A summary of how Commission is built, not a formal security audit or certification.
Payments are processed through Paystack - Commission never handles raw card details directly. Row-level security policies restrict businesses and affiliates to their own data.
Lead identity data (name, phone, email) is deliberately never stored in Commission's own database - it is forwarded straight to the business that owns the campaign and discarded from Commission's side. See the Privacy page for more detail.