CAC / KYB Compliance & Payment Gateways
Verify Incorporated Trustees (CAC/IT) or Local Government CBO certificates before unlocking online Paystack, Flutterwave, and Stripe donation webhooks.
2
Online payment gateways locked until verified
2
SCUML / CAC documentation cleared
2
HMAC-SHA512 webhook verification + PCI raw-PAN block
| Organisation | Registration Certificate | KYB Status | Online Donations | Compliance Decision |
|---|---|---|---|---|
Forward Health Initiative National NGO • info@forwardhealth.org.ng | CAC/IT/NO 123456 | Verified | ||
Sahel Resilience & Health Initiative National NGO • hq@sahelresilience.org.ng | CAC/IT/NO 159842 | Verified | ||
Plateau Grassroots Women & Youth CBO CBO (Community-Based) • contact@plateaugrassroots.org.ng | PL/LG/CBO/2021/084 | Pending Review | ||
Grace & Peace Development Commission FBO (Faith-Based) • directorate@gracepeacefbo.org.ng | CAC/IT/NO 094311 | Pending Review |
Payment Gateway Security & PCI-DSS Boundary
NGOFlow never accepts or stores raw card PAN/CVV numbers (`422 PCI_VIOLATION_RAW_CARD_DATA_FORBIDDEN`). All online donations execute via hosted Paystack/Flutterwave checkouts and are verified asynchronously via `HMAC-SHA512` webhook signatures with idempotent reference replay protection.