How we protect your site and your records.

Your workspace is separate

Each customer’s site and records live in a database schema of their own. A query in one workspace cannot read another’s records.

Signing in

Passwords are stored only as bcrypt hashes, never as text. Repeated sign-in attempts are rate-limited. Sessions use cookies that page scripts cannot read, sent only over HTTPS.

Who can see what

Each person is given a role, and roles decide which menus, records and actions they can use. Someone who keeps the site current does not see the shop’s orders unless you let them.

After hand-over, a designer can lock parts of a page so that a quick edit cannot break the layout.

Card and mobile money payments

Payments are taken by the payment provider you connect, such as Paystack. Card numbers go to the provider, not to the site.

The audit trail

The product records who created, changed or deleted a record, and when. Every published version of a page is kept, so a change can be undone.

In transit and at rest

Every page and API call is served over HTTPS, with a strict content security policy. The credentials you connect for email, SMS, WhatsApp, social networks and payment providers are encrypted before they are stored.

Visitors to your site

The site counts its own visits without cookies and without storing anything that identifies a visitor: no IP address, no browser details. It needs no cookie banner for its figures.

Backups

The database is backed up every night. Encrypted copies are kept off the server, 30 daily and 12 monthly, and a restore from them is tested every month. See Uptime for more.

Our staff

Your designer works in your workspace while building the site and for the changes you ask for. Anyone else on our team opens it only when you ask for help, and only for as long as that help takes.

Reporting a vulnerability

If you find a security problem, write to websuite@nsslgh.com with "Security" in the subject. Please give us time to fix it before you tell anyone else; we will keep you informed.