Trust & Compliance Center
Qoyla never holds or moves your money, it stays inside your bank. We read, reason, propose, and keep a clear record, and you approve every action. Here is exactly how we protect your data and meet the rules that govern it.
The promises behind every screen
Qoyla holds no balances and moves no funds on its own. It connects read-only and proposes, your bank executes only what you approve.
Everything is encrypted in transit and at rest. Bank credentials are tokenised, never stored by us, and never reused.
The Proof Record logs the reason, the data, the action and the outcome for everything Qoyla does, so nothing is a black box.
You can see, export or delete it whenever you like. We sell nothing and share only what the law or your explicit consent requires.
Everything in one place
Policies, agreements and live evidence. If you are doing vendor due diligence, start with Security and Certifications.
Security & compliance
Our architecture, encryption, access controls, monitoring and the read-only model that keeps funds in your bank.
ReadWhere we are in each audit, what is covered, and how to request reports once they are available.
View statusFound something? Here is how to report it safely, what is in scope, and our bug bounty rewards.
Report a findingPrivacy & your rights
What we collect, why, how long we keep it, and the choices you have. In plain language first, detail below.
ReadAccess, correct, export or delete your data. Submit a request and we will respond within the legal window.
Make a requestThe cookies we use, what each one does, and how to change your preferences at any time.
ReadAgreements & regional rules
The agreement between you and Qoyla, what we provide, what we ask of you, and the limits of both.
ReadThe handful of things you agree not to do, so Qoyla stays safe and fair for everyone.
ReadFor institutions and partners. The DPA governs how we process personal data on your behalf. Sign online.
Review & signThe vendors we rely on, what each handles, where they sit, and how to subscribe to change notices.
See the listHow we meet Nigeria's Data Protection Regulation, including lawful basis, DPO contact and your rights.
ReadHow Qoyla operates within Central Bank of Nigeria guidance on Open Banking, consumer protection and AML.
ReadLive evidence
Due diligence?
Security questionnaires, audit reports, penetration test summaries and contracts. Our security and compliance team will get you what you need.