Kisal e ɗoftagol laawol

Kisal tolno banke, gila e fuɗɗoode haa e timmoode

Ngoo hello ina leɓɓita, tolno e tolno, no Capay Global reentorta kala njoɓdi, kala neldugol kaalis e kala winndannde. Kala ndeenka sifaaka ɗoo ina golla e yuɓɓo goonga hannde.

Ƴeewndo sakkitiingo 3 jolal 2026

Hoolaare e ƴeewal gootal

  • Kriptugol TLS tuma nde yahata
  • Kriptugol AES-256 tuma nde danndaa
  • HTTPS waɗɗinaa e HSTS
  • PCI DSS: alaa keɓe karta e sistemaaji amen
  • Yuɓɓo ndeenka SOC 1 e SOC 2
  • Anndinagol daawe ɗiɗi
  • Seerndugol keɓe e kala diidol
  • Doggol audit ngol waylotaako
  • Neldugol kaalis e jaɓgol yimɓe ɗiɗo
  • KYB, AML e ƴeewndagol kuuge
  • Ƴeewndo kisal timmungo, oktoobar 2026

Kisal e limooje

0
limooje karta danndaaɗe abadaa e sistemaaji amen
100%
e tabe baas keɓe les kisal e tolno diidol
7
duuɓi danndugol audit ɓeydugol tan
2
jaɓooɓe e kala neldugol ɓurngol keerol maa
300
sekonde hade ceŋorgal kaayit lannude
400
ñalɗi doggi naatgol edge danndaaɗi ngam wiɗto

No min ndokkirta seedee: ƴeewndo, safrude, etaade, ƴeewndo kadi

Min puɗɗataa e penetration test. Min ƴeewataa production fof adii, min cafroo ko ƴeewndo ngo yiyi, min noddo goomu jeyaaɗo hoore mum ngam etaade naatde, refti min ƴeewa kadi ngam teeŋtinde safaaje ɗe ina ñiiɓi.

  1. 01

    Ƴeewndo production e tolnooji 13

    Ƴeewndo timmungo e platform gollirtoongo: authentication, database, API, laabi kaalis, hosting, deployment, monitoring, recovery e goɗɗi. Timmii e lewru Oktoobar 2026.

  2. 02

    Safrude ko ƴeewndo ngo yiyi

    Ko ɓuri hulɓinde e ko toowi safraama ƴeewtaa e jemma oo kanko. Kala ko heddii ina jogii joom mum, ina sakkitee, fuɗɗoraade e ko reentata kaalis e naatgol.

  3. 03

    Penetration test caggal

    Fedde kisal jeyaaɗe hoore mum maa yana e platform on e yamiroore amen, ngam yiytude kala ko safaaje amen ɓaditii. Kliyaa ɓe ina mbaawi ɗaɓɓitde rapoor ɓadaaɗo on les NDA.

  4. 04

    Ƴeewndo ɗiɗmo

    Min ƴeewtat ƴeewndo tolnooji 13 ngam teeŋtinde kala safaare ina ñiiɓi, refti min kesɗina scorecard ngoo e hello ngoo.

Scorecard production: tolnooji 13

Ko reenta kala tolno e platform oo hannde, ko ƴeewtaa e ƴeewndo amen yuɓɓo lewru Oktoobar 2026.

  1. 01

    Authentication e naatgol

    Teeŋtingol e daawe ɗiɗi ngam njeeykooɓe e liggotooɓe, jamirooje tuugiiɗe e golle, e dameeji naatgol ɗi ombotoo so caɗeele ngoni.

  2. 02

    Database e seerndude keɓe

    Row-level security e kala tabal, ngam golle woo waawa janngude tan keɓe mum, kala gollal jogiingal baawɗe ƴeewat golle noddoowo oo adii.

  3. 03

    API e webhooks

    API keys hashaaɗi, rate limits e kala key e kala IP, IP allowlists, e webhooks siifaaɗi reentaaɗi e replay.

  4. 04

    Goonga kaalis

    Double-entry ledger, journals poti fotde, idempotency e kala noddaango kaalis e jaɓɓugol yimɓe ɗiɗo e yoɓe yaltuɗe.

