Skip to content
SECURITY

Security, stated plainly.

How tazdan protects accounts, money and data today, and what hasn't been independently verified yet. Where something isn't done, this page says so.

Your account and balance.

What actually protects your balance

The mechanisms that protect every account. The trust page explains each one in more depth.

The books have to balance, or nothing trades

Your balance is derived from a double-entry ledger, never a cached number. A conservation audit runs across every currency and compares what the ledger says against what the wallets actually hold. If they disagree in either direction — money conjured or money leaked — the platform halts trading and alerts us, rather than carrying on with a number it cannot prove.

A fresh challenge before money moves

Two-factor, biometric unlock and known-device tracking. Sensitive actions trigger a step-up challenge even inside an already valid session.

An append-only record

Privileged actions — approvals, freezes, limit changes — are written to an audit log that operators cannot edit after the fact.

Transaction monitoring

Velocity and threshold rules run after every transaction: daily caps by tier, large-transfer alerts, and rapid-fire detection.

Data privacy.

Our Privacy Policy describes how personal data is handled. Identity verification flows are built into the app and may rely on external providers when deployed.

Plain-language terms

Terms, privacy policy and compliance documents written to be read, so you know what you are agreeing to.

How your money is actually held
How we build.

Certifications and frameworks.

The frameworks that matter for a money app like tazdan, and where each one stands today.

The platform includes automated checks, privileged-action logs and controls for sensitive operations. Additional independent assurance is planned. The exact controls available to users depend on the operating deployment.

SOC 2 / ISO 27001

No SOC 2 or ISO 27001 audit.

External security audit

Not completed. The platform has not yet had a published third-party penetration test.

Proof of reserves

Not published. The conservation audit above runs continuously and internally, but it is not third-party attested.

Licensing

Applications are in progress. tazdan is not a licensed bank and does not yet hold a money-transmission licence. When licences are granted we will publish the numbers here — not before.

Report a vulnerability.

Questions about security or compliance?

If you find a security issue, email security@tazdan.com with enough detail to reproduce it: the URL or endpoint, the steps, and the impact. Please report it privately and give us time to fix it before publishing.

Email security@tazdan.com, or reach support through the contact page.

The real rate. Finally.

Join the waitlist and be among the first in when tazdan opens in Libya.

See everything it does

Pre-launch. Services depend on regulatory approval and partner availability.