Compliance Overview

StackHR is built to support African businesses operating under Nigerian regulation. We design our product and data practices to align with the National Data Protection Act 2023 (NDPA) and build payroll features that support statutory obligations.

This page summarises the principles we follow. It is not a legal certificate or audit report. If you have specific compliance requirements for your organisation, please contact us — we are happy to discuss how StackHR supports your obligations.

The Nigeria Data Protection Act 2023 sets out principles governing how personal data must be collected, stored, processed, and shared. StackHR follows these principles in its product design:

• Data minimisation: We collect only the personal data needed to deliver the service. We do not collect data we do not use.
• Purpose limitation: Data collected for payroll processing is used only for that purpose and related statutory obligations — not for unrelated commercial purposes.
• Security safeguards: Sensitive personal data, including NIN and BVN, is encrypted in transit and at rest. Access is restricted to authorised personnel and systems.
• Data subject rights: Employees and account holders can request access to, correction of, or deletion of their personal data. See our Privacy Policy for how to submit such requests.
• Lawful basis for processing: We process payroll-related personal data on the basis of contractual necessity (to perform the service you have engaged us to provide) and compliance with legal obligations under Nigerian labour and tax law.

StackHR has not yet undergone a formal NDPA certification audit. We follow NDPA principles as a core part of our product design and will pursue formal compliance assessment as we scale beyond the beta cohort.

StackHR is designed to help your organisation meet Nigerian payroll and statutory obligations, including:

• PAYE (Pay As You Earn) calculations for Nigerian employees, based on current tax tables.
• Statutory deduction support, including pension contributions under the Pension Reform Act.
• Payroll records and audit trails to support record-keeping obligations.

These are product features that support your compliance obligations, not a legal guarantee of compliance for your specific situation. Tax regulations change and may vary by employee circumstance. You remain responsible for verifying that your payroll configuration is correct and up to date. We recommend reviewing payroll outputs with a qualified accountant or tax adviser.

We take the following steps to protect the integrity and confidentiality of data on the platform:

• Encryption of sensitive fields (NIN, BVN, bank details) in transit and at rest.
• Row-level data isolation — each organisation's data is isolated at the database layer, not just at the application layer.
• Access controls restricting internal access to customer data.
• Regular backups to prevent data loss.

For a full description of how we process and store data, see our Data Processing Overview.

• Privacy Policy — what data we collect and your rights as a data subject.
• Data Processing Overview — where data is stored, isolation, retention, and sub-processors.
• Terms of Service — your agreement with StackHR as a customer.

For compliance questions, contact us at hello@stackhr.app or privacy@stackhr.app.