Security You Can Count On
Your sales, stock and customer data deserve real protection. Here is how SmartCunga keeps it safe.
Encryption everywhere
All traffic to and from SmartCunga is encrypted in transit using HTTPS, with HSTS (Strict Transport Security) enabled so browsers always connect securely. Your data is also protected at rest, and every API response carries restrictive cache and content-security headers.
Secure sign-in
Passwords are stored as strong, one-way hashes (bcrypt) - never in plain text. Account access can be protected further with two-factor authentication for privileged accounts, and sensitive actions (like changing your email or password) always ask you to confirm your current password.
Access controlled per role
Each business works in its own isolated workspace. The owner invites teammates with roles - Managers, Cashiers and others - and every person signs in with their own credentials and sees only what their role allows.
Audit trail
Key actions such as sales, payments, credit settlement and team changes are recorded in an audit log with the user and time, so you can always see who did what in your business.
Reliable backups
Business data is backed up on a regular schedule, and we keep redundancy so that an infrastructure problem cannot silently erase your records.
RRA-compliant records
Receipts follow the official RRA format with your TIN and VAT details, and EBM (Electronic Billing Machine) integration is supported - helping you stay in line with Rwandan revenue requirements while you run your business.
How we handle incidents
We monitor the platform for threats and respond to security incidents as a priority. If we ever detect that your business data is at risk, we will notify the users affected promptly and with clear guidance. Staff access to customer data is limited to cases where it is genuinely required for support, is authorized, and is recorded.
Reporting a vulnerability
Found a security issue? We take it seriously. Please report it directly to us at rwemasmartgroupltd@gmail.com and we will acknowledge it and work on a fix. Do not attempt to access other users’ data while testing.
You stay in control
You can export your full business data at any time under Settings, decide who has access, and close your account whenever you choose. See the Privacy Policy and Terms of Service for the formal details.