and African data privacy laws regarding the collection, processing, and erasure of personal data.
ISO 27001
Our Information Security Management System (ISMS) is certified against the ISO 27001 global standard.
Data Protection & Encryption
All data interacting with the Koriepay infrastructure is heavily encrypted using industry-best practices. Card data is tokenized immediately and never stored in plain text.
Data in Transit
All communications are forced over HTTPS
Data at Rest
Databases, backups, and logs are heavily encrypted
Infrastructure Security
-
Cloud Environments
Our primary infrastructure runs on top-tier cloud providers (AWS). Physical security is handled by data center security personnel, biometric scanning, and 24/7 CCTV.
-
DDoS Mitigation & WAF
We employ enterprise-grade Web Application Firewalls (WAF) and distributed denial-of-service (DDoS) protection to ensure 99.999% uptime.
Vulnerability Disclosure Program
We believe that working with skilled security researchers across the globe is crucial in identifying weaknesses. If you believe you’ve found a security vulnerability in Koriepay, we encourage you to let us know right away.
How to report an issue:
- Do not exploit the vulnerability for any reason.
- Do not publicly disclose the bug before it has been fixed.
- Send a detailed report with reproduction steps to our security team.