Security Overview

We design CreditScore.Africa to protect sensitive information using layered safeguards appropriate to risk.

1) Core principles

• • Least privilege: access is limited to what’s necessary.
• • Auditability: key actions (including consent events) are logged.
• • Defense in depth: multiple layers across app and infrastructure.

2) Access controls

We use role-based access control (RBAC) for internal/admin tooling and limit access to sensitive systems.

3) Encryption

• • Encryption in transit (HTTPS/TLS).
• • Encryption at rest for sensitive stored data where supported by infrastructure.

4) Monitoring & response

We monitor for suspicious activity and maintain processes for investigating incidents and restoring service.

5) Vendors

We may use vetted vendors for hosting/communications/analytics under contractual confidentiality and security expectations.

6) Your role

Use strong passwords, keep devices secure, and report suspicious messages to support@creditscore.africa.