Security & privacy

Security at every layer

Financial data demands the highest level of protection. Our security architecture is designed for defence in depth, keeping your data private, encrypted and under your control.

  • AES-256Encryption at rest
  • TLS 1.3Encryption in transit
  • SOC 2 Type IIIn progress
  • GDPR · POPIACompliant

Data Protection

All financial data is encrypted at rest using AES-256 and in transit using TLS 1.3. We implement strict data isolation between tenants and enforce zero-retention policies on raw transaction data.

  • AES-256 encryption at rest
  • TLS 1.3 encryption in transit
  • Multi-tenant data isolation
  • Zero-retention on raw PII

Encryption Architecture

Our encryption infrastructure is designed for defense in depth. We use hardware security modules for key management, and implement field-level encryption on all sensitive financial data.

  • Hardware security modules (HSM)
  • Field-level data encryption
  • Automated key rotation
  • End-to-end encrypted pipelines

AI Privacy

Our AI models are trained on aggregated, anonymized financial patterns, never on individual user data. Model outputs are deterministic and auditable, ensuring transparency in financial reasoning.

  • Training on anonymized patterns only
  • No individual data in model weights
  • Auditable reasoning chains
  • Bias detection & monitoring

User Control

Users have complete control over their data. Export, delete, or restrict processing at any time. We provide granular privacy controls and full GDPR/POPIA compliance.

  • Full data export & deletion
  • Granular privacy controls
  • GDPR & POPIA compliant
  • Transparent data processing
Compliance

Where we stand today

We publish our certification status honestly, including what is still in progress.

  • SOC 2 Type II

    In progress

    Controls implemented; audit window underway.

  • GDPR

    Compliant

    Data subject rights, DPAs and transfer safeguards in place.

  • Kenya DPA 2019

    Compliant

    ODPC-aligned processing, retention and consent controls.

Have security questions?

Our security team is available to discuss your requirements.

Contact the security team