Skip to main content
Security model

Security takes precedence over convenience.

Every layer of NexumPay — authentication, authorization, transactions and infrastructure — is built to the same standard, not just the parts customers can see.

An abstract layered shield illustration in teal and gold, with a checkmark at its center

Layered by design, not by accident.

Authentication, authorization, transaction integrity and infrastructure security are separate layers that each have to hold — not one control standing in for all four.

Security layers

Authentication

  • Access tokens
  • API keys
  • Session validation

Authorization

  • Role-based access control
  • Business-level roles
  • Granular permission management

Transaction security

  • OTP verification
  • Transaction signatures
  • Full audit trails

Infrastructure

  • HTTPS encryption everywhere
  • Secured API communication
  • Continuous database logging

Building an integration? The same authentication model — wallet secrets and scoped API keys — is covered step by step on the Developers page.

Nexslate Company Limited

Ready to move money without the friction?

Whether you're an individual, a growing business, or an institution looking to integrate — NexumPay's team in Nairobi is ready to talk through what you need.