nigerian-fintech-compliance-architect

Use the pure computation kernel functions: computeVAT applies 7.5% for standard-rated supplies (0% for zero-rated and exempt), and computeWHT applies category-specific rates such as 10% for rent and dividends or 5% for resident professional fees. Both return rounded amounts with no side effects.

Submit invoices to the FIRS TaxPro-Max endpoint with an HMAC-SHA256 signed payload, Bearer token, and X-TIN header. The integration retries failed calls with exponential backoff up to three attempts and returns an IRN and QR code for accepted invoices.

TIN, BVN, and NIN are each exactly 11 digits. CAC registration numbers start with RC, BN, or IT followed by 5 to 7 digits, such as RC123456. Nigerian phone numbers use a +234 or 0 prefix followed by 10 digits starting with 7, 8, or 9.

Yes, Lagos Pidgin (pcm) is treated as a first-class locale alongside English. Every user-facing message key must have both en and pcm translations, with a type-safe translation hook that falls back to English when a key is missing.

NDPR requires explicit consent and data minimization for PII. BVN, NIN, TIN, phone, email, and address fields must be masked in logs and API responses using a pattern that shows only the first three and last two characters.

The FIRS API is often slow, so calls need retry with exponential backoff capped at three attempts. Submissions require idempotency via the invoice reference as a deduplication key, and all records must be retained for the 6-year FIRS audit requirement.