Genesis Systems Labs& Technologies Limited

The company

An indigenous Nigerian technology company.

Genesis Systems Labs & Technologies Limited was incorporated on 1 February 2026 under the Companies and Allied Matters Act 2020. It is wholly Nigerian-owned, and it designs, develops, deploys and maintains all of its software in-house.

Registered particulars

The company at a glance

Incorporated
1 February 2026
RC number
9271234
DUNS
669828505
Company type
Private company limited by shares
Registered office
Redemption City of God, Mowe, Ogun State
Sector
Enterprise software & digital infrastructure

Objects of the company

What we are constituted to do

As stated in the Memorandum of Association filed with the Corporate Affairs Commission. The objects authorise a scope wider than we presently operate; we describe below which we work within today.

  1. To carry on the business of an integrated systems and technology company — the research, design, development, engineering, manufacturing, testing, deployment and maintenance of software, hardware and digital infrastructure systems for all sectors including defence, banking, education, healthcare, government and manufacturing.
  2. To provide advanced digital and physical technology solutions, including biometric systems, secure payment infrastructure, cybersecurity grids, defence logistics software and autonomous systems, acting as a systems integrator for complex institutional and governmental projects.
  3. To establish and operate advanced research and development laboratories for proprietary intellectual property in artificial intelligence, machine learning, robotics, blockchain, cloud computing and emerging technologies.
  4. To engage in cybersecurity and information assurance — data protection, secure communication channels, digital asset safeguarding and risk management for high-security environments.
  5. To act as technology consultants and systems architects, advising governments and corporations on digital transformation, infrastructure modernisation and large-scale technology implementation.
  6. To manufacture, import, export, supply and deal in technology hardware — servers, biometric scanners, sensors, networking equipment and specialised computing devices.
  7. To carry on data processing, cloud infrastructure management and data centre operations, providing secure hosting and analytics for internal use and third-party clients.

Our current activity falls within objects 1, 3, 4, 5 and 7. Objects 2 and 6 — biometric hardware, payment infrastructure, defence logistics and hardware manufacture — are within our registered scope and our roadmap, but are not part of present operations.

Engineering practice

Discipline enforced in software, not by convention

Continuous integration as the gate

Every change runs the full backend suite, web lint and build, browser-level smoke tests and a mobile unit suite before any deployment is permitted. Deployment is automated and reproducible; no change reaches production by hand.

Automated security scanning

Static analysis, dependency vulnerability auditing across all three ecosystems, and a retained, dated scan history — the artefact an assessor actually asks to see.

Fail-closed authorisation

Access to institutional data is denied unless affirmatively granted. Privacy boundaries are tested adversarially: the boundary preventing a proprietor from reaching any individual student's record was verified against twenty-one distinct attempts to circumvent it. All twenty-one failed.

First-party Python
~143,000 lines
Automated tests
6,700+
Run against
Live PostgreSQL, every change
Coverage floor
Enforced in CI

Technology

What it is built with

Backend and data

Python, Django and Django REST Framework over PostgreSQL, deployed as containers on Google Cloud Run with managed Cloud SQL.

Clients

React and Vite on the web; React Native and Expo for Android and iOS; the WhatsApp Business API as a first-class channel, not an afterthought.

Delivery

GitHub Actions, Google Cloud Build and Artifact Registry; CodeQL, Dependabot, bandit and pip-audit for continuous security surveillance.

Data protection

We are the processor. The institution remains the controller.

GSLTech operates as Data Processor on behalf of subscribing institutions under the Nigeria Data Protection Act 2023, supported by a record of processing activities, an executed data processing agreement with every institution, a breach register, a data subject request log, a sub-processor register and deletion certification on exit.

Credentials

Passwords are hashed and never stored in recoverable form.

Biometrics

Templates are never transmitted to or stored on company servers. Matching happens entirely on the data subject's own device.

Location

Coordinates are discarded the moment a geofence verdict is computed, and never written to any record or log.

Sub-processors: Google Cloud (Belgium) and Amazon Web Services (Ireland).