Security
How we protect couples, vendors, and the money that flows through the platform.
Contributions flow directly to your own Changisha, Mchango, Lipa Namba, or bank account. Wedding by Lockwood is a facilitator, never a custodian.
All transactions are processed by Malipopay, a Bank of Tanzania-supervised payment gateway. Signed webhooks, verified end-to-end.
We never collect, store, or transmit your mobile money PIN or bank password.
Signed access tokens with short lifetimes, refresh-token rotation, phone OTP for sign-in.
Every vendor is reviewed by our team before going live. Verified, Highly Rated, and Fast Responder badges signal trust at a glance.
Every vendor transaction produces a TRA-compliant EFD receipt automatically.
Four habits, repeated everywhere.
TLS 1.2+ on every endpoint. HSTS preloaded. Public traffic terminates at Cloudflare; internal traffic stays inside a private VPC.
Production MongoDB Atlas clusters and backups are encrypted with AES-256. Keys are rotated quarterly.
Production access is gated by SSO, MFA, and role-scoped IAM. Engineer access is logged and reviewed monthly.
Cloudflare WAF, BullMQ rate limits, request signing on webhooks, per-tenant data partitioning, and per-environment Rabbit vhosts.
Standards we work to.
Payments via Malipopay, a Bank of Tanzania-supervised gateway
Fiscal receipts on every vendor transaction
Signed short-lived tokens with refresh rotation
Operational controls modelled on ISO/IEC 27001
If something goes wrong, you hear from us first.
We monitor production around the clock. Suspected security incidents trigger an on-call page within 5 minutes. We aim to acknowledge confirmed incidents to affected users within 24 hours, and to publish a post-incident report within 7 days of resolution. Where personal data is impacted, we notify the Personal Data Protection Commission within 72 hours, in line with the Tanzania PDPA.
PGP key fingerprint and disclosure policy published on request.