Security & Data Protection
The controls that govern who can read school data, who can change it, and what happens to it. Every claim on this page is one we can demonstrate.
Registered Data Processor
PayDesk is registered with the Office of the Data Protection Commissioner under registration number 628-7798-B0C8, in accordance with Kenya’s Data Protection Act, 2019.
Encryption at rest
All database storage is encrypted with AES-256.
Encryption in transit
Every session runs over TLS 1.3.
Role-based access control
PayDesk defines distinct roles — Principal, Finance Manager, Teacher, Registrar, Parent and others — and every protected API route checks the role and, for school users, the school it belongs to. School staff cannot read data outside their own school. Parents are resolved against guardianship records on the server, so a parent can only ever load their own children’s fees, results and transport.
Privileged actions are written to an audit log recording the action, the user, their IP address and user agent, a severity level and a timestamp. Entries are retained for the life of the school account.
Dual authorization
Three actions cannot be completed by one person: grade promotion, invoice cancellation and balance adjustment. Each is raised as a request and applied only once a Principal approves it — and the system refuses an approval from the same person who raised the request.
Your data
Each school’s records are isolated by tenant and scoped on every query. Data is stored in a single region and