Data Governance & Privacy // Founded 2023
Privacy & Data Architecture.
At Hirall Solutions, we treat data privacy and encryption as primary engineering protocols, fully adhering to the Kenya Data Protection Act (KDPA) 2019.
01. Information Processing Scope
We process only technical and transaction metadata required to operate cloud applications and point-of-sale systems:
- Transaction Telemetry: M-Pesa receipt codes, transaction reference IDs, and timestamp hashes for auto-reconciliation.
- System Health: Server latency logs, offline cache synchronizer queues, and hardware diagnostic pings.
- Access Credentials: Encrypted hashed passwords and role-based access tokens.
02. Cryptographic Security & Tenant Isolation
We enforce strict institutional security baselines across every deployment:
- PostgreSQL Row-Level Security (RLS) ensuring strict cross-tenant data isolation.
- HMAC-SHA256 signature verification preventing forged payment or webhook injections.
- Encrypted daily database backups stored in isolated geographic cloud regions.
Data Protection Officer Contact: hirallsolutionske@gmail.com • Gala Lane, Nairobi, Kenya