Numu is built with security at every layer — from payment processing to merchant data storage to the platform infrastructure underpinning it all.
Numu Pay is PCI DSS Level 1 certified. Cardholder data is tokenised at point of capture and never stored on Numu servers.
All data is encrypted in transit using TLS 1.3 and at rest using AES-256. Encrypted backups are stored across multiple availability zones.
Merchant and customer data is stored in your preferred region, fully compliant with local data localisation requirements.
Enable 2FA on your account with any TOTP authenticator app. Store owners can mandate 2FA across all staff accounts.
Every Numu Pay transaction is scored for fraud in real time. Suspicious orders are flagged before they reach your dashboard.
Assign staff granular permissions with clearly scoped roles. Every sensitive action is logged in a tamper-evident audit trail.
Found a security vulnerability in Numu? We take every report seriously and respond within 48 hours.
Report a vulnerabilitysecurity@numu.sa