Security & trust

What protects your money and your work

Every claim on this page names the mechanism behind it. We don't describe this platform as “bank-grade” or “military-grade” — those phrases can't be checked, which is why they get used. These can.

Four gates before you're exposed to risk

A job passes all four. Each one is enforced on our servers, not in the browser — the difference between a rule and a suggestion.

1

Identity

Every professional verifies a government ID before they can be assigned paid work.

Documents go to private storage and are never served from a public URL — a reviewer opens one through a link that expires in thirty minutes, and the storage path is read from the record rather than the request, so a valid session cannot be used to walk the bucket.

2

Capability

Nobody is assigned work they have not been assessed in, per skill and per language.

The check runs on the server, on both the apply and claim routes, against the same function the interface uses — so a hidden button is not the control. Passing Swahili demonstrates nothing about Amharic and the gate treats them separately. A human specialist sets the pass; the AI marks and recommends.

3

Quality

Delivered work is checked twice before you see it: once automatically, once by a person.

An AI pre-check reads every submission against the brief and flags gaps. A member of our team then approves or rejects it. Payment to the professional is released by that approval and not before, which is what makes the check real rather than advisory.

4

Payment routing

Attempts to move a job off-platform are blocked in the places they are attempted.

Pitches, deliverables, appeals and messages are screened for phone numbers and payment handles. This protects the professional more than it protects us: off-platform work has no escrow, no quality review and no record if they are not paid.

How the money is handled

GetNexus Mali is the accounting layer underneath every payment. It is built on the assumption that we ourselves might make a mistake, or be compromised.

The ledger cannot be edited

Every movement of money is a double-entry record that can be added to and never changed.

UPDATE and DELETE are blocked by database triggers, including for our own service credentials. A correction is posted as a reversing entry, so the original and the correction are both permanently visible. Nobody at GetNexus — including whoever holds the highest level of access — can quietly alter a payment record.

Payments cannot be posted twice

Every posting carries an idempotency key.

A retried webhook, a double-clicked button or a provider sending the same confirmation twice results in one entry, not two. The same key governs whether a payout has been charged, so the request route, the admin send route and the provider webhook cannot disagree about it.

Balances are reserved atomically

Two withdrawals requested at the same instant cannot both claim the same balance.

The reservation re-checks availability inside a single database statement. If the balance moved in between, the request is cancelled rather than left pending against money that is no longer there.

Unusual patterns wait for a human

Payout velocity, structuring, dormant-account spikes and round-figure patterns are monitored.

A payout that trips monitoring is reserved and reviewed by a person before it is sent, and the worker is told that is what is happening rather than being given a deadline we would then miss. Limits scale with how much identity verification an account has completed.

Nothing autonomous touches the money

Our seven internal AI agents cannot write to a business table.

They propose. Every proposed action sits in a queue as pending until a person approves it. There is no configuration in which an agent pays someone, assigns work, changes a rate or alters an account — the approval step is not a setting that can be switched off.

The pattern, stated once

AI narrows the field and forms an opinion. A person makes every decision that moves money, grants access, or affects someone's livelihood.

That isn't a limitation we're working around — it's the reason this platform can be trusted at a 17.9% effective fee (12% on your side) while incumbents charge 20% and more. The expensive part of a marketplace is vetting and triage. We automated that, not the judgement.

What we don't claim

Being straight about the edges is more useful to you than pretending there aren't any.

  • —We are not a bank and we do not hold your money as a deposit. Balances owed to professionals are obligations recorded in the ledger, and they are paid out rather than encouraged to sit.
  • —Automatic payouts are live in Kenya. Other corridors are reviewed and sent by our team, which takes longer and is stated plainly at the point of request rather than promised and missed.
  • —Reconciliation against provider statements is done by a person today. It is accurate and it is slower than it will be.
  • —No system is unbreachable. What we can tell you is that a breach of our own systems still cannot rewrite a payment record, because the records reject being rewritten.