Enterprise Trust & Regulatory Governance

Security & Regulatory Compliance

Hillgan Innovations engineers enterprise software built to withstand rigorous international security standards and local regulatory frameworks.

Request Compliance PacketView Technical Security Architecture

Core Compliance Standards

How our engineering and data governance practices align with national mandates and global benchmarks.

Office of the Data Protection Commissioner (ODPC)Registered Data Processor & Controller

Kenya Data Protection Act (KDPA) 2019

Full adherence to statutory data protection principles including consent mechanisms, data subject rights fulfillment, purpose specification, and incident breach notification within 72 hours.

Formally registered with the Kenya ODPC
Designated internal Data Protection Officer (DPO)
Standardized Data Protection Impact Assessments (DPIAs)
Compliant Cross-Border Data Transfer governance
AICPA Trust Services CriteriaContinuous Controls Monitoring

SOC 2 Type II Compliance Framework

Comprehensive operational controls verifying security, availability, processing integrity, and confidentiality across all Hillgan cloud environments.

Automated continuous infrastructure compliance auditing
Zero-trust network architecture with audited bastion hosts
Role-Based Access Control (RBAC) with quarterly privilege audits
Automated multi-region database failover testing
International Organization for StandardizationInformation Security Management System (ISMS)

ISO/IEC 27001 Security Management

Systematic information security management protocols protecting codebases, client databases, and employee operational processes.

Formal vulnerability disclosure and bug bounty protocols
Mandatory annual third-party penetration testing
Encrypted off-site disaster recovery backups
Staff cybersecurity awareness training & simulated phishing
KRA Domestic Taxes DepartmentAutomated Tax Compliance

Kenya Revenue Authority eTIMS Fiscal Compliance

Direct fiscal signing integration with the KRA electronic Tax Invoice Management System (eTIMS) across KaziPOS, KaziDesk, and custom billing modules.

Cryptographically signed fiscal receipts & invoices in real time
Automated QR code generation on all checkout slips
End-of-day electronic sales ledger reconciliation
Offline buffering with guaranteed re-sync upon connectivity

Cryptographic & Infrastructure Controls

Built directly into the core code of KaziDesk, KaziPOS, KaziAfya, and our custom platforms.

Encryption in Transit & at Rest

All network traffic is encrypted via TLS 1.3 with HSTS enabled. Client storage volumes and SQL databases are encrypted at rest using AES-256 with managed KMS keys.

Data Residency & Sovereignty

For public sector and sensitive financial clients, Hillgan provisions workloads in local Kenyan cloud data centers to guarantee in-country data residency.

Immutable Audit Logging

Every administrative login, record modification, and payment event generates tamper-evident, append-only logs ingested into centralized SIEM clusters.

Business Continuity & RTO/RPO

Recovery Time Objective (RTO) under 1 hour and Recovery Point Objective (RPO) under 5 minutes through automated snapshot streaming.

Enterprise Vendor Due Diligence

Require an Information Security questionnaire, DPIA sign-off, or custom SOC 2 audit report for your board or risk committee?

Request Security Audit PacketSpeak with Security Officer