Compliance Policies

The policies that govern how KAZI protects your data. Published for transparency and for the review of partners and financial data providers. Each page can be saved as a PDF from your browser.

Information Security Policy

Our organization-wide information security program: governance, access control, encryption, incident response and subprocessors.

Access Control Policy

Least-privilege access to production systems and sensitive data, RBAC/RLS, unique accounts, required MFA and access reviews.

Vulnerability Management Policy

How we detect, triage, remediate and monitor security vulnerabilities, including our risk-based remediation SLAs.

Data Retention and Disposal Policy

What data we retain, for how long, and how it is securely disposed of, aligned to GDPR and POPIA.