Trust Center

Compliance, security & consumer protection

How DeboPay protects merchants, consumers and their money — and how we align to Ethiopian regulation.

Regulatory alignment

We design around National Bank of Ethiopia (NBE) directives for payment system operators and instrument issuers, and pursue licensing on a clear roadmap.

INSA-grade security

Security headers, TLS, encryption at rest (AES-256), audit logging, and multi-factor authentication, aligned to INSA web-application security requirements.

Data privacy

Personal and KYC data is stored privately and encrypted. Access is least-privilege and fully audited.

Fraud prevention

Velocity checks, device fingerprinting, IP controls, risk scoring and configurable rewards budgets reduce abuse.

Merchant protection

Clear settlement, dispute handling, signed webhooks and idempotent APIs protect merchant revenue.

Consumer protection

Transparent fees, tiered KYC limits, and Fayda National ID verification for higher tiers.

Governance & frameworks

· Corporate governance & risk management framework

· AML / KYC policy with tiered customer due diligence

· Incident response & disaster recovery plans

· Secure SDLC & API security standards

· Data protection & retention policy

· Independent security testing (roadmap)

These documents form our internal compliance package prepared for regulatory review. Availability to partners is provided under NDA.