Terms of Use

1. Legal & Regulatory Agreement

By accessing or using the Digital Financial Flow Monitoring System (DFFMS), you agree to be bound by these Terms of Use and all applicable federal and state laws, regulations, and guidelines in the Federal Republic of Nigeria. This platform is operated by the National Co-ordination Office (NCO) of the Special Agro-Industrial Processing Zones (SAPZ) programme, which runs under the supervision of the Federal Ministry of Agriculture and Food Security (FMAFS). If you do not agree to these terms, you are prohibited from accessing the secure operational areas of the application.

2. Access Controls & Privileged Credentials

DFFMS operates on a strict identity governance framework. Public discovery layers are open to the public, but access to the secure general ledger, transactions database, and program intelligence dashboards is privileged:

• Invite-Only Registration: Accounts for state coordinators, commercial bank representatives, and development finance operators are created solely through official invitation tokens issued by the NCO. Self-registration is disabled for secure roles.
• Credential Safeguarding: Users are solely responsible for maintaining the confidentiality of their passwords, authentication devices, and multi-factor setup. Any activity originating from your authenticated session is legally attributed to you.
• Multi-Factor Authentication (MFA): Staff MFA enrolment is governed by the Platform Super Administrator’s security policy. Stronger verification remains mandatory for sensitive financial actions when prompted.
• Credential Sharing: Sharing user accounts, passwords, or MFA tokens between Entry Officers, State focal persons, or third parties is strictly prohibited. Violations will result in immediate revocation of system privileges and a security review.

3. Multi-Tenant Separation & Scope Enforcement

DFFMS is a multi-tenant platform designed to partition operational scopes among the 7 pilot states/zones (Kwara, Kaduna, Oyo, Ogun, Imo, Cross River, and FCT Abuja) and their participating institutions:

Users are assigned a specific organizational or state tenant scope. Attempting to bypass, alter, or inject parameters into database queries to access resources outside your authorized tenant boundary violates these terms. System operators monitor database telemetry for query isolation anomalies.

4. Immutable Ledger Rules & Transaction Reversals

All financial operations posted on DFFMS are integrated with a double-entry append-only database schema:

• Immutable Records: Once a transaction, disbursement, or grant allocation is checker-approved and posted, it cannot be modified, deleted, or overridden.
• Corrective Entries: To resolve errors or typos, users must submit a linked 'Reversal' or 'Adjustment' entry. Both the original error and the correction remain permanently visible in the audit trail.
• Evidence-Linked Posting: Financial postings must be backed by verifiable evidence of physical execution (such as equipment supply photos, geo-tagged crop aggregation weights, or farmer receipts) uploaded to the platform.

5. Maker-Checker Authorization & Governance Protocol

To enforce fiscal responsibility and comply with multilateral development bank guidelines, all critical actions (disbursements, approvals, provider changes, user invitations) must follow the Maker-Checker governance protocol:

• A Finance Entry Officer (the Maker) inputs and packages the transaction details.
• A distinct, authorized Finance Approver (the Checker) reviews the inputs and signs off to release the fund.
• An individual user cannot act as both Maker and Checker for the same transaction block. Attempting to manipulate session states to bypass dual-authorization is a serious breach of platform rules.

6. Acceptable Use Policy & System Integrity

You agree to use DFFMS only for authorized professional activities related to the SAPZ programme. You shall not:

• Use the platform to upload or transmit fraudulent financial details, fictitious beneficiary names, or falsified project coordinates.
• Introduce viruses, trojans, worms, logic bombs, or other malicious code.
• Attempt to gain unauthorized access to the application, its PostgreSQL database, deployment infrastructure, or connected providers.
• Conduct automated vulnerability scanning, pen testing, or data scraping without explicit, written authorization from the National Coordination Office.

7. System Monitoring, Telemetry & Audit Log Consent

To guarantee transparency and comply with international anti-corruption standards, the NCO tracks all activity on DFFMS. By using the platform, you explicitly consent to:

• The immutable logging of your IP address, browser footprint, login timestamps, and geolocation attributes.
• The capture of audit logs mapping every single data insertion, update, export request, and document download.
• Real-time database performance and security telemetry analysis.

8. Liability Limitation & Third-Party Integrations

DFFMS relies on critical third-party service providers (such as Paystack and Flutterwave for payments, Resend for transactional emails, and Termii for SMS OTP delivery). While the NCO makes every effort to ensure continuous system availability:

• The platform is provided on an "AS IS" and "AS AVAILABLE" basis without warranties of any kind.
• The NCO, FMAFS, and technical operators are not liable for delayed disbursements, loss of data, or operational downtime resulting from third-party network failures, serverless cold-starts, or upstream database pooling lag.

9. Suspension, Revocation & Account Deactivation

The NCO reserves the right, in its sole discretion, to suspend or deactivate any user account, state coordination access, or partner bank portal access without prior notice if we detect:

• Bypassing or attempting to bypass security filters.
• Persistent Maker-Checker collisions.
• Submission of falsified evidence logs.
• Account inactivity exceeding 90 days.

10. Governing Law, Dispute Resolution & Administrative Jurisdiction

These Terms of Use shall be governed by, construed, and enforced in accordance with the laws of the Federal Republic of Nigeria. Any disputes arising from the use of the platform, data integrity conflicts, or access revocations shall be referred to administrative resolution under the Federal Ministry of Agriculture and Food Security (FMAFS) and, if unresolved, shall be subject to the exclusive jurisdiction of the Federal High Court in Abuja, Nigeria.