  5. 05

    Kriptaa e gundooɗi

    TLS e nder yahdu, AES-256 e nder mooftol, e cuuɗi e nder taabule uddaaɗe ɗe porogaraam alaa waawi tarde, deftere alaa hollata ɗe.

  6. 06

    Hosting e edge

    AWS CloudFront caggal Cloudflare, danndugol suuɗaangol tan, HTTPS doolnaaɗo e HSTS e headers browser tiiɗɗi.

  7. 07

    Deployment e ardaade waylooji

    Bayyingol jokkondirɗe e sikirip ɗe ƴeewndooji kisal ngoni e nder, ƴeewndo ɗo e ɗo caggal kala bayyingol, e dirtingol keɓe ɗe waawi fiilteede e kisal.

  8. 08

    Monitoring e jeertine

    Ƴeewndooji cellal hokkooɓe sarwisaaji, jeertine kaalis wallet, ƴeewndooji deftere limoore, taƴooji circuit e hello ngonka ngam yimɓe fof.

  9. 09

    Logging e audit trail

    Audit log ɓeydotoongo tan danndaaɗo duuɓi jeeɗiɗi, request id e kala noddaango API e edge access logs danndaaɗi balɗe 400.

  10. 10

    Mawnugol e muñal

    Rate limits, kill switches e circuit breakers dartinooji laawol yoɓgol ronkiingol tawa daraaki goɗɗi ɗii.

  11. 11

    Ruttingol e fotndingol

    Ƴeewndo deftere limoore kala jemma, ƴeewtitgol ngonka e hoore mum ngam hay njoɓdi wota heddo e ɗaɓɓitaa, e fuɗɗitgol e kisal ngol yoɓnataa hay gooto laabi ɗiɗi.

  12. 12

    Jaabaade incident

    Paɗɗo winndaaɗo jaabtagol kuuje e tolnooji tiiɗnaare, golle innaaɗe, butooji daƴƴingol ɗi daƴƴinta laawol njoɓdi e nder sekonde, e humpitgol kiliyaaɓe.

  13. 13

    Ɗoftagol laawol e sutura

    Ƴeewndo KYB, AML e lepte hade hay gollal fuɗɗaade, ƴeewndo duumiiɗo, e alaa keɓe karte e yuɓɓooji amen.

Kala daawal njoɓdi, reenaangal

Tokku njoɓdi wootere gila e telefon sooduɗo maa haa e balaas maa, kadi yiy ndeenka ngam reenata kala daawal.

  1. 1

    Sooduɗo maa ina yoɓa

    E hello njoɓdi walla ceŋorgal njoɓdi jokkiraangal e TLS. Limooje karta njettotaako abadaa Capay Global; jaɓgol mobile money ina waɗee e telefon sooduɗo oo tigi.

  2. 2

    Jokkondiral maa ina nodda API

    Anndinaa e coktirgal suuɗaangal e hash kadi keeraangal; ɗaɓɓitanɗe keeraaɗe e kala coktirgal e kala IP; kala ɗaɓɓitannde ina roondii coktirgal idempotency e id ɗaɓɓitannde, kadi keɓe nanndude e karta ina calee e keerol.

  3. 3

    Deftere hisaabu ina winnda ɗum

    Diidol faandaare ina woodi hade wallidiiɗo kala noddeede, kadi kredi oo ina iwa e ndeen faandaare, wonaa e kiliyaa abadaa. Kala winndannde ina foti fotondirde, so wonaa ɗum baas keɓe ina sala nde.

  4. 4

    Wallidiiɗo ina teeŋtina

    Callbacks ina ƴeewtee siifannde e ɓanndu keccu e sahaa ndeentaaɗo, ina ceerndee e ruttitagol, kadi winndannde wallidiiɗo oo tigi ina ƴettitee hade huunde fof siinceede.

  5. 5

    Aɗa nelda kaalis

    Heɓooɓe ina ƴeewndee, neldugol ɓurngol keerol maa ina fada jaɓoowo ɗiɗmo e daawal anndinagol ɓeydaangal, nokkuuji ɗo kaalis fahata ina ndaree caggal jaɓgol, kadi dartinooɓe laawol ina dartina laawol lo'ungol.

