A finance-and-regulation specialist building M-Penny end-to-end — the tax logic, the double-entry accounting engine, and the product itself. Years immersed in Kenyan tax administration, eTIMS and SME compliance, paired with professional accountancy, business strategy and active research in SME finance.
Financial data deserves care. Here is exactly how M-Penny protects yours — nothing on this page is claimed that the platform does not do today.
Every connection to M-Penny is encrypted (HTTPS/TLS). The most sensitive details — ID numbers, KRA PINs, bank account numbers, connected-account tokens — are encrypted by M-Penny itself before they are stored, and your KRA PIN is looked up by a one-way index, never in the clear.
Your books are stored and processed in cloud data centres in Cape Town. Some services we use are based outside Africa, mostly in the United States — email delivery, Penny AI and video calls among them — and each receives only what it needs to do its job, under the safeguards the Data Protection Act requires. Our Privacy Policy names them.
Natcrest Holdings Company Ltd is registered with the Office of the Data Protection Commissioner, both as a data controller and as a data processor, to 19 August 2028. The most sensitive identifiers (ID numbers, KRA PINs, bank account numbers) are encrypted at rest and your KRA PIN is indexed blind, so it is never stored in the clear. Marketing consent is opt-in, recorded with its source and withdrawable. No merchant, customer or partner sees another party's data. Your rights under the Act are set out in our Privacy Policy.
When credit opens on M-Penny, it will come from licensed lenders: before you accept, you will see who the lender is, the full cost of the credit and how it is repaid, and repayments go straight to that lender’s own account. M-Penny is not a lender, and credit is not yet open.
Your invoices are filed with KRA's electronic tax invoice system through a KRA-approved integrator, and KRA's control unit details are printed on each invoice KRA accepts. M-Penny's own direct KRA integration has passed KRA's sandbox tests and awaits Go-Live.
Sign-ins, staff and role changes, loan decisions, KRA filings, money paid out and administrative overrides write to an append-only audit log: M-Penny only ever adds to it — nothing in the app edits or deletes an entry. M-Penny also checks its own controls every day, and a critical finding is emailed to the owner the same day.
Start your 7-day free trial. Connect M-Pesa. Watch your credit score climb. When you're ready for capital, M-Penny knows you can pay it back.