M-Penny's timing isn't an accident. Five converging shifts create a once-in-a-decade window for an accounting-first fintech.
KRA now requires every business to report digitally. Compliance is mandatory. Penalties enforced. KRA is doing M-Penny's marketing.
The Digital Credit Provider regulation is now mature with 227 licensed providers — the lending path is clear and tested. Three years ago it didn't exist.
Kenya crossed 65% smartphone penetration in 2025, with sub-KSh 5,000 Android devices ubiquitous. Combined with USSD, M-Penny reaches every business.
M-Pesa volumes grew 40%+. MSMEs that resisted digital tools for years are now asking for them. The cultural barrier is broken.
CBK's monthly rate ceiling squeezes operators who rely on expensive phone-data scoring. The regulation favours data-rich lenders — and M-Penny's accounting moat compounds with every transaction recorded.
A finance-and-regulation specialist building M-Penny end-to-end — the tax logic, the double-entry accounting engine, and the product itself. Years immersed in Kenyan tax administration, eTIMS and SME compliance, paired with professional accountancy, business strategy and active research in SME finance.
Financial data demands financial-grade security. Every layer of M-Penny is built for regulatory inspection — because in fintech, trust is the product.
AES-256 at rest with HashiCorp Vault key rotation. TLS 1.3 in transit. Certificate pinning on the mobile client to defeat MITM attacks.
Servers in AWS Cape Town and Azure South Africa. Your financial data never leaves the continent. Low-latency, regulator-friendly, in line with data-residency expectations.
Data Protection Officer appointed and registered with ODPC. Full data-subject rights baked in: access, rectification, erasure, portability. 72-hour breach notification policy.
Phase 2 lending operates under a Central Bank of Kenya Digital Credit Provider licence. CRB reporting to TransUnion, Metropol, Creditinfo. CBK 4%/month rate cap never exceeded.
Real-time integration with KRA's electronic tax invoice system. HMAC-signed webhook verification. Local invoice queue for offline filing — receipts post the moment connectivity returns.
Annual penetration testing by a CREST-certified firm. SOC2 Type II by Year 2. Immutable, append-only audit log of every financial operation. Cyber-insurance coverage from Day 1 of public launch.
Start free. Connect M-Pesa. Watch your credit score climb. When you're ready for capital, M-Penny knows you can pay it back.