  6. 6

    Aɗa yi'a fof

    Naatgol dashboard caggal anndinagol daawe ɗiɗi, keɓe ceerndaaɗe e kala njulaaku e kisal e tolno diidol, webhooks siifaaɗi fayde e sistemaaji maa, e doggol audit ngol waawaa waylireede.

Ndeenka luggiɗka, tolnooji nayi

Kala tolno ina sikka wonde tolno dow mum ina waawi ronkude. Ɗaɓɓitannde ina foti rewde e nayi ɗii fof hade nde meemde kaalis.

  1. 01Edge oo
    • Cloudflare e AWS CloudFront
    • TLS e kala jokkondiral
    • HTTPS waɗɗinaa e HSTS
    • Ndeenka naatgol iwdi, alaa mooftirde udditiinde
    • Koye wanngorde tiiɗɗe
    • Doggi naatgol danndaaɗi ñalɗi 400
  2. 02Aplikasiyon
    • Coktirɗe API suuɗaaɗe e hash SHA-256
    • Keeri ɗaɓɓitanɗe e kala coktirgal e kala IP
    • Idempotency e kala noddaandu kaalis
    • Reenoowo keɓe karta e naatirde
    • Webhooks siifaaɗi, ndeenaaɗi e ruttitagol
    • Sandbox ceerndaaɗo e wallidiiɓe goonga
  3. 03Keɓe
    • Kisal e tolno diidol e kala tabal
    • Kriptugol AES-256 tuma nde danndaa
    • Tabe keɓe cuuɗiiɗe ɗe hay gooto naatataa
    • Doggol audit ɓeydugol tan
    • Danndugol duuɓi jeeɗiɗi
    • Mooftirde kaayitaaji suuɗiinde, ceŋorɗe sekonde 300
  4. 04Kaalis
    • Deftere hisaabu laabi ɗiɗi e cate ɓurɗe famɗude
    • Waɗɗingol winndannde fotondirnde
    • Jaɓgol yimɓe ɗiɗo e daawal anndinagol ɓeydaangal
    • Butoŋaaji dartingol e dartinooɓe laawol
    • Ƴeewndagol float e kala wallet
    • Reenoowo hawrondiral jemma

Kriptugol tuma nde yahata e tuma nde danndaa

  • TLS e kala jokkondiral: wanngorɗe, API, webhooks e ceŋorɗe wallidiiɓe. HTTPS waɗɗinaa e kala domen Capay Global e HTTP Strict Transport Security.
  • Kriptugol AES-256 tuma nde danndaa ngam baasuuji keɓe e mooftirde fiilde, toppitaa e toppitagol coktirɗe tuugingol e kaɓirɗe wallidiiɓe infrastructure amen.
  • Keɓe cuuɗiiɗe (anndinirɗe wallidiiɓe, cuuɗi webhooks, coktirɗe idempotency) ina ngoni e tabe ɗe hay gooto naatataa ɗe hay sifa aplikasiyon waawaa janngude; ina momtee e kala doggol e kala diidol audit.
  • Kaayitaaji ƴeewtagol ina mooftee e mooftirde suuɗiinde, keeraande e dosiyee njulaaku ngu tigi, kadi ina udditee tan rewrude e ceŋorɗe siifaaɗe sekonde 300.

PCI DSS: sistem mo alaa keɓe jom karta

  • Min keɓataa, min ndanndataa, min ngollataa walla min neldataa abadaa limoore karta walla CVV. Reenoowo naatirde ina sala keɓe nanndude e karta e kala ɓanndu API kadi trigger baas keɓe ina sala ɗe e heɓgol njoɓɗi, neldugol kaalis e artirgol kaalis.
  • Njoɓɗi karta, ɗo ɗe ngokkaa, ina ngolla e kelle jogaaɗe nder keerol PCI DSS wallidiiɓe amen; Capay Global ina toppitoo tan referansaaji suuɗaaɗi.
  • Kartaaji wirtuwel ina njaltinee rewrude e wallidiiɗo jogiiɗo yamiroore; limoore karta timmunde danndetaake abadaa e sistemaaji amen.

