Aligned

CBN regulatory compliance

Qoyla operates within the framework set by the Central Bank of Nigeria. The cleanest way we stay compliant is structural: we never hold or move customer funds. Your bank does that, under its own licence, only when you approve.

Updated 1 May 2026 Regulator: Central Bank of Nigeria

01Our regulatory model

Qoyla is a financial advisor and technology provider, not a deposit-taking institution. We do not hold customer balances or initiate transfers on our own account.

Funds stay with licensed institutions. Money never sits with Qoyla. Where an action moves money, your bank, which holds the relevant CBN licence, executes it after your explicit approval. This keeps the regulated activity where it belongs.

02Open Banking

We connect to your accounts through the CBN's Open Banking framework, using licensed providers and consent-based, read-only access. You decide which accounts to connect, you can see what is shared, and you can revoke access at any time.

  • Access is granted by you, scoped, and time-bound.
  • Connections are read-only by default, we read to advise, we do not write.
  • You can disconnect any institution instantly from settings.

03Consumer protection

The CBN's consumer-protection expectations, fair treatment, transparency, disclosure and effective complaint handling, are core to how Qoyla behaves.

TransparencyEvery recommendation carries its reason, and every figure traces to a source.
ConsentNothing happens without your explicit, reversible approval.
DisclosureFees, limits and what Qoyla is not, are stated plainly in our Terms.
RedressA clear complaints path, with timelines, is available to every user.

04AML / CFT

We support anti-money-laundering and combating-the-financing-of-terrorism obligations in line with CBN and NFIU guidance. Identity verification (KYC) is performed through licensed providers, and we cooperate with our financial-institution partners on monitoring and lawful reporting. Our Acceptable use policy prohibits any use of Qoyla for unlawful financial activity.

05Data & residency

In line with CBN and NDPR expectations, Nigerian customer data is hosted in-region where required, and protected by the controls in our Security overview. Our data-protection obligations are detailed under NDPR compliance.

06Working with licensed partners

When Qoyla is offered through a bank or other CBN-licensed institution, that partner remains responsible for the regulated activity, and we provide the technology and advisory layer under a clear contract, including a DPA. This division keeps roles, and accountability, clear.

07Contact

compliance@qoyla.ai
For regulatory and partnership questions, or to request our compliance pack.