Almawarid protects the business data of Algerian companies: SSL/TLS encrypted connections, encryption of sensitive data, multi-factor authentication and CIB / Edahabia online card payment approved by SATIM. The SOC 2 and ISO/IEC 27001 programme has started. This page shows the status of each measure and changes with every step forward.
| Measure | Status |
|---|---|
SSL/TLS encrypted connection HTTPS enforced on every page, HSTS, secure session cookies. |
Done |
Encryption of sensitive data Contact details and tax IDs (NIF, NIS, RC) of customers and suppliers, national ID and passport numbers, API keys encrypted in the database; encrypted backups. |
Done |
Multi-factor authentication (MFA) For every account: authenticator app and 10 recovery codes. |
Done |
SATIM certification Online card payment with CIB and Edahabia: integration approved by SATIM. |
Done |
Multi-site backups Encrypted copies spread across several data centres. |
In progress |
Aikido Security Aikido Security platform. |
In progress
70 % |
SOC 2 report Independent audit of the security, availability and confidentiality of the service. |
Programme started |
ISO/IEC 27001 certification International standard for information security management. |
Programme started |
Yes. Traffic goes through an SSL/TLS connection enforced on every page. In the database, sensitive data is encrypted: contact details and tax IDs (NIF, NIS, RC) of customers and suppliers, national ID and passport numbers, API keys. Backups are encrypted too.
From “My account” or Settings › Security: an authenticator app (Google Authenticator, Microsoft Authenticator…) and 10 recovery codes. It is available for every account.
CIB and Edahabia card payments go through the SATIM gateway, which approved our integration during its certification. Card details are entered on SATIM's page: Almawarid never receives them.
It has started for both. ISO/IEC 27001 is the international standard for information security management, certified by an accredited body; SOC 2 is an audit report issued by an independent firm. The status of each step is published on this page.
Found a vulnerability? Write to us at contact@almawarid.app. A good-faith report, without exploitation or public disclosure, will never be prosecuted; we reply within 72 hours.
Banks, groups, subsidiaries of foreign companies: send us your security questionnaire or compliance requirements. Our team answers it and walks you through our measures during a demo.
Request a demo Message us on WhatsApp