Security and compliance
Built to protect every payment.
Money and personal data are protected at every step, and every country's rules are part of the design, not an afterthought.
- 01
Encryption
TLS 1.2 or higher on every connection; data encrypted at rest; secrets kept in a hardware-backed key store.
- 02
Card data
Card payments processed through PCI DSS-certified acquiring partners, with 3-D Secure.
- 03
Merchant funds kept apart
Merchant money held in dedicated settlement accounts with licensed banks and operators, never mixed with Zafivo's own.
- 04
Fraud and risk
Real-time rules on amount, speed, device and location; suspicious payments held for review.
- 05
Know your customer
Every merchant verified before going live; sanctions and wallet screening on payouts and crypto transfers.
- 06
Access and audit
Two-factor sign-in, team roles, signed API keys and a full audit log of every change.
- 07
Availability
Redundant hosting, live monitoring of every operator and automatic retries when a provider is slow.
Local rules
Each country's law, followed.
Personal data is handled under each country's data protection law, from Kenya's Data Protection Act 2019 to Tanzania's Personal Data Protection Act 2022.
Payments run through banks and operators licensed in each market. Crypto services are offered only where local law allows them.
Ready to get paid across East Africa?
Tell us where you sell and how your customers pay. We will show you how one integration covers all 19 countries.