How we handle your data

For IT reviewers and data protection officers. Recipient data is the most sensitive thing a programme holds. This page describes where it lives, who can reach it and how it moves.

DATA RESIDENCY

Your PII can stay on your servers

Connect your own database or data centre. AIDONIC processes pseudonymised identifiers for disbursement and proof, so personal data need not leave your environment. A hosted option is available in Switzerland or the EU.

PROTECTION

Encrypted, role-scoped, logged

Encryption at rest and in transit, role-based access with per-programme permissions, and an access log that is part of the audit trail. GDPR and Swiss FADP aligned. DPA available.

ASSURANCE

Documentation for your questionnaire

SOC 2 Type II. Information security documentation, sub-processor list and business continuity overview available under NDA. Each document states its status and date.

INTEGRATION

Can you integrate with SCOPE, CommCare, our MIS or ERP?

Yes, through a documented REST API with webhooks for status changes. Registration data comes in from your system; disbursement status and proof records go back out, so your MIS remains the system of record. Biometric and photo matching is optional and can be switched off per programme.

WebhookSample

{
  "event": "disbursement.confirmed",
  "programme_id": "prg_0418",
  "external_ref": "MIS-7731-A",
  "pii": null,
  "proof_url": "/v1/disbursements/dsb_8f2a91/proof"
}

OFFLINE AND FIELD DEVICES

Field and vendor apps store transactions encrypted on the device and sync at end of day or when connectivity returns. Devices are enrolled per programme and can be revoked remotely.

SUB-PROCESSORS

The current sub-processor list (payout aggregators, hosting, compliance screening) is provided with the DPA.