Security at Tulify

We take security seriously. Our platform is built with enterprise-grade security measures to protect your data and ensure compliance with global standards.

SOC 2 Type IIISO 27001GDPR CompliantHIPAA ReadyPCI DSS

Encryption

All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption. We use industry-standard cryptographic protocols to ensure your data remains secure.

Access Control

Role-based access control (RBAC) ensures that only authorized personnel can access sensitive data. Multi-factor authentication (MFA) is required for all accounts.

Monitoring & Logging

24/7 security monitoring with real-time alerts. Comprehensive audit logs track all system access and API usage for complete transparency and accountability.

Regular Audits

Annual third-party security audits and penetration testing ensure our systems meet the highest security standards. Vulnerability assessments are conducted quarterly.

Infrastructure Security

Hosted on SOC 2 certified cloud infrastructure with automatic failover, DDoS protection, and geographic redundancy to ensure 99.9% uptime.

Incident Response

Dedicated security team with 24/7 incident response capabilities. Comprehensive disaster recovery and business continuity plans are tested regularly.

Data Protection Practices

How we protect your sensitive information

Data Minimization

We only collect and retain data that is necessary for providing our services. Unnecessary data is automatically purged according to our retention policies.

Data Segregation

Customer data is logically segregated in multi-tenant environments. Enterprise customers can opt for dedicated infrastructure for complete isolation.

Backup & Recovery

Automated daily backups with point-in-time recovery. Backups are encrypted and stored in geographically distributed locations.

Secure Development

Security is integrated into our development lifecycle. All code undergoes security reviews and automated vulnerability scanning before deployment.

Regulatory Compliance

Meeting global standards for data protection and privacy

GDPR (General Data Protection Regulation)

Full compliance with EU data protection requirements, including data subject rights, consent management, and cross-border data transfer safeguards.

SOC 2 Type II

Annual SOC 2 Type II audits verify our security, availability, processing integrity, confidentiality, and privacy controls.

ISO 27001

Certified information security management system (ISMS) ensuring systematic approach to managing sensitive information.

AML/KYC Compliance

Our verification services comply with global Anti-Money Laundering (AML) and Know Your Customer (KYC) regulations.

Responsible Disclosure

Found a security vulnerability? We want to hear from you.

We appreciate the security research community's efforts in helping us maintain the security of our platform. If you discover a security vulnerability, please report it to us responsibly.

Report Security Issues:

security@tulify.com.ng

Please include detailed steps to reproduce the issue. We commit to responding within 48 hours.

We operate a bug bounty program for eligible vulnerabilities. Researchers who report valid security issues may be eligible for rewards.

Questions About Security?

Our security team is here to help answer any questions about our security practices.