GoKiet Security

Last Updated: September 17, 2026

At GoKiet, protecting the compliance, risk, and business data our customers entrust to us is a core responsibility. This page outlines the measures we take to safeguard the Service.

1. Data Encryption

• Data in transit is encrypted using TLS (1.2 or higher).
• Data at rest is encrypted using industry-standard encryption (e.g., AES-256).

2. Access Controls

• Access to production systems and customer data is restricted on a least-privilege, role-based basis.
• Multi-factor authentication (MFA) is required for internal access to sensitive systems.
• Customer accounts support strong password requirements and, where available, MFA.

3. Infrastructure Security

• The Service is hosted on reputable cloud infrastructure with physical and network security controls.
• Systems are regularly patched and monitored for vulnerabilities.
• Network traffic is monitored for anomalous or unauthorized activity.

4. Application Security

• We follow secure development practices, including code review and testing prior to deployment.
• Periodic vulnerability assessments and, where appropriate, penetration testing are conducted.

5. Data Segregation

Customer data is logically segregated to prevent unauthorized cross-account access.

6. Monitoring and Incident Response

• We maintain logging and monitoring to detect and respond to security events.
• In the event of a data breach affecting personal information, we will notify affected customers and relevant authorities (including the Nigeria Data Protection Commission, where applicable) in accordance with applicable law and our contractual obligations.

7. Employee Practices

• Employees and contractors with access to customer data undergo confidentiality obligations and periodic security awareness training.
• Access is revoked promptly upon role change or termination.

8. Backup and Business Continuity

• Regular backups are maintained to support data recoverability.
• We maintain business continuity practices designed to minimize service disruption.

9. Compliance Alignment

Our security practices are designed with reference to recognized frameworks and applicable regulatory requirements relevant to our customers' industries, including data protection obligations under the Nigeria Data Protection Act 2023.

10. Responsible Disclosure

If you believe you have discovered a security vulnerability in GoKiet, please report it to security@kietlaw.com. We ask that you give us reasonable time to investigate and address any issue before public disclosure.

11. Contact Us

GoKiet / Kiet Business Attorneys — security@kietlaw.com, 14 Reeve Street, Ikoyi, Lagos, Nigeria.