Security & trust
Security controls and their limits.
Baobab Commerce is designed to increase accountability through layered product controls. KYC and escrow reduce uncertainty but cannot eliminate fraud, operational failure, or legal risk.
Participant verification
Seller and delivery-agent KYC states are explicit, auditable, and subject to operator review. Verification does not certify future conduct.
Transaction boundaries
Payment, escrow, delivery, and settlement transitions are validated separately. Exact-money values avoid floating-point financial errors.
Data posture
Private documents belong in encrypted object storage with signed access. Secrets remain server-side and protected endpoints enforce role checks.
Responsible disclosure
Until a dedicated security address and policy are approved, report suspected vulnerabilities privately to festus.yeboah@hotmail.com. Do not include personal or production data.