πŸ‡ΊπŸ‡Έ Houston, TX β€” Global HQ πŸ‡³πŸ‡¬ Lagos & Abuja β€” Delivery Centers
Home/About/Security & Compliance
Security & Compliance Framework

Audit-ready by design.

Intelliscan.Africa operates with security, compliance, and delivery discipline embedded into every workflow. GDPR-, NDPR-, and POPIA-aligned data handling. Multi-layer QA. Named reviewers. Audit-grade logs. Your data stays protected. Your operations stay compliant. Your outcomes stay predictable.

Data protection

Regulatory alignment across three continents.

Different markets, different rules. We operate against the principles of the strictest applicable framework on every engagement — not the lowest common denominator. Whether your data is subject to European, Nigerian, South African, or U.S. expectations, the controls are calibrated to satisfy your obligations.

Where required, we sign Data Processing Agreements aligned to GDPR Article 28 expectations. Where you operate under NDPR (Nigeria) or POPIA (South Africa), our delivery controls map to those regimes. For U.S. clients, our handling aligns with SOC 2 principles even where formal certification isn't yet in place.

GDPR-aligned controls

Lawful-basis review, purpose limitation, data minimization, retention discipline, and data-subject-rights workflows.

NDPR (Nigeria) alignment

Nigeria Data Protection Regulation compliance for all African delivery operations and Nigerian client engagements.

POPIA (South Africa)

Protection of Personal Information Act alignment for engagements involving South African data subjects.

SOC 2 principles

Security, availability, processing integrity, confidentiality, and privacy controls embedded operationally.

Operational security

Controls embedded in how we deliver, not bolted on after.

Every engagement scope starts with data classification, access boundary definition, and retention rules — before any production work begins. Delivery teams operate inside controlled environments with role-based access, audit logging, and structured incident escalation. Your data doesn't leave the boundaries we define together.

Operational Controls
RBACRole-based access
SSOSingle sign-on
MFAMulti-factor authentication
LogsReviewer-level audit trail
DLPData-loss prevention
IRStructured incident response
Quality assurance

QA isn't a sampling exercise — it's the operating model.

Gold-standard calibration

Reference items seeded into production batches to detect drift early and continuously.

Multi-layer review

Annotator → Senior reviewer → Evaluator → Operations lead, depending on risk and complexity.

Inter-annotator agreement

Quantified agreement metrics on every batch, with calibration runs triggered when agreement drops.

Structured escalation

Disagreements escalate through a defined path, not silently resolved. Decisions are recorded.

Audit-grade logging

Reviewer-level audit trails by default. Who reviewed what, when, and why — available on request.

Client adjudication

You set the ground-truth tie-breaker. We surface ambiguity rather than guessing.

Need to satisfy your security team?

Download the compliance brief, then book time with our compliance lead. We answer security questionnaires routinely and have language pre-mapped to most common frameworks.