🔒 SECURITY & COMPLIANCE

Enterprise-Grade Protection

Your data protection is our top priority. We implement industry-leading security measures compliant with Nigerian and African data protection standards to keep your information safe.

Our Security Framework

🔐

Data Encryption

Military-grade encryption protects your data at every stage.

  • AES-256 encryption at rest
  • TLS 1.3 for data in transit
  • Encrypted database backups
  • End-to-end encryption options
🛡️

Access Controls

Granular permissions and authentication safeguards.

  • Multi-factor authentication (MFA)
  • Role-based access control (RBAC)
  • Single Sign-On (SSO) support
  • Session management & timeout
🔍

Monitoring & Auditing

24/7 surveillance of all system activities.

  • Real-time threat detection
  • Comprehensive audit logs
  • Automated security alerts
  • User activity tracking
☁️

Infrastructure Security

Enterprise-grade cloud infrastructure optimized for Africa.

  • SOC 2 Type II certified data centers
  • Multi-region data replication (Africa-focused)
  • DDoS protection & mitigation
  • 99.9% uptime commitment
  • Low-latency access across Nigeria and Africa
💾

Data Backup & Recovery

Automated backups ensure business continuity.

  • Daily automated backups
  • 30-day backup retention
  • Point-in-time recovery
  • Disaster recovery plan
🎯

Vulnerability Management

Proactive security testing and patching.

  • Annual penetration testing
  • Continuous vulnerability scanning
  • Automated security updates
  • Bug bounty program

Compliance & Certifications

SOC 2 Type II
ISO 27001
GDPR Compliant
NDPA 2023 Compliant
NDPR 2019 Compliant

RequisitionPro undergoes regular third-party audits to maintain our compliance certifications. We adhere to Nigerian and international data protection standards including NDPA 2023, NDPR 2019, GDPR, and industry-specific regulations. We are registered with the Nigeria Data Protection Commission (NDPC).

Our Security Process

🔒

Secure Development

Security is built into our development lifecycle from day one. Code reviews, security testing, and vulnerability assessments are performed at every stage before deployment.

🔍

Continuous Monitoring

Our security operations center (SOC) monitors systems 24/7/365 for suspicious activities, anomalies, and potential threats. Automated alerts trigger immediate investigation.

⚡

Incident Response

Our dedicated security team follows a comprehensive incident response plan. We identify, contain, and remediate security incidents within hours, not days.

📊

Regular Audits

Third-party security audits, penetration tests, and compliance reviews are conducted annually. We share audit reports with Enterprise customers under NDA.

🎓

Team Training

Our entire team undergoes mandatory security awareness training. Engineers receive specialized training in secure coding practices and threat modeling.

Data Privacy Principles

Data Minimization

We only collect data necessary to provide our services. No unnecessary tracking or profiling.

Purpose Limitation

Your data is used solely for the purposes you authorize. We never sell your data to third parties.

User Control

You have full control over your data. Export, delete, or modify your information at any time.

Transparency

Clear, honest communication about how we collect, use, and protect your data.

Data Residency

Your data is stored within Nigeria and Africa to ensure compliance with local data sovereignty laws and faster access.

Retention Policies

Clear data retention periods. Automatic deletion after account termination (with grace period for recovery).

Responsible Disclosure Program

We welcome security researchers across Africa and globally to responsibly disclose vulnerabilities. Our bug bounty program rewards researchers for helping us maintain the highest security standards.

Report security issues:

security@requisitionpro.com

PGP Key available upon request | Response time: <24 hours (West Africa Time)

Additional Security Resources

Privacy Policy Terms of Service