Folio · 05 · Safeguards
Security isn’t a feature.
It’s the foundation.
Vetting data is among the most sensitive information a platform can hold. Every record on VettingMate is encrypted, access is permissioned, and every action leaves an audit trail.
Controls
Eight controls, always on.
Encryption everywhere
Data encrypted in transit and at rest, with secure document storage for all uploaded evidence and identity documents.
Multi-factor authentication
Secure sign-in with MFA and role-based permissions across every account type, individual, employer, landlord and admin.
Consent management
Granular, auditable consent records. Individuals control who sees what, when, and can revoke access at any time.
Retention & deletion
Configurable data-retention controls with documented, verifiable deletion processes when records reach end of life.
Full audit logging
Every access, change, share and correction is logged, a complete audit trail available to regulators and users.
Role-based access
Permissions scoped by role and organisation, so users only ever see the records their role requires.
Secure API integrations
Third-party providers connect through authenticated, encrypted API channels with strict access scoping.
Data access management
Formal processes for granting, reviewing and revoking internal access to personal data.
Privacy by default
Privacy and data-protection controls are switched on by default, no opt-ins buried in settings.
Compliance
Built to the letter of the law.
NDPA 2023
Lawful basis, purpose limitation, data minimisation and subject rights are engineered into every workflow.
REGULATIONNigeria Data Protection Act
Full alignment with the NDPA 2023, including sensitive-data handling and NDPC registration requirements.
STATUTESubject rights
Access, rectification, erasure and portability requests handled through documented, auditable processes.
RIGHTSData lifecycle
Your data has a lifecycle.
We respect every stage.
From the moment a record is created to the day it’s deleted, every stage is governed by documented policy, no orphan data, no indefinite retention, no silent copies.
Read our data protection policy- STAGE·1Collected with explicit consentlogged
- STAGE·2Encrypted at rest & in transitalways
- STAGE·3Access scoped by roleaudited
- STAGE·4Retained per policy schedulereviewed
- STAGE·5Deleted & verified at end of lifecertified
DOCUMENTED · AUDITED · VERIFIABLE
Folio · Open a file
Start verifying today.
Create an account and run your first check in minutes, whether you're vetting a tenant, an employee, a guarantor or a business.