Security and compliance

Lending data is personal and financial. Kadimo is built so each company's data stays its own and every sensitive action leaves a record.

Isolation in the database

  • Every group's and company's rows are separated by SQL Server row-level security, checked on every query, not only in the screens.
  • Automated tests try to read and change another company's data with raw SQL, and must be refused, on every change to the code.
  • A new table cannot ship outside the policy: a test fails until it is covered.

Borrower data shared only with consent

  • A borrower belongs to the group once, and a company sees them only after they apply there or agree to share.
  • Revoking that consent hides the borrower from that company straight away.

Masked access for head office

  • Each group chooses what its head-office staff see of borrowers: full, masked or consent only.
  • In masked mode names become initials and ID numbers and phones show only their last digits, on screen and in every download.
  • Opening a full record is logged with a reason.

Audit

  • Every report, statement and receipt downloaded is logged with who, what, when and which filters. A download that cannot be logged is not delivered.
  • Approvals, loan changes and cash movements record the person and the time.
  • A delivery log shows whether each sign-in code and email reached its recipient, without ever storing the code itself.

Sign-in

  • Staff are invited by an administrator and choose their own password; repeated wrong passwords lock the account.
  • Borrowers sign in with a one-time code by SMS that expires in minutes.
  • Sessions are kept in a secure cookie that page scripts cannot read.

Hosting

  • The Kadimo API and its database run on Microsoft Azure in the South Africa North region.
  • This website runs no tracking or advertising scripts.

Compliance

Kadimo supports governance, verification and auditability for lenders regulated by NBFIRA in Botswana: cost-of-credit disclosure, advertising wording checks, a read-only regulator inspector role, and records your compliance officer can export.

Kadimo is software. Your licence and your compliance remain yours; Kadimo gives you the records and controls to show your work.

See Kadimo with loans like yours

Tell us how many branches you run and which loans you offer. We will show you Kadimo working on the same kind of book.

Request a demoAlready a customer? Sign in