Trust & security
The boring details — done well.
Involums handles invoices that the Nigeria Revenue Service has to accept. That requires discipline — accreditation, encryption, retention, audit trails. We do all of it. This page is the receipts.
Data residency
All customer data — invoices, buyer records, audit logs — is stored in Nigerian data centres (Lagos primary, Abuja DR). Backups never leave the country.
Encryption
TLS 1.3 in transit. AES-256 at rest. Sensitive fields (payment terms note, invoice note) carry an additional field-level encryption envelope.
Audit logging
Every action — by users, by ERP connectors, by support staff — is logged immutably with WAT timestamps to the millisecond. Retained for 7 years per NRS requirement.
Penetration testing
External pen tests every 6 months by Bureau Veritas. The latest report is available under NDA from your account manager.
Incident response
24/7 on-call rotation. Customer-impacting incidents are reported on status.involums.com within 15 minutes of detection.
Subprocessors
We use Paystack, Stripe, and AWS Africa (Cape Town). Full list, updated when it changes, at involums.com/subprocessors.