Built for institutionsthat cannot afforderrors.
Prism platforms move salaries, savings, and statutory remittances for thousands of people every month. This page sets out—plainly and without marketing gloss—how we protect that data and keep your institution audit-ready.
Registered in England & Wales (Company No. 12847631) with operations in Sagamu, Nigeria.
Two jurisdictions,
one standard.
As a UK-registered company we apply GDPR principles to all client data, regardless of geography. For our Nigerian institutional clients, we build to align with the Nigeria Data Protection Act (NDPA, 2023) and NDPR requirements. In practice, the stricter rule wins—your members' and employees' data is handled to whichever standard demands more.
GDPR-aligned governance
Purpose limitation, data minimisation, and retention discipline. Your institutional data is never leveraged, shared, or retained beyond agreed terms.
NDPA / NDPR alignment
Lawful-basis processing for member and payroll records, breach-notification procedures, and data-subject rights handling built into platform workflows.
Honest scope
We do not hold third-party certifications such as ISO 27001 today. What we publish here is what we actually practise—and we will put certifications on this page only when we have earned them.
Encryption in transit and at rest
All traffic is TLS-encrypted; sensitive payroll and payout data is encrypted end-to-end, as deployed for OOUTH's salary platform.
Role-based access control
Finance, HR, cooperative executives, and auditors each see exactly what their role permits—separation of duties is enforced by the platform, not by policy documents.
Digital signatures & approval trails
Every approval is signed, timestamped, and immutable. Anomaly detection and exception handling flag irregular runs before money moves.
Automated backups
Scheduled, tested backups with defined recovery procedures, so a hardware failure never becomes a data loss event.
Hardened cloud infrastructure
Deployed on AWS with CI/CD pipelines (GitHub Actions), observability tooling, and high-availability configuration for payroll-critical workloads.
Least-privilege operations
Production access is restricted, logged, and reviewed. Client data is never copied to development environments.
Every remittance
traceable to the kobo.
Nigerian institutions have learned the hard way that payroll software must prove—not promise—that statutory deductions actually reach the authorities. Prism platforms are built so that every PAYE, pension, and NHF deduction is computed transparently, remitted verifiably, and reportable instantly.
Across our client portfolio—thousands of payroll beneficiaries and ₦248M+ in cooperative funds—we have recorded zero major audit findings.
PAYE, Pension & NHF handled in one workflow
Statutory obligations computed correctly, every month, with FIRS-compliant payslip generation.
Board-ready compliance reporting
Financial statements, compliance reports, and audit trails generated instantly—satisfying both internal governance and regulatory scrutiny.
Member-facing transparency
SMS and email alerts for every transaction build the institutional trust that member-facing organisations are legally and ethically obligated to provide.
Your data is yours—contractually
Full exports, documented APIs, and a thorough handover process ensure you are never operationally dependent on us. No vendor lock-in, ever.
Twelve months of structured support
Every contract includes structured support, administrator training, and documentation review. We remain reachable long after go-live.
Accountable to two regulators
A UK legal entity with a Nigerian operational hub means contractual recourse under English law and on-the-ground accountability in Ogun State.
Put our answers
in front of your auditors.
Procurement committee? Security questionnaire? Send it over—we answer due-diligence requests directly and in writing.