Security
Your data. Our obsession.
Every DukaPro decision starts with the security of the businesses that trust us. Here's how we protect you.
How we protect you
Six pillars of security.
Cloud Security
ISO-27001 certified data centres, primary replicas in Kenya, disaster recovery in Frankfurt.
Encrypted Data
AES-256 at rest, TLS 1.3 in transit. No exceptions.
Automatic Backups
Every second, your data is mirrored — plus daily snapshots kept for 90 days.
Secure Login
Passwords, PIN, and biometric login on mobile. Optional 2FA everywhere.
Permissions
Granular per-user access — cashiers see the till, owners see everything.
Role Management
Owner, Manager, Cashier, Accountant — assign, revoke, or customise.
99.98%
Uptime, trailing 12 months
0
Security breaches to date
<15 min
Median recovery time
Compliance
Kenya's Data Protection Act, ready.
DukaPro is registered with the Office of the Data Protection Commissioner and operates a formal DPO function.
- ✓Registered Data Controller — ODPC No. XX-YYY
- ✓Data Protection Officer — dpo@dukapro.co.ke
- ✓Annual third-party penetration test
- ✓SOC 2 Type II — in progress
- ✓PCI-DSS compliant payment integrations
Ready to transform your business?
Join 5,000+ Kenyan businesses running smoother, selling more, and growing faster with DukaPro.