Security & Trust

Your group’s money, protected

Kibina is built like financial software should be — every figure is traceable, every action is authorised, and every payment is verified.

A tamper-evident ledger

Every contribution, loan, fine and payout is a balanced double-entry transaction. Balances are always derived from this immutable ledger — never an editable number — so the books can’t silently drift, and corrections are posted as visible reversing entries.

Bank-grade sign-in

Passwords are hashed with bcrypt and never stored in plain text. Sessions are signed, http-only cookies JavaScript can’t read, and a password reset instantly ends every other session. Optional Google and Microsoft sign-in use full OpenID Connect verification.

The right person, the right action

Six roles with granular permissions and separation of duties: a treasurer records money, a chairperson approves loans, an auditor sees everything read-only. No one can approve their own loan, and every sensitive action is written to an audit log.

Payments you can trust

Card and mobile-money payments are re-verified directly with the gateway before a single franc is recorded, and settled exactly once — a spoofed or replayed callback can never credit an account.

Your data, your control

Traffic is encrypted end-to-end over HTTPS. You can export everything held about you at any time, and account deletion anonymises your identity while preserving the group’s shared financial history.

Built to be trusted with real money