Security & Compliance
🔐 Data Security
- Encryption: TLS 1.2+ in transit, AES-256 at rest.
- Passwords: Bcrypt/Argon2 hashing.
- Access Control: RBAC (Role-Based Access Control) enforced at middleware level.
🛡️ Compliance
- GDPR/NDPR: User right to delete data.
- Payments: PCI-DSS compliant payment gateways (Paystack/Flutterwave).