Security & controls
Controls you can show an auditor.
Who can see what, who approved what, and what changed when — answered from records that cannot be edited after the fact.
How it is built
Protections in the product itself
Role-based access
Every screen and action is checked against the person’s role and branches on the server, not only hidden in the interface.
Append-only audit trail
Changes are recorded with who and when, and the record cannot be edited.
Maker–checker
Journal entries need a second person to approve them.
Per-device sessions
Each signed-in device has its own session that can be revoked on its own, taking effect immediately.
Scoped API keys
Integration keys are stored hashed, carry only the permissions they need, and can be revoked. Webhooks are signed.
We never hold your money
Customer payments settle directly to your own account. Stockwaka is never in the flow of funds.
Policies
In writing
- Data protection
- Processed under Nigeria’s Data Protection Act. See the privacy policy for what we hold and why.
- Retention
- Message logs and shopper profiles are deleted automatically on a published schedule. Business records are kept for accounting obligations.
- Your data
- Your records are yours. We do not sell them or show your numbers to anyone else.
- Payments
- Card payments are processed by Paystack and settle to your own account.
FAQ
Questions people ask
Who can see my business data?
Only people you add to your account, limited by the role and branches you give them. We do not sell or share your data.
Does Stockwaka hold my customers’ payments?
No. Payments settle directly to your own bank account. Stockwaka never holds or pays out your money.
See it on your own numbers.
Book a demo and we will walk through your stock, your branches and your books — or start free and set it up yourself.