Privacy Policy
BVN and sensitive identity data are encrypted at rest and lookup hashes are used to prevent duplicate registration without exposing raw BVN.
API secrets remain in environment configuration. Audit logs redact passwords, BVN, tokens and credentials.