Security / Data protection
Data protection considerations
GIGX processes personal and financial data on behalf of licensed operators, and the platform is designed with the Nigeria Data Protection Act in mind.
How the platform is designed
Purpose limitation
Personal data is collected for onboarding, suitability and regulatory record-keeping, and is modelled per purpose.
Access control
Role-based permissions restrict who can view investor records, enforced in server code and database policies.
Data minimisation
Interfaces project only the fields needed for the task rather than whole investor records.
Encryption-ready
Transport encryption throughout, with sensitive fields structured so at-rest protection can be applied per field.
Traceability
Access to sensitive records by staff roles is recorded in the audit trail.
Operator responsibility
The licensed broker partner remains the controller of its client relationships; GIGX processes data on its instruction.
Scope of these statements
This page describes design intent and platform capability. It is not a legal certification and does not claim any regulatory approval or licence.
Speak with the GIGX team
We work with licensed brokers, investment firms and market infrastructure operators.