Bank-Grade Security
Your money and data are protected by multiple layers of enterprise-grade security.
End-to-End Encryption
All data is encrypted with AES-256-GCM. Phone numbers are encrypted at rest with device-specific keys. Transaction data is encrypted in transit with TLS 1.3.
JaalleID Verification
5-tier identity system: L0 (Phone), L1 (Standard), L2 (Verified), L3 (Sovereign), L4 (Bank-Grade). Each level unlocks higher transaction limits and additional features.
Biometric Authentication
Face ID, Touch ID, and fingerprint authentication on mobile apps. StrongBox ECDSA on Android, Secure Enclave on iOS for cryptographic key storage.
Escrow Protection
Marketplace transactions are held in atomic escrow with dual-confirm release. Tiered fees based on transaction amount. Automatic release via pg_cron after timeout.
Secure Infrastructure
Hosted on Supabase with PostgreSQL RLS (Row Level Security). All database operations use atomic RPC functions. Rate limited to 5 requests per minute for sensitive operations.
API Security
Merchant API uses HMAC-SHA256 signed requests. API keys support granular permissions and can be rotated or revoked instantly.
SIPS/SOMQR Compliance
Ready for integration with Somalia's national instant payment system (SIPS) and SOMQR standard launched by the Central Bank of Somalia in January 2025.
Immutable Audit Log
Every financial operation is recorded in an immutable audit log. Full transaction history with timestamps, IP addresses, and device fingerprints.
Identity Verification Tiers
Phone
Phone number verification only
$20/day
Standard
Name, email, basic profile
$200/day
Verified
Government ID + selfie match
$2,000/day
Sovereign
Biometric liveness + address proof
$10,000/day
Bank-Grade
Full KYC/AML with NIN verification
$50,000/day
Bug Bounty Program
Found a security vulnerability? Report it responsibly and earn up to $5,000. Contact security@jaallepay.com.