Security

How we protect access to your banks, in plain language. And what we cannot claim yet.

Zero custody during the pilot

During the pilot phase Ligo does not hold funds and does not store your banking data. Data passes through Ligo to reach your system in a common format, and it does not stay with us.
You hold the keys

Your bank issues the credentials to your company. You decide when they are used, and you can revoke them at your bank whenever you decide.
A single egress IP

Every call Ligo makes to a bank leaves from one IP address. That lets your bank restrict access to that address.
Encryption in transit

Communication between your system, Ligo and the banks is encrypted.
Law 81 on personal data protection

We take Panama’s Law 81 of 2019 as our baseline for handling personal data: we ask only for what we need, use it for the purpose we told you, and respond to your requests for access, rectification, cancellation, objection and portability.
What we do not claim

Ligo is in its pilot phase. We do not hold certifications such as SOC 2 or ISO 27001, and we do not offer service-level agreements. If that changes, we will publish it on this page.

Responsible disclosure

Found a vulnerability? Write to us with the steps to reproduce it, and give us reasonable time to fix it before making it public.