Security and sovereignty

A core system is judged by what it prevents. These guarantees are part of the foundation, not an option.

Fine-grained permissions

Every action requires an explicit permission, granted by the institution. No implicit rights in the code.

Audit trail

Who did what, when and on which data: every write is recorded.

Approvals

Sensitive operations go through an approval workflow, with two or more people.

Central identity

Single sign-on, accounts managed by the institution, connection to your directory.

Data isolation

Each institution's data is partitioned, on your infrastructure or ours.

Contained agents

Agents work on the code, never on your production data.

Deployed where you decide

On your infrastructure, in your data center, or in the cloud of your choice. The same product, the same version, with no imposed third-party service.

Compliance

Our products are designed for the requirements of regulated sectors. Certification work is carried out with our founding partners.

Law 09-08 and CNDPPCI DSS target for Nafura CardsBank Al-Maghrib requirements for Nafura Core

Your security team has questions

We answer your questionnaires and present the architecture to your CISO.