Security

Enterprise-grade security
for African operations.

Makoko is built on the premise that businesses trusting us with their operational data deserve infrastructure that never compromises on security, privacy, or reliability.

Data Encryption

  • All data in transit encrypted with TLS 1.3
  • Data at rest encrypted with AES-256
  • Database field-level encryption for sensitive business records
  • API keys and secrets stored using one-way hashing

Authentication & Access

  • Multi-factor authentication (MFA) available for all accounts
  • Role-based access control (RBAC) across all modules
  • OAuth 2.0 token rotation every 6 hours
  • Session invalidation on password change or suspicious activity

Infrastructure

  • Hosted on enterprise cloud infrastructure with 99.9% uptime SLA
  • Automated backups with point-in-time recovery
  • Geographic redundancy for critical business data
  • DDoS protection and rate limiting on all public endpoints

AI Safety & Oversight

  • Every AI agent action is logged with full reasoning trace
  • Human-in-the-loop controls for high-impact automation
  • Agent permission scoping — agents only access what you authorize
  • Configurable action approval requirements for consequential decisions

Operational Security

  • Regular penetration testing by independent third parties
  • Automated vulnerability scanning on every deployment
  • Security incident response team with defined SLAs
  • SOC 2 compliance program in progress (2026)

Vulnerability Disclosure

  • Responsible disclosure program at security@makoko.ai
  • Acknowledged within 24 hours, triaged within 72 hours
  • Critical vulnerabilities patched within 48 hours
  • Security advisories published for significant issues

Found a vulnerability?

We take security reports seriously and respond quickly. Please disclose responsibly at:

security@makoko.ai