Security Overview

Controller: Inventivelabs Ltd

InventiveLabs Ltd prioritizes the security of our users, platforms, and data. This Security Overview outlines the high‑level measures we implement to ensure safe, reliable, and compliant operation across all our digital products, including NaijaProperty, NaijaPlace, NaijaDirectories, Inventtive, Tutorial, and NaijaLab.

1. Our Security Framework

We follow industry‑standard security practices aligned with the Nigeria Data Protection Act (NDPA 2023) and global best practices.

Our security framework includes:

• Infrastructure security

• Data security

• Application security

• User security

• Vendor security

• Incident response

2. Infrastructure Security

We maintain a secure and resilient infrastructure through:

• Secure cloud hosting environments

• Firewalls and intrusion prevention systems

• Regular vulnerability assessments

• Continuous monitoring for suspicious activity

• Redundant systems and secure backups

Hosting is provided by trusted third‑party providers with strong security certifications.

3. Data Security

We protect personal data using:

• Encryption in transit (HTTPS/TLS)

• Encryption at rest for sensitive data

• Strict role‑based access controls

• Secure backup and recovery procedures

• Data minimization practices

• Cross‑border transfer safeguards

Sensitive data processed via identity verification (NaijaProperty, NaijaPlace) is handled securely and never stored in raw biometric form.

4. Application Security

Our applications are built with security in mind:

• Secure coding practices

• Regular code reviews

• Automated vulnerability scanning

• Protection against common threats (XSS, CSRF, SQL injection)

• Session management and timeout controls

• Fraud and abuse detection systems

5. User Security

We help users protect their accounts through:

• Secure password requirements

• Optional multi‑factor authentication (MFA)

• Login protection and rate limiting

• Account activity monitoring

• Verification workflows (NaijaProperty)

Users are encouraged to keep their login credentials secure.

6. Vendor & Third‑Party Security

We work with trusted service providers, including:

• Didit.me (identity verification)

• Hetzner (hosting)

• Resend (email delivery)

• Stripe (payments)

All vendors operate under written agreements and comply with NDPA requirements.

7. Incident Response

We maintain an internal incident response process to:

• Detect security issues

• Contain and mitigate threats

• Notify affected users and authorities when required

• Improve systems after incidents

• Meet NDPA breach notification timelines

We continuously refine our processes to strengthen resilience.

8. Reporting Security Concerns

Security concerns may be reported to:
security@inventivelabs.ltd