Legal & compliance portal
Security Policy
Protecting Commerce at Every Layer.
Security is a foundational requirement of OMNICART CommerceOS. We are committed to protecting the confidentiality, integrity, availability, and appropriate use of information across our commerce ecosystem.
Report a Security IssueSecurity at a Glance
Confidentiality
Information is accessible only to authorised users and systems.
Integrity
Commerce and operational data is protected from unauthorised changes.
Availability
CommerceOS is designed for reliability, resilience, monitoring, and recovery.
Accountability
Important system and security activities are appropriately logged and attributable.
Security Principles
How We Protect Commerce
Identity & Access
Role-based access, least privilege, access reviews, and multi-factor authentication.
Data Protection
Sensitive information is protected according to its classification and risk.
Encryption
Secure encrypted protocols protect information in transit, with appropriate encryption at rest.
Platform & Tenant Security
CommerceOS is designed to logically isolate merchants and protect their data from unauthorised access.
Application & API Security
Secure development, authentication, authorisation, input validation, monitoring, and vulnerability testing help protect applications and APIs.
Infrastructure & Resilience
Network security, backups, monitoring, disaster recovery, and resilience measures support reliable operations.
Security Monitoring & Incident Response
OMNICART maintains processes for detecting, investigating, containing, responding to, and recovering from security incidents. Where required, affected parties and relevant authorities will be notified in accordance with applicable laws and obligations.
Detect
Automated analysis & monitoring logs
Respond
Triage, containment, and defense
Recover
System restoration and backups
Improve
Incident analysis and core upgrades
Vulnerability Disclosure
Found a Security Vulnerability?
Help us protect OMNICART. Security researchers can responsibly report vulnerabilities affecting OMNICART-controlled services.
Email: info@omnicart.ng
Subject Line: SECURITY VULNERABILITY REPORT — CONFIDENTIAL
Report a Vulnerability* Please avoid disrupting services, accessing unnecessary personal data, modifying production data, or conducting destructive testing.
Shared Security Responsibility
Security is a shared responsibility. OMNICART protects the platform components it controls, while users, merchants, developers, and partners are responsible for security within their respective environments.
OMNICART
Core Platform OS, Cloud Infrastructure & APIs
Merchants
Store Access, Staff Access & Account Integrity
Customers
Strong Password Security & Device Parameters
Developers
API Credential Safety & Secure Webhooks
Tech Partners
Fulfillment Networks & Integrated Gateways
Security & Privacy
Security protects the technology. Privacy explains how personal data is processed.