Security & Compliance

Security is at the heart of Sangho. Every transaction, every piece of data, and every access is protected by multi-layered security mechanisms that are continuously audited. This page describes our security architecture and the commitments we make to you and your customers.

Data encryption

All communications between your application and the Sangho API travel exclusively over HTTPS with a minimum of TLS 1.2 (TLS 1.3 recommended). Certificates are renewed automatically and their validity is checked on every connection. Sensitive data at rest — banking details, personal information, configuration keys — is encrypted with AES-256-GCM. Encryption keys are managed through a dedicated key management service (KMS) with automatic rotation every 90 days.

Hosting & Infrastructure

Sangho’s infrastructure is deployed on Amazon Web Services (AWS), in the EU-WEST-1 (Ireland) region for core services and EU-CENTRAL-1 (Frankfurt) for backups. Both regions are located in the European Union, which guarantees that your data never leaves the European Economic Area without your explicit consent.

Availability: Multi-AZ architecture with automatic failover. 99.9% SLA on Growth and Scale, 99.99% on Business.
Backups: Full encrypted backup daily, incremental backup every hour. 30-day retention.
Isolation: Each tenant has an isolated data space. Cross-tenant access is technically impossible.
Monitoring: 24/7 monitoring with automatic alerts in case of anomalies or suspicious activity.

Personal data protection (GDPR)

Sangho acts as a data processor under GDPR: you are the data controller, and we process your customers’ data only on your instructions. A DPA (Data Processing Agreement) is available for all Growth plans and above. We apply the principles of data minimization, retention period limitation, and the right to erasure — a deletion request triggers effective removal of the data within 72 hours.

Card data — PCI-DSS Level 1

Sangho never stores card numbers (PAN), CVVs, or expiration dates. Tokenization is entirely handled by Braintree (PayPal), PCI-DSS Level 1 certified — the highest level. Sangho only handles opaque tokens provided by Braintree, which means that even in the event of an incident on our servers, your customers’ card data is not exposed.

Access control & Authentication

2FA TOTP: Two-factor authentication via a TOTP app (Google Authenticator, Authy…) available on all plans.
WebAuthn / Passkeys: Passwordless authentication via a hardware security key (YubiKey) or native biometrics.
RBAC: Role-based access control — each member of your team only accesses the resources needed for their role.
SecurityProfiles: Restriction by IP, domain, payment method, and maximum amount per API profile (Growth plan and above).
SSO SAML2: Integration with your enterprise identity provider (Okta, Azure AD…) on the Business plan.

API key management

Important

Never expose a secret key sk_ in frontend code, a Git repository, or a log file. Always use environment variables or a secrets manager.

Rotate your keys regularly (recommended: every 90 days).
Immediately revoke any key you suspect may be compromised from Settings → API Keys.
Use distinct keys per environment (Sandbox vs Production).
Assign a SecurityProfile to each key to limit its permissions to the strict minimum needed.

OHADA, CEMAC & AML/CFT compliance

Sangho operates in compliance with BEAC (Bank of Central African States) directives on electronic payments and the recommendations of GABAC (Central African Action Group against Money Laundering). Our AML/CFT (Anti-Money Laundering and Counter-Terrorist Financing) framework includes: mandatory KYC before any production transaction, screening against international sanctions lists (OFAC, EU, UN), and automatic reporting of atypical transactions to the competent authority.

Blacklist & Fraud detection

The blacklist mechanism permanently blocks a buyer (by customer ID, phone number, or email address) or an IP address. Any payment attempt from a blacklisted entry is rejected with the code SANGHO_CUSTOMER_BLACKLISTED. On the Scale and Business plans, advanced fraud detection analyzes behavioral patterns in real time to identify and block suspicious transactions before they complete.

Audit logs

Every action performed on your account — login, configuration change, API key creation or revocation, plan change — is timestamped and recorded in an immutable audit log. Logs are available in Settings → Audit, exportable as CSV, and retained for 12 months on Growth, 36 months on Scale and Business.

Security features by plan

Feature	Starter	Growth	Scale	Business
HTTPS / TLS 1.3
AES-256 encryption
2FA TOTP
WebAuthn / Passkeys
SecurityProfiles	—
Blacklist	—
Advanced fraud detection	—	—
DPA (GDPR)	—
SSO SAML2	—	—	—
Audit logs	7 days	12 months	36 months	Custom
Guaranteed SLA	—	99.9%	99.9%	99.99%

Bonne pratique

To report a security vulnerability, contact security@sangho.ga. We commit to acknowledging receipt within 24h and triaging the report within 72h as part of our Responsible Disclosure program.

SecurityProfile example

ResponseResponse

json

{
  "id": "sp_xxxxxxxxxxxx",
  "allowed_ips": ["196.200.1.0/24"],
  "allowed_domains": ["ma-boutique.com"],
  "max_amount": 500000,
  "allowed_payment_methods": [
    "mobile_money",
    "card"
  ],
  "blocked_countries": ["XX"]
}