🔒 Updated on 12/10/2026

Almawarid security and compliance

In short

Almawarid protects the business data of Algerian companies: SSL/TLS encrypted connections, encryption of sensitive data, multi-factor authentication and CIB / Edahabia online card payment approved by SATIM. The SOC 2 and ISO/IEC 27001 programme has started. This page shows the status of each measure and changes with every step forward.

Where we stand

MeasureStatus
SSL/TLS encrypted connection
HTTPS enforced on every page, HSTS, secure session cookies.
Done
Encryption of sensitive data
Contact details and tax IDs (NIF, NIS, RC) of customers and suppliers, national ID and passport numbers, API keys encrypted in the database; encrypted backups.
Done
Multi-factor authentication (MFA)
For every account: authenticator app and 10 recovery codes.
Done
SATIM certification
Online card payment with CIB and Edahabia: integration approved by SATIM.
Done
Multi-site backups
Encrypted copies spread across several data centres.
In progress
Aikido Security
Aikido Security platform.
In progress
70 %
SOC 2 report
Independent audit of the security, availability and confidentiality of the service.
Programme started
ISO/IEC 27001 certification
International standard for information security management.
Programme started

Day to day

  • Encrypted database backup every night, with an off-site copy.
  • Log of every sign-in attempt, successful or refused.
  • Every time support steps into a customer account, it is logged: who, and when.
  • Written disaster recovery plan, kept up to date.
  • Algerian law 18-07: record of processing activities, security and confidentiality charter for the whole team, data-breach notification procedure.

Frequently asked questions

Is the data encrypted?

Yes. Traffic goes through an SSL/TLS connection enforced on every page. In the database, sensitive data is encrypted: contact details and tax IDs (NIF, NIS, RC) of customers and suppliers, national ID and passport numbers, API keys. Backups are encrypted too.

How do I turn on multi-factor authentication?

From “My account” or Settings › Security: an authenticator app (Google Authenticator, Microsoft Authenticator…) and 10 recovery codes. It is available for every account.

Is online payment secure?

CIB and Edahabia card payments go through the SATIM gateway, which approved our integration during its certification. Card details are entered on SATIM's page: Almawarid never receives them.

Where does the SOC 2 and ISO 27001 programme stand?

It has started for both. ISO/IEC 27001 is the international standard for information security management, certified by an accredited body; SOC 2 is an audit report issued by an independent firm. The status of each step is published on this page.

Report a vulnerability

Found a vulnerability? Write to us at contact@almawarid.app. A good-faith report, without exploitation or public disclosure, will never be prosecuted; we reply within 72 hours.

contact@almawarid.app · security.txt

Have a security questionnaire to fill in?

Banks, groups, subsidiaries of foreign companies: send us your security questionnaire or compliance requirements. Our team answers it and walks you through our measures during a demo.

Request a demo Message us on WhatsApp
This page is also available in Françaisالعربية · Updated on 12/10/2026