At TFAST FinCore and TFAST Digital Agency, we believe data sovereignty and customer privacy are fundamental pillars of modern financial engineering.
1. Zero External Telemetry Pledge
Unlike commercial software that transmits customer activity to third-party tracking networks, TFAST FinCore operates under a strict Zero External Telemetry Guarantee:
- 100% Local Execution: The application does not communicate with any external tracking servers, third-party analytics hubs, or remote licensing checkers.
- Zero Third-Party Advertising: No advertising trackers, behavioral beacons, or external marketing scripts are embedded in the code.
- Institutional Sovereignty: All member balances, transaction ledgers, loan schedules, and KYC documents reside exclusively in your designated database.
2. Information We Collect & Store
To deliver core banking and cooperative services, the platform securely stores:
- Identity Data: Legal full name, National Identification Number (NIN), gender, date of birth, and identity photo.
- Contact Information: Verified mobile telephone number, email address, physical residence, and district.
- Financial Records: Double-entry ledger postings, savings account balances, loan repayment histories, and SACCO shareholdings.
- Audit Logs: Authentication timestamps, IP address traces, and administrative transaction approvals for fraud prevention.
3. Security Architecture & Encryption
We employ enterprise-grade security controls to protect member assets:
- 256-Bit SSL/TLS Strict Transport: All data in transit between web browsers, mobile endpoints, and the server is encrypted using high-grade cipher suites.
- SQL Parameterization: 100% of database queries are executed via prepared statements and Eloquent ORM to eliminate SQL injection vectors.
- Password Hashing: Passwords are cryptographically salted and hashed using standard Bcrypt algorithms.
- Role-Based Access Control (RBAC): Granular privilege boundaries separate tellers, loan officers, branch managers, and super-administrators.
4. Data Subject Rights
Members have the right to inspect their complete account transaction ledger, request correction of erroneous personal records, and obtain official account statements at any branch or via the digital member self-service portal.