Security & Data Protection
Your financial data, protected
Invoices, company details and bank information are sensitive. This page explains how the Credit Plus platform protects them and who can see them.
Security measures on the platform
Encrypted connections
All traffic to the website and the platform is encrypted with HTTPS/TLS.
Encryption at rest
Sensitive fields are encrypted in storage, and passwords are stored only as secure hashes.
Role-based access
Each user sees only what their role and permissions allow, with the session validated on every request.
Protection against attacks
Every sign-in needs a one-time code sent to the registered mobile number, and sign-in attempts are rate-limited to block password guessing.
Activity logging
Platform activity is logged, and records are soft-deleted first so transaction history and audit trails stay intact.
Verified invoices
Invoices are verified and confirmed with the buyer before they can be financed.
Hosting and service providers
The platform is hosted on Amazon Web Services (AWS), which also delivers our emails. Push notifications are sent through Google Firebase Cloud Messaging, and one-time passcodes through our SMS gateway provider. Where these providers process data outside Jordan, we require a level of protection consistent with our Privacy Policy and Jordanian law.
Who can see your data
- Banks and licensed financial institutions, to evaluate and execute the financing requests you submit.
- The buyer or supplier on the other side of a transaction, limited to what that transaction needs.
- Official registries and identity-verification sources, to confirm your company information.
- Competent authorities, courts or regulators, only where the law requires it.
Our regulatory position
Credit Plus is operated by Al Rahaloon for Information Technology LLC, registered in the Hashemite Kingdom of Jordan. Credit Plus is not a bank or a financing provider: the platform connects buyers, suppliers and licensed financing institutions, and all financing is provided by those licensed institutions.
Your rights
You can request access to, correction or deletion of your personal data. Read the full details in our Privacy Policy, or contact us at info@credit-plus.me.
Read the Privacy Policy