Trust & compliance

Security & Compliance

For enterprise IT, risk and compliance reviewers

Klarity is built for regulated industries: banks, fintechs and insurers. This page is prepared for the review that comes before a pilot, not bolted on after. It covers how we handle customer data, where it lives, and the controls your team will ask about.

The short version. You stay the data controller. Klarity acts as your processor. Personal details can be redacted before analysis, data can stay in Nigeria, and every agent action is logged. Ask us for the full security pack.

1. Data protection

We follow the Nigeria Data Protection Act (NDPA) 2023. In plain terms: your organisation is the data controller and Klarity is your processor. We handle customer data only to run the service you asked for, under a written agreement, and never to train outside models. A Data Processing Agreement (DPA) is available for every contract.

2. Data residency

We offer Nigerian data-residency options, so customer data can stay in the country. For sensitive tiers, client-side hosting is available, which means the data can sit inside your own environment. We agree the residency setup with you before any data moves.

3. PII redaction

Personal details, such as names, account numbers, phone numbers and emails, can be automatically redacted before analysis. Your team still gets the trend and the meaning of what customers said, without exposing who said it.

4. Audit and access

Full audit logs: every action an agent takes is recorded, so nothing happens without a trail you can review.
Least-access controls: people and systems get only the access they need, and no more.
Encryption in transit: data is encrypted while it moves between systems.
Own-data only: the chat agent only ever shows a person their own records.

5. Human handoff on demand

An agent can hand a conversation to your team at any point, with the full history attached. You decide which cases must always reach a person, and the agent follows that rule.

6. Contracts and SLA

We work on annual contracts with a service-level agreement (SLA), invoiced by transfer against invoices rather than a recurring card. This suits how corporate procurement and finance teams prefer to buy.

7. Request our security pack

Your IT and compliance reviewers can ask for the full pack, which includes our NDPA compliance statement, data-residency options, PII redaction detail, the DPA template, and audit-logging notes.

Request our security pack. You can also read our Privacy Policy and Terms.