Defense in depth
All data in transit is encrypted with TLS 1.3+. All sensitive data at rest is encrypted with AES-256 and envelope keys.
Isolated VPCs, multi-AZ redundancy, least-privilege IAM, and continuous patching keep the platform resilient.
SIEM + anomaly detection, real-time alerting, and on-call coverage ensure rapid incident response.
We welcome security researchers to responsibly disclose vulnerabilities. Submit details to security@fingopay.io.
If you need encryption, ask for our PGP key.
How we protect you
Security is not an afterthought at Fingo Pay. Every line of code, every infrastructure decision, and every process is designed with protection as the foundation.
TLS 1.3+ in transit, AES-256 at rest, envelope key management
Every request is authenticated and authorized, no implicit trust
Annual pen-tests, external SOC 2 audits, and automated vulnerability scanning
CBK regulated, PCI DSS Level 1, aligned with GDPR principles
Enterprise-grade protection
The same security standards trusted by banks and regulators across East Africa.
AES-256
Encryption
TLS 1.3+
Transport
MFA + SSO
Auth
24/7
Monitoring
FAQs