For Banks and Financial Institutions
Voice infrastructure your technology, security and risk teams can approve.
Keep your contact-centre platform, PBX, phone numbers and enterprise systems. Signals provides managed SIP trunking, programmable voice, enterprise recording and retention, and voice integration on locally hosted infrastructure.
ISO/IEC 27001:2022-certified ISMS · Delivered under an NCC licence · Hosted in Nigeria
Enterprise scale
Provisioned to workload
Capacity figure is current platform capacity, not current traffic.
A. Architecture
Where Signals sits in your call path.
Outbound and inbound calls
Bank contact centre or PBX
Signals SIP Access (managed SIP trunking)
Phone networks
Completed-call data
Completed calls
Signals Omni
CRM, BI, QA, compliance and internal systems
Your platform, numbers and internal systems stay in place. An enterprise integration review confirms how Signals fits your current architecture and call path.
B. Application and enterprise architecture
Programmable access without replacing your stack.
Existing systems stay
Your contact-centre platform, PBX, softphones, CRM and internal systems remain in place. Signals supplies the telephony layer beneath them.
SIP and API side by side
Signals SIP Access carries platform traffic while Signals Programmable Voice (Twilio Compatible) handles call flows your own software controls.
OneML and webhooks
OneML is Signals' call-control markup language, derived from TwiML and compatible with supported TwiML applications. Webhooks and callbacks report call state to your services.
Clear Omni boundary
Signals Omni delivers call-completed webhooks, the Call Data API and authorised recording access. Your systems perform any analysis of that data.
C. Network and infrastructure
Managed connectivity with visibility your NOC can use.
- Signals SIP Access is a managed infrastructure service: provisioned by Signals, configured by your technical team.
- Numbers can be purchased from multiple Nigerian providers and managed through one Signals account, with control of the originating number per workload.
- Real-time network-performance visibility and transparent call logs across six connected telco networks.
- Current platform capacity is five million calls per day, with channel and concurrency capacity provisioned to your expected traffic.
- Controlled migration: trunks, numbers and routing are cut over in stages rather than in a single switch.
D. Information security and data protection
Evidence for your security and data-protection reviewers.
- Signals operates within an ISO/IEC 27001:2022-certified information security management system, certified for Software Development and Information Technology Services.
- NDPC registration as a Data Controller/Processor of Major Importance, and the completed 2025 Data Protection Audit, evidenced during enterprise vendor due diligence.
- Telecommunications services delivered under an NCC licence.
- Data encrypted in transit and at rest, with MFA, RBAC and audit logs available.
- Annual penetration testing, a data processing agreement and a documented breach-management and notification process.
Local data map
E. Regulatory alignment
Built for the obligations you carry.
Under the Nigerian regime, accountability for an outsourced function stays with the regulated institution. Signals does not take on your regulatory obligations. Signals is accountable to you, contractually, for the evidence, controls, service levels and cooperation you need in order to discharge them.
CBN Risk-Based Cybersecurity Framework
The Central Bank of Nigeria's risk-based cybersecurity framework and guidelines set expectations for third-party and vendor risk management, security provisions in vendor contracts, and the escalation of cyber incidents. Signals is engaged as a service provider under those expectations, not as a supervised institution.
CBN Guidelines on Shared Services Arrangements
Arrangements in which a bank relies on an external provider are expected to rest on documented due diligence, board-approved risk assessment and defined service arrangements. Signals supplies the evidence and contractual terms that support that assessment.
CBN Consumer Protection Regulations
Complaint handling, evidence of customer interactions and record-keeping remain the bank's responsibility. Signals provides call records, authorised recording access and completed-call data so that evidence can be produced from the bank's own systems.
Nigeria Data Protection Act 2023 and NDPC GAID 2025
Where Signals processes personal data on your instruction, it does so as a data processor under a data processing agreement, with defined security obligations, notification of personal-data breaches to you as controller, and transfer conditions where any cross-border processing applies.
Data localisation for payment data
The Central Bank of Nigeria has directed that payment transaction data generated in Nigeria be stored and managed locally. Core production voice data on Signals — recordings, call detail records, KYC data, API logs, primary backups and disaster-recovery copies — is already hosted in Nigerian data centres.
Your obligation · What Signals supplies
- Vendor due diligence
- An enterprise assurance pack covering ISO/IEC 27001:2022 evidence, data-protection evidence, architecture and data-flow summary, penetration-testing information and a completed security questionnaire.
- Security provisions in the vendor contract
- Encryption in transit and at rest, MFA, role-based access control and audit logs, with the corresponding contractual security terms.
- Incident escalation and reporting
- Defined incident classification, named technical ownership and contractual notification to you, so your own regulatory reporting can be made within your timelines. Signals does not report on your behalf.
- Audit and inspection
- Customer audit rights and regulator inspection cooperation agreed contractually as part of the enterprise agreement.
