Qoyla connects to your accounts read-only and moves no money on its own. That single design choice removes whole categories of risk. On top of it, we layer encryption, strict access controls and constant monitoring.
Read
We see balances and transactions, read-only.
Reason
Deterministic tools compute, the model explains.
Propose
We suggest, you approve. Nothing is automatic.
Record
Every step is sealed in your Proof Record.
How we protect data
TLS 1.2+ in transit and AES-256 at rest. Keys are managed in a dedicated key-management service and rotated on a schedule.
Account connections use tokenised, revocable open-banking links. We never see or store your online-banking credentials.
Staff get only the access their role needs, gated by SSO and hardware-backed multi-factor authentication, and every access is logged.
Centralised logging, anomaly detection and 24/7 alerting. Suspicious activity is flagged and investigated fast.
Tenants and environments are isolated. Data is backed up, encrypted, and recovery is tested, so an outage is never a loss.
Code review, automated security scanning, dependency checks and a hardened deployment pipeline are part of every release.
Tested, not just claimed
Independent penetration tests run at least annually and after major changes. Our bug bounty keeps researchers looking year-round, and we publish honest postmortems when things go wrong.
Where your data lives
Where the law requires it, your data stays in your region. Nigerian customer data is hosted in-region in line with NDPR.
A short, audited list of subprocessors, each bound by strict data terms. See the full list.
Disconnect an account or delete your data at any time. Tooling and timelines live under Your data rights.
Reach our security team for questionnaires, architecture detail, and test summaries under NDA.