Section 24 · Effective 1 September 2026

Security Policy

Platform safeguards, incident response and breach reporting.

24.1 Security Measures Implemented

AMTA employs encryption of data in transit and at rest for sensitive information, secure payment processing through licensed partners, access controls limiting internal staff access to personal data, and regular vulnerability testing of the Platform.

24.2 User Responsibilities for Security

Users must choose a strong password, enable two-factor authentication where available, avoid sharing account credentials, and be cautious of phishing attempts impersonating AMTA.

24.3 Incident Response

AMTA maintains an incident-response process to detect, contain, and investigate security incidents, and to restore affected systems and data as quickly as reasonably possible.

24.4 Reporting Security Breaches

Users who suspect unauthorised access to their account or a security vulnerability in the Platform should report it immediately to support@amtacitizens.com; AMTA will notify affected users and, where required, the Nigeria Data Protection Commission, of any personal data breach in accordance with the NDPA's breach-notification requirements.

24.5 Data Protection Compliance

AMTA's security programme is designed to support compliance with the Nigeria Data Protection Act 2023 and applicable sector-specific security requirements for payment data.