- Business continuity and resilience
- Nigeria-hosted primary and geographically separated disaster-recovery infrastructure, tested failover, documented RTO and RPO, and a contract-backed platform SLA.
- Data protection and residency
- A data processing agreement, core production voice data hosted in Nigerian data centres, call recordings held in Nigeria with no cross-border replication, and a documented breach-management and notification process.
- Records, complaints and dispute evidence
- Call records, authorised recording access and completed-call data delivered into your CRM, BI, QA and compliance systems, where your systems perform the analysis and retain the evidence.
- Subcontracting transparency
- A service-provider and subprocessor schedule supplied with the enterprise data-processing documentation.
- Exit and transition
- Documented exit terms, export of recordings and call data through the API or dashboard, and agreed data return or deletion at the end of the agreement.
Outsourcing terms Signals is prepared to accept.
- Defined service levels, including a contract-backed 99.99% platform SLA and agreed escalation paths.
- Incident notification to you, on defined terms, so that your own regulatory reporting can be made within your timelines.
- Customer audit rights, and cooperation with inspections and information requests made by your regulator.
- Disclosure of the service providers and subprocessors used in delivering the service.
- Business continuity and disaster-recovery evidence, including tested failover and documented RTO and RPO.
- A data processing agreement, with defined roles, security obligations and breach-notification terms.
- Data location commitments for core production voice data, including recordings held in Nigeria without cross-border replication.
- A documented exit and transition plan, covering export of recordings and call data and the return or deletion of data.
What Signals does not claim.
- Signals is not licensed, approved, certified or supervised by the Central Bank of Nigeria.
- Signals does not assume your regulatory obligations and does not make regulatory notifications on your behalf.
- Signals does not provide legal or regulatory advice, and nothing here is a substitute for your own compliance assessment.
- Regulatory positions are confirmed in the enterprise agreement, the data processing agreement and your integration review, not by this page.
F. Contact centre and operations
Recording and retention sized to your obligations.
- Enterprise recording capacity has no fixed public ceiling. Capacity is provisioned to match expected traffic, in the same way SIP channel capacity is.
- Enterprise agreements support configurable multi-year retention aligned with your regulatory, legal and internal obligations.
- Active storage holds the working window. Older recordings can be archived automatically to lower-cost storage with defined retrieval SLAs.
- Authorised users can export recordings through the API or the dashboard before scheduled deletion.
- Retention can be configured per customer and per use case.
- Recording and storage pricing is transparent and usage-based. Extended retention and archival storage are separately scoped add-ons.
G. IT management and vendor risk
What goes into your vendor file.
Availability
Enterprise agreements carry a 99.99% platform SLA.
Continuity
Nigeria-hosted primary and geographically separated disaster-recovery infrastructure, tested failover and documented RTO and RPO.
Support and escalation
Standard support operates from 8:00 a.m. to 5:00 p.m. WAT on business days. P1 and P2 production incidents receive 24/7 response, and enterprise escalation arrangements are defined contractually.
Evidence pack
ISO evidence, data-protection evidence, DPA, security questionnaire, penetration-testing information, architecture and data-flow summary, BCP/DR summary, SLA and service-provider schedule.
Operating record
99.99% platform uptime, more than 5,000 customers served and production operating experience from PressOne.
Commercials
Transparent, usage-based call, recording and storage pricing, with extended retention scoped as an add-on.
Operating Model
Critical voice workloads receive a critical operating model.
Bank deployments include 24/7 response for production-critical incidents, named technical ownership, proactive service monitoring, controlled production activation and contract-backed service levels.
Application management
Controlled changes, incident communication and accountable technical ownership
Network and infrastructure
Direct escalation, active monitoring and coordinated response across the service path
IT management
99.99% SLA, defined severity levels and service reporting
Security and risk
Documented incidents, root-cause reports and controlled operational procedures
Contact-centre operations
Capacity planning, production hypercare and rapid escalation when calling is disrupted
The bank keeps its applications and customer operations. Signals operates the voice infrastructure underneath them.
H. Workloads
What banks run on Signals.
- Customer service calls from the contact centre.
- Lawful collections and repayment follow-up.
- Sales and relationship-management calls.
- Verification and confirmation calls.
- Automated callbacks triggered by events in your systems.
- Dispute evidence, through authorised access to call recordings and call records.
- Delivery of completed-call data into CRM, BI, QA and compliance systems via Signals Omni, where those systems perform the analysis.
I. Controlled implementation
Move one critical workload first. Expand without changing infrastructure.
- 01Technical discovery with your architecture, network, security and operations teams.
- 02Scope one queue, campaign, number or workload as the first production slice.
- 03Provision trunks, numbers and recording capacity for that slice.
- 04Run it in production and review call quality, logs, recording and integration output.
- 05Expand across queues, sites and workloads on the same contract and platform.
Next step
Bring your evaluation team to the table.
Technical discovery is a working session with our engineers. The enterprise security pack can be sent to your security, data-protection and vendor-risk reviewers in parallel.