Dalipay follows a security-first, compliance-led approach — from encryption and access controls to KYC/AML onboarding and PCI DSS-compliant partners.Dalipay hufuata mkabala unaotanguliza usalama na uzingatiaji — kuanzia usimbaji na udhibiti wa ufikiaji hadi usajili wa KYC/AML na washirika wanaozingatia PCI DSS.
Data is encrypted in transit and at rest.Data husimbwa wakati wa usafirishaji na wakati wa kuhifadhiwa.
Tokenization means Dalipay does not store full card data.Tokenization inamaanisha Dalipay haihifadhi data kamili ya kadi.
Role-based access and least privilege, with strong authentication.Ufikiaji wa kulingana na wajibu na haki ndogo, na uthibitisho imara.
Audit trails, logging, and continuous monitoring across systems.Nyayo za ukaguzi, kumbukumbu, na ufuatiliaji endelevu wa mifumo.
Card handling relies on PCI DSS-compliant aggregator partners.Ushughulikiaji wa kadi hutegemea washirika wanaozingatia PCI DSS.
Systems are patched and reviewed; issues remediated by risk.Mifumo hurekebishwa na kukaguliwa; matatizo hutatuliwa kwa hatari.
Every merchant is identified and verified before activation, with risk-based due diligence and ongoing monitoring — protecting merchants, their customers, and the wider ecosystem.Kila mfanyabiashara hutambuliwa na kuthibitishwa kabla ya kuwashwa, kwa uangalizi unaozingatia hatari na ufuatiliaji endelevu — kulinda wafanyabiashara, wateja wao, na mfumo mzima.
| Risk levelKiwango cha hatari | Due diligenceUangalizi |
|---|---|
| LowChini | Standard CDDCDD ya kawaida |
| MediumWastani | Enhanced checks & closer monitoringUkaguzi ulioimarishwa & ufuatiliaji wa karibu |
| HighJuu | EDD & senior approvalEDD & idhini ya juu |
| Monthly uptime targetLengo la upatikanaji kwa mwezi | 99.5% |
| MonitoringUfuatiliaji | 24/7 automatedKiotomatiki 24/7 |
| Planned maintenanceMatengenezo yaliyopangwa | Notified in advanceHujulishwa mapema |
Security incidents are handled under an Incident Response Plan covering containment, investigation, and notification, backed by disaster recovery and business continuity planning.Matukio ya usalama hushughulikiwa chini ya Mpango wa Kukabiliana na Matukio unaohusu kudhibiti, kuchunguza, na kutoa taarifa, ukiungwa mkono na mipango ya kurejesha maafa na mwendelezo wa biashara.