Compliance

Compliance Built Into How the Platform Works

Property management touches personal data and tax records every day. Oxflare gives you the tools to handle both responsibly.

Good Practice Built In

Controls That Make Compliance Easier

NeedHow Oxflare helps
Limit who sees personal dataRoles and permissions, property-level scoping, and owners who never see tenant phone numbers or IDs.
Keep records securePrivate file storage served only after an access check; encrypted credentials; HTTPS-ready security headers.
Show who did whatAn audit log of sensitive actions with before and after values.
Keep a true financial historyPayments are reversed, never deleted; invoices are cancelled with a reason; credit notes keep the original.
Protect accountsTwo-factor sign-in, throttled login, sign-out-everywhere and password reset by SMS code.
Recover from problemsNightly verified database backups, weekly file archives and a restore drill that checks backups without touching live data.
Be Clear About Roles

Who Is Responsible for What

Each organization that uses Oxflare decides why and how its tenants' and owners' personal data is used. That makes the organization the party responsible for that data under Kenyan data protection law, with Oxflare acting as a service provider on its behalf. We recommend that every organization registers with the relevant authority where required, issues a clear notice to tenants, and keeps only the data it needs.

Tax obligations, including rental income tax, VAT and eTIMS, depend on your circumstances. Oxflare records and reports accurately, but it does not replace advice from a qualified tax professional.

Questions About Compliance?

Ask us how Oxflare fits your organization's obligations.

Encrypted credentials M-Pesa and SMS keys encrypted at rest
Tenant isolation Every organization's data is separate
Built for Kenya KSh, M-Pesa, KRA and DPA-aware
Full audit trail Sensitive actions are logged