Back to Home
Security & Licensing

Regulatory Compliance & Security

Operating under strict financial regulatory oversight and enterprise security standards

CAC Regulatory Alignment

Operating in accordance with the Corporate Affairs Commission (CAC) and relevant financial regulations.

PCI-DSS Compliant

Certified Payment Card Industry Data Security Standard Level 1 compliance for card data processing.

NDPR & NDPA Certified

Audited for compliance with the Nigeria Data Protection Act 2023 for customer data privacy.

1. Institutional Partnerships

Wicomi partners with licensed Commercial Banks, Microfinance Banks, Switching Companies, and Payment Terminal Service Providers (PTSPs) in Nigeria and internationally to guarantee 99.9% payment reliability and instant settlements.

2. Technical & Infrastructure Security

Our security architecture adheres to strict zero-trust engineering principles:

  • Cryptographic Webhook Signatures: Every incoming payment webhook is signed using HMAC SHA256 signatures to eliminate spoofing.
  • IP Whitelisting & API Rate Limiting: Merchants can restrict API key usage to specific production IP addresses.
  • Transaction PIN & 2FA: Sensitive operations require cryptographic transfer PIN verification and multi-factor authentication.
  • Automated Threat Prevention: Continuous vulnerability scanning, DDoS mitigation, and intrusion prevention.

3. Consumer Protection & Dispute Resolution

Wicomi enforces transparent chargeback processing and transaction dispute resolution mechanisms adhering to NIBSS and card scheme (Visa/Mastercard) operating regulations.