Security

Signing in

To sign in to your customer account, we text a one-time code to the phone number on your account. Codes expire after a short time, so keep your phone secure and never share a code with anyone, including people who say they work for GrayDocket.

Your business records

Your connection to GrayDocket uses HTTPS. We use Supabase to store account and application records. Upload identity documents through the application form rather than sending them in an unsolicited message. Our privacy policy explains how we handle your information.

Who can see your applications

You can manage your applications from your dashboard. Authorised GrayDocket administrators, access records to process applications and provide support. We share details with government agencies like the ORC to complete the services you request.

Paying safely

Start payments from your GrayDocket application using the Paystack checkout. We will never ask you to send your mobile money PIN, card PIN, password or sign-in code over email or WhatsApp. If a payment looks unfamiliar, contact support before paying again.

Keep your account safe

• Keep the phone and SIM used for sign-in secure, and sign out on shared devices.
• Check the website address before entering a code or starting a payment.
• If you lose access to your phone number, contact support for help before creating another account.

Reporting a security issue

If you notice anything suspicious on your account, or believe you've found a security issue, email support@graydocket.com with the subject “Security concern”. Include the affected page, what happened, and when you noticed it. Redact personal details from screenshots, and never include passwords, sign-in codes or payment PINs.