Security & Data Protection
Your trust is our most important asset. We are committed to protecting your data with enterprise-grade security.
Data Encryption
Your data is encrypted both in transit (using TLS 1.2+) and at rest (using AES-256), ensuring it remains private and secure at all times.
Secure Infrastructure
Our services are hosted on leading cloud platforms that comply with the highest standards of physical and network security.
Compliance & Audits
We adhere to industry best practices and undergo regular third-party audits and penetration tests to validate our security posture.
Vulnerability Management
We continuously scan for vulnerabilities and have a responsible disclosure program to work with the security community.
1. Data Encryption
Encryption in Transit: All data exchanged with our services over the internet is encrypted using Transport Layer Security (TLS) 1.2 or higher. This protects your information from being intercepted by unauthorized parties.
Encryption at Rest: All of your data, including personal information, documents, and database entries, is encrypted at rest using the industry-standard AES-256 algorithm. This ensures that even in the unlikely event of a physical breach, your data remains unreadable.
2. Application & Infrastructure Security
We follow secure software development lifecycle (SDLC) practices aligned with industry standards like the OWASP Top 10. Our infrastructure is protected by firewalls, intrusion detection systems, and regular monitoring. Access to our production environment is strictly limited to authorized personnel and requires multi-factor authentication (MFA).
3. Responsible Disclosure
We value the work of security researchers and have a responsible disclosure program. If you believe you have found a security vulnerability in our services, please let us know. We are committed to working with you to understand and resolve the issue promptly.
Reporting a Vulnerability
Please email us at security@daaboinsure.com with a detailed description of the issue. We ask that you do not publicly disclose the vulnerability until we have had a chance to address it.
4. Compliance
Daabo is committed to complying with applicable data protection regulations, such as the Nigeria Data Protection Regulation (NDPR) and other relevant local laws. We regularly review our policies and procedures to ensure they meet or exceed these legal requirements.
5. Contact Us
If you have any questions or concerns about our security practices, please do not hesitate to contact us.
Email: security@daaboinsure.com