Security & trust

Your members' money deserves serious security.

Bridge for Credit Unions runs on the same infrastructure as Bridge's regulated payment services. Here is how we protect your society, your officers and your members.

Controls

Built in, not bolted on.

Encrypted everywhere

Data is encrypted in transit (TLS 1.2+) and at rest.

Access by office

Each officer can do only what their office allows. The supervisory committee and auditors can read everything and change nothing.

Two-person approvals

Withdrawals over your threshold, disbursements, fund movements, write-offs, distributions and activation need a second officer.

Complete audit trail

Every change records who made it, when, under which office and what it was before.

No double postings

Every money movement carries an idempotency key, so a retry or double click never posts twice.

Isolated by society

Each union's data and books are isolated; a federation sees an affiliate's members only under a recorded supervisory relationship.

Your account

Sign-in that protects every officer.

  • Multi-factor sign-in with a one-time code
  • Sessions end after 15 minutes idle and 12 hours in total
  • Re-confirmation before money moves or approvals are given
  • Sign-in history and active sessions visible in Settings
  • Accounts lock for 30 minutes after five failed attempts
Operations

Run carefully, every day.

Backups
Regular backups with defined recovery objectives.
Hosting
Hosting and data residency details for your country are available on request.
Testing
Independent penetration tests.

Compliance and data protection

Certifications are listed here as they are awarded.

We process members' personal data on your society's behalf under our Data processing terms, in line with the data protection laws where we operate, including the Nigeria Data Protection Act 2023, Kenya's Data Protection Act 2019, Ghana's Data Protection Act 2012 (Act 843) and the GDPR where it applies.

Read the Data processing terms

Responsible disclosure

Found a vulnerability? Email [email protected] with details. We acknowledge every report and won't take action against good-faith research.

security.txt

Set up your society on Bridge.

Register free, practise on sample data, and go live when you're ready. No sales call needed.

Free to set up and practise. You pay only once you're live.