Security, stated plainly.
How tazdan protects accounts, money and data today, and what hasn't been independently verified yet. Where something isn't done, this page says so.
What actually protects your balance
The mechanisms that protect every account. The trust page explains each one in more depth.
The books have to balance, or nothing trades
Your balance is derived from a double-entry ledger, never a cached number. A conservation audit runs across every currency and compares what the ledger says against what the wallets actually hold. If they disagree in either direction — money conjured or money leaked — the platform halts trading and alerts us, rather than carrying on with a number it cannot prove.
A fresh challenge before money moves
Two-factor, biometric unlock and known-device tracking. Sensitive actions trigger a step-up challenge even inside an already valid session.
An append-only record
Privileged actions — approvals, freezes, limit changes — are written to an audit log that operators cannot edit after the fact.
Transaction monitoring
Velocity and threshold rules run after every transaction: daily caps by tier, large-transfer alerts, and rapid-fire detection.
Data privacy.
Our Privacy Policy describes how personal data is handled. Identity verification flows are built into the app and may rely on external providers when deployed.
Plain-language terms
Terms, privacy policy and compliance documents written to be read, so you know what you are agreeing to.
Certifications and frameworks.
The frameworks that matter for a money app like tazdan, and where each one stands today.
The platform includes automated checks, privileged-action logs and controls for sensitive operations. Additional independent assurance is planned. The exact controls available to users depend on the operating deployment.
No SOC 2 or ISO 27001 audit.
Not completed. The platform has not yet had a published third-party penetration test.
Not published. The conservation audit above runs continuously and internally, but it is not third-party attested.
Applications are in progress. tazdan is not a licensed bank and does not yet hold a money-transmission licence. When licences are granted we will publish the numbers here — not before.
Questions about security or compliance?
If you find a security issue, email security@tazdan.com with enough detail to reproduce it: the URL or endpoint, the steps, and the impact. Please report it privately and give us time to fix it before publishing.
Email security@tazdan.com, or reach support through the contact page.
The real rate. Finally.
Join the waitlist and be among the first in when tazdan opens in Libya.
Pre-launch. Services depend on regulatory approval and partner availability.