Nuunɗal kaalis

  • Deftere hisaabu laabi ɗiɗi e cate ɓurɗe famɗude: kala dillugol ko winndannde fotondirnde e referans keeriingal, kadi trigger baas keɓe ina sala kala winndannde nde fotondiraani.
  • Idempotency e kala noddaandu kaalis: diidi reserwe adanɗe, referansaaji winndannde keeriiɗi e coktirgal gootal neldaangal wallidiiɗo, mbele etagol goɗngol waawaa abadaa ƴettude walla yoɓde laabi ɗiɗi.
  • Jaɓgol yimɓe ɗiɗo e neldugol kaalis, waylooji e baɗtugol kaalis, e daawal anndinagol ɓeydaangal ngam jaɓoowo oo.
  • Butoŋaaji dartingol e kala naatirde, dartinooɓe laawol e ronkere neldugol, ƴeewndagol float e kala wallet e reenoowo deftere jemma hawrondinoowo defte.
  • Sandbox oo waawaa abadaa yettaade wallidiiɗo goonga.

Innde e naatgol

  • Anndinagol daawe ɗiɗi (TOTP) ngam julaaɓe e gollooɓe; damuɗe ina uddoo so ronkii, ngudditataako abadaa.
  • Kisal e tolno diidol e kala tabal: njulaaku ina waawi janngude tan diidi mum, waɗɗinaa e baas keɓe, wonaa e kod aplikasiyon.
  • Yamirooje tuugiiɗe e sifa golle ngam goomu maa (jeyɗo, kaalis, karallo, ballal) e ngam goomu amen; kala golle teeŋtunde ina ƴeewta yamiroore nde adii.
  • Politik finnde e ƴeewndagol finnde saakitaaɗe, kodaaji laawol gootol daɓɓi, naatgol keeraangol, e sesiyonaaji ɗe lannata tuma yaltugol e cache momtaaɗe.
  • Noddaango admin, waylugol sifa golle e dartingol ina ƴeewtee kadi ina ngolla e sahaa gooto.

Kisal API e webhooks

  • Coktirɗe API suuɗaaɗe e hash SHA-256; fuɗɗoode tan danndetee kadi coktirgal ngal ina hollee laawol gootol tuma sosgol.
  • Keeri ɗaɓɓitanɗe e kala coktirgal e kala IP, doggi IP jaɓaaɗe so aɗa yiɗi, keeri kaalis ñalawma kala, keeri leydi e laawol, e waylugol e dobannde wootere.
  • Baawal kaalis goonga e coktirɗe agent ina udditee e keerol mum tan e caggal anndinagol daawe ɗiɗi.
  • Webhooks yaltooji ina siifee e HMAC e waktuuji e ndeenka ruttitagol; callbacks wallidiiɓe naatooji ina teeŋtinee e ɓanndu keccu e sahaa ndeentaaɗo, kadi goonga wallidiiɗo ina ƴettitee hade ngonka kala waylaade.

Eɓɓaande ɗoftagol laawol

  • KYB hade naatde e golle: kaayitaaji winndagol, jeyɓe goonga, ƴeewndagol kuuge e jaɓgol yimɓe ɗiɗo.
  • Reenugol AML duumingol e laabi laaɓɗi ngam feewnude, hesɗitingol KYB sahaa e sahaa e tolno musiiba e kala njulaaku.
  • Binndi kaalis e doggi audit danndaaɗi duuɓi jeeɗiɗi e tabe ɓeydugol tan ɗe kaɗata waylugol e momtugol e tolno baas keɓe.
  • Ndeenkaaji hawrondiraaɗi e Trust Services Criteria SOC 1 e SOC 2 (kisal, heɓaade, suuɗaare, nuunɗal gollal) e ngonka PCI DSS alaa keɓe jom karta.
  • Ƴeewndo kisal timmungo e sistem gonɗo e golle (baas keɓe, anndinagol, jokkirgol web, API, laabi kaalis, wanngorde) timmii e oktoobar 2026, kala ko tawaa feewnaama walla rokkaama jom mum.

