Skip to content

Compliance

Regulatory compliance & security

Terra Switch operates under the highest standards of regulatory compliance, security, and operational transparency required by the Central Bank of Nigeria.

PCI DSS Compliance

Req #10

Terra Switch maintains Payment Card Industry Data Security Standard (PCI DSS) Level 1 certification — the highest level of certification available. Our infrastructure, processes, and controls are audited annually by a Qualified Security Assessor (QSA).

Annual audit by Qualified Security Assessor (QSA)
End-to-end encryption of cardholder data
Tokenization for sensitive payment data
Network segmentation and access controls
Continuous vulnerability scanning
Penetration testing by independent firms
24/7 security monitoring and incident response
Strict key management and rotation policies

Dispute Resolution

Req #8

In compliance with CBN regulations, Terra Switch resolves failed transactions and dispense errors within the following timelines:

48h

Failed Web/POS Transactions & Dispense Errors

Acquirer-initiated refunds resolved within 48 hours of confirmation.

24h

Switch Chargebacks

Switch-initiated chargebacks resolved within 24 hours.

Whistleblowing

Req #18

Terra Switch is committed to the highest standards of integrity, ethics, and regulatory compliance. We provide a confidential channel for employees, merchants, and users to report internal corruption, financial malpractice, or unethical breaches.

How to report

  • Email: whistleblower@terraswitching.com
  • All reports are treated as confidential. Anonymous reporting accepted.
  • Whistleblowers are protected from retaliation under our internal policy.

Vulnerability Disclosure

Req #21

We welcome reports from external security researchers who identify potential vulnerabilities in our systems. If you have discovered a security issue, please contact our security team using the channel below.

Responsible disclosure

  • Email: security@terraswitching.com
  • We aim to acknowledge reports within 24 hours.
  • Eligible reports may qualify for recognition under our security researcher program.
Scope: Web properties, mobile applications, and public APIs operated under terraswitching.com.