Security Standards
We design payment verification infrastructure under strict isolation models to guarantee transaction data safety and ledger compliance.
Row-Level Security & Compliance
Todellaa enforces isolation at the database layer. PostgreSQL Row-Level Security (RLS) binds every transactional operation to specific tenant identifiers. This means your school fees logs, invoice statements, and payment reconciliation screens are fully insulated.
Additionally, statement caches for uploaded files (Excel, CSV, and MT940 sheets) are stored in-memory during reconciliation cycles and are automatically destroyed from system disks within 24 hours of matching.
Bank-Grade Encryption
All client credentials, integration tokens, and bank API streams are encrypted in transit using TLS 1.3 and at rest with AES-256.
Ledger Database Isolation
PostgreSQL Row-Level Security (RLS) ensures that multi-tenant billing logs remain strictly isolated. Cross-tenant queries are impossible at the database engine layer.
Cryptographic Keys & Token Storage
API credentials used for Mobile Money wallets and Paystack gateway webhooks are stored in hardware security modules (HSM) with restricted plaintext exposure.
Immutable Auditing Logs
Every manual mismatch verification state, CSV file export, and admin authorization generates static cryptographic logs for external audits.