Infrastructure e golle

  • Lowe e aplikasiyonaaji jokkiraaɗi AWS CloudFront caggal Cloudflare, e ndeenka naatgol iwdi kadi kala mooftirde ina suuɗii.
  • Koye wanngorde tiiɗɗe: frame haɗaama, Content-Security-Policy frame-ancestors none, Permissions-Policy e seerndugol cross-origin opener.
  • Doggi naatgol edge danndaaɗi ñalɗi 400 ngam wiɗto; id ɗaɓɓitannde, IP e user agent e kala noddaandu API.
  • Audit dependances e kala build, hello ngonka ngenndiwo, ƴeewndagol cellal e kala wallidiiɗo e tintine musibbaaji fayde e goomu golle.

Ɗo keɓe maa ngonata

Jaabooje laaɓɗe e naamne residency ɗe ngonata e kala security review.

  • Database platform e dokimaaji

    Ina hosta e Amazon Web Services rewrude e database provider amen, kriptaama so danndaa e AES-256.

  • Websites, dashboard e checkout

    Ina rokkee aduna fof gila e edge network Amazon CloudFront caggal Cloudflare, ngam hello ɗe uddita ɓadii kliyaa maa. Alaa winndannde kliyaa danndetee e edge.

  • Ɓeynguureeji yoɓgol

    Keɓe ɗe njiɗaa ngam timminde yoɓgol ina ndokkee tan ɓeynguureeji mobile-money, banke e karte jogiiɗi lisaas ɗi ngolliri ɗum.

  • Naatgol goomu amen

    Golloowe yamiraaɓe tan waawi udditde winndannde kliyaa, rewrude e yamiroore ɗowiraande golle, kala gollal baawɗe winndetee e audit log mo waawaa waylude.

So huunde bonii

No min ngollirta security incident, gila e jeertine adiinde haa e ƴeewndo sakkitorde.

  1. 01

    Yiytude

    Jeertine ɗe kanje e ronkaaji provider, wallet float, ledger ndesindiraaki e golle ɗe wonaa ɗe woowaaɗe ina njottoo goomu operations amen.

  2. 02

    Haɗde

    Kill switches e circuit breakers ina ndartina laawol yoɓgol meeɗaangol e sekonde seeɗa, keys walla sessions feeñuɗi ina mbaawi haɗeede ɗoon e ɗoon.

  3. 03

    Kabarde

    Kliyaa meeɗaaɓe ina nana ko waɗi, ko ɗum firti e maɓɓe e ko min ngonata e waɗde, tawa min neeɓnaani, e nder sahaa ko laawol ɗaɓɓi.

  4. 04

    Ekkitaade

    Kala incident mawngo ina sakkitoo e ƴeewndo windaaɗo e safaaje haɗooje ɗum artude.

Paɗɗo amen winndaaɗo jaabtagol kuuje ina waɗa tolnooji tiiɗnaare, golle, saaɗi jaabtagol e humpitgol kiliyaaɓe. Kawtirɓe e kiliyaaɓe mawɓe ina mbaawi ɗaɓɓaade natal e les NDA.

Ko min naamnii ma

Kisal ko kaaɗdal. Tati ngoowaaji ina mooftira konte maa tiiɗnde wano sistem gonɗo les mum.

  1. 1Huɓɓu anndinagol daawe ɗiɗi ngam kala goomuujo, fuɗɗoraade e jeyɓe e kaalis.
  2. 2Mooftu coktirɗe API e kuutorgal mooftugol keɓe cuuɗiiɗe, wonaa e kod abadaa, kadi waylu ɗe so gollooɓe mbayliima.
  3. 3Teel keerol jaɓgol neldugol kaalis e doggol IP jaɓaaɗe e coktirɗe production maa.

Politikaaji e kaayitaaji

Kaayitaaji gonɗi caggal ndeenkaaji, njaltinaaɗi kadi kesɗitinaaɗi.

Naamne kisal, jaabaaɗe

Keɓe am ina kriptaa?

Eey. Kala jokkondiral e Capay Global ina huutoroo TLS, kadi keɓe ina kriptee e AES-256 tuma nde danndaa. Keɓe cuuɗiiɗe ina mooftee e tabe uddaaɗe kadi peeñataa abadaa e doggi.

Oɗon ndannda limooje karta?

Alaa. Capay Global heɓataa, danndataa, gollataa walla neldataa abadaa limoore karta walla CVV. Keɓe karta ina calee e keerol API e nder baas keɓe, kadi njoɓɗi karta ina ngolla tan e kelle jogaaɗe nder keerol PCI DSS wallidiiɓe amen.

Oɗon ɗoftii SOC 2 e PCI DSS?

Yuɓɓo ndeenka amen ina hawrondiraa e Trust Services Criteria SOC 1 e SOC 2, kadi sistem oo ina golla e ngonka PCI DSS alaa keɓe jom karta. Wallidiiɓe e kiliyaaji mawɗi ina mbaawi naamnaade ƴeewndo kisal, tabal ndeenkaaji e seedeeji wallidiiɓe amen.

Neɗɗo e Capay Global ina waawi dillinde kaalis am?

Hay neɗɗo gooto waawaa. Neldugol ɓurngol keerol maa ina soklaa jaɓoowo ɗiɗmo e bannge maa, golle teeŋtuɗe e bannge amen ina soklaa yamiroore e sabaabu binndaaɗo kadi ina ngacca winndannde audit nde waawaa waylireede abadaa, kadi deftere hisaabu ina sala kala dillugol ngol fotondiraani.

Ko honno mi habrirta lo'iire kisal?

Winndu goomu ballal amen e keɓe fof; kala habraango ina jaɓee kadi ina toppitee law. Min naamnii habrugol e nuunɗal kadi min tokkataa abadaa wiɗtooɓe ɓernde laaɓnde.

On ngaɗii penetration test?

Min njokki yuɓɓo tiiɗɗo: adan ƴeewndo timmuɗo yuɓɓo (timmii lewru Oktoobar 2026), caggal ɗuum feewnitaaɗe, caggal ɗuum ƴeewndo naatgol ummoraaɗo e goomu jeyiiɗo hoore mum, caggal ɗuum ƴeewndo ɗiɗmo ngam teeŋtinde wonde feewnitaaɗe ɗee ndarii. Kawtirɓe e kiliyaaɓe mawɓe ina mbaawi ɗaɓɓaade raɓɓinaango ƴeewndo amen e, so bayyinaama, raɓɓinaango ƴeewndo naatgol e les NDA.

Hol ɗo keɓe am ndanndetee?

Database platform e dokimaaji ina hosta e Amazon Web Services, kriptaama so danndaa e AES-256. Websites e hello checkout ina ndokkee gila e edge network aduna danndataa winndannde kliyaa.

Habrugol e nuunɗal

Wiɗtooɓe kisal ina njaɓɓaa. So aɗa sikka a yiytii lo'iire kisal e Capay Global, habru min ɗum e suuɗaare kadi rokku min sahaa potɗo ngam feewnude ɗum. Min njaɓa kala habraango kadi min tokkataa abadaa wiɗto waɗaango e ɓernde laaɓnde.

  1. 1Neldu keɓe ɗee goomu amen: ko njiyɗaa, ɗo, e no ɗum waɗirtee kadi.
  2. 2Min teeŋtina min keɓii ɗum, min kabarda maa haa ɗum safree.
  3. 3Rokku min sahaa poto ngam safrude ɗum hade maa feññinde ɗum.
Habru lo'iire kisal

Ina a neldude min security questionnaire?

Neldu ɗum hade ƴellitaare maa, wonaa caggal. Min njaabotoo ɗum e hello ngoo e scorecard ngoo, e les NDA, peeñcingol kisal amen cuuɗingol, control matrix e attestations providers amen.

Fuɗɗo heɓde njoɓɗi nder Afirik hannde

Sos konte meere, mah e sandbox oo, naat e golle ɓaawo ƴeewtagol.

Sos konte

Habru min laabi maa e keeweendi njeeygu maa sahaa kala.