Safety and Security

At Buburuza™, safeguarding your assets and data is our foremost priority, integral to our mission of delivering a secure, AI-powered financial ecosystem. We offer two primary account types: custodial current accounts for fiat and managed assets, and self-sovereign crypto wallets for decentralized control. Each employs advanced technologies tailored to its structure, combining institutional-grade protections with user empowerment. Below, we detail our comprehensive security measures, compliance protocols, and your essential responsibilities to maintain a safe environment.

Policy Engine, Your Second Layer of Security

‍
Buburuza™’s Policy Engine operates on a role-based control framework, granting you granular control over your operations without compromising on flexibility.

‍

Configure roles for your team members to enforce enhanced security measures.

‍

Set user-specific transaction amounts and time limits, applicable either to all accounts or select accounts.

‍

Establish flexible approval workflows, stipulating the required number of approvals and designating specific approvers.

‍

Enhanced control and flexibility over your operations.

‍

Securing Your Buburuza™ Current Account (Custodial)

‍
In this traditional banking model, we act as custodian, managing and protecting your funds and assets on your behalf. Our multi-layered security framework leverages AI automation and regulatory compliance to mitigate risks effectively.

Our Protections and Protocols:

We employ biometric identity verification, including facial recognition and fingerprint scanning, during onboarding and high-risk activities to ensure only authorized users gain access. Our autonomous AI agents provide continuous, 24/7 monitoring of account activity, using machine learning to detect anomalies, potential fraud, unauthorized logins, and suspicious patterns in real-time. This system integrates predictive analytics to preempt threats, reducing response times to seconds.

‍

Access is fortified with robust authentication mechanisms, including strong, unique passwords, multi-factor authentication (MFA) via app or hardware tokens, and behavioral biometrics that flag unusual login patterns. All communications and data transmissions are secured with end-to-end encryption using AES-256 standards and SSL/TLS protocols, protecting against interception and man-in-the-middle attacks.

‍

For asset custody, we utilize institutional-grade solutions with multi-tier cold storage, geographic redundancy, and insurance coverage against theft or loss. Our operations comply with entity-specific regulations, such as those from the Union of Comoros Offshore Finance Authority for banking services and FINTRAC for fiat transfers, including regular audits and stress testing. Additionally, we maintain cyber insurance and conduct penetration testing quarterly to address emerging vulnerabilities.

Your Responsibilities:

To complement our protections, you must use strong, unique passwords not shared across platforms and enable MFA immediately upon account creation. Remain vigilant against phishing attempts by verifying all communications originate from official Buburuza™ domains (e.g., @buburuza.com) and never sharing login credentials. Regularly monitor your transaction history through our dashboard and report any discrepancies promptly. Avoid using public Wi-Fi for sensitive activities and keep your devices updated with the latest security patches. Failure to adhere may limit our ability to assist in recovery.

Securing Your Buburuza™ Crypto Wallet (Self-Sovereign)

Our crypto wallets empower you with full ownership and control through a unique seed phrase (recovery phrase), aligning with decentralized finance principles. This model offers unparalleled autonomy but places primary security responsibility on you.

Your Seed Phrase Responsibility:

The seed phrase is the master key to your wallet—anyone possessing it can access and transfer your assets irrevocably. Never share, disclose, or store it digitally (e.g., in emails, photos, or cloud services), as this exposes it to hacking risks. Instead, write it on durable, non-digital media (e.g., metal plates) and store in multiple secure, offline locations like bank vaults. If lost or compromised, assets are permanently irretrievable—we cannot assist due to the self-sovereign design. Treat it with the same caution as physical cash or valuables.

Our Tech Protections and Protocols:

While you control the keys, our underlying technology is fortified with Multi-Party Computation (MPC) protocols to eliminate single points of failure during wallet generation and transactions. All on-chain activities are recorded on immutable, transparent blockchains like our proprietary Buburuza-Chain, providing verifiable audit trails. Platform interfaces (apps, web) use the same encryption and AI monitoring as current accounts, with additional features like hardware wallet integration for enhanced security. We conduct regular smart contract audits by third-party firms and maintain bug bounty programs to identify vulnerabilities proactively.

Recognizing and Avoiding Scams:

Common threats include impersonation scams (fraudsters posing as Buburuza™ support), urgency tactics (e.g., threats of account closure), and phishing links/emails soliciting credentials or seed phrases. We never request your seed phrase or sensitive details unsolicited. Verify all communications through official channels and report suspicions immediately.

What to Do If Compromised:

For current accounts: Contact support@buburuza.com immediately, change passwords, review MFA settings, and enable account locks if available. For crypto wallets: If seed phrase exposure is suspected, generate a new wallet instantly and transfer assets before attackers can. We provide tools for this but cannot intervene directly.

Additional Safeguards and Compliance:

Our security extends to anti-corruption measures, export controls, and age restrictions (Services for 18+ only). In case of breaches, we follow incident response protocols, including notifications per applicable laws (e.g., GDPR principles). Your cooperation is vital—report vulnerabilities via our responsible disclosure program for rewards.

Buburuza™'s security is a shared commitment: we provide cutting-edge tools, but ultimate safety requires your vigilance.

‍

For questions, contact support@buburuza.com.