How We Protect Your Account
These are the controls that protect SlasPay today.
Encryption in Transit and at Rest
Connections to SlasPay are encrypted with TLS, and stored data is encrypted at rest.
Hashed Passwords
Passwords are stored only as one-way hashes. No one at Slas can read your password.
httpOnly Sessions
Sign-in sessions use httpOnly cookies that scripts on the page cannot read: a short-lived access token and a longer-lived refresh token.
Web Application Firewall
Traffic to the SlasPay API passes through a web application firewall before it reaches our services.
Managed Secrets
Application secrets and credentials are held in a managed secret store with restricted access.
Licensed Payment Partners
Payments are processed by licensed providers, Paystack and Stripe. SlasPay does not hold customer funds.
Our Commitments
Report a Security Vulnerability
If you believe you have found a security vulnerability in SlasPay, please report it to us privately and do not disclose it publicly until we have had a chance to fix it.
security@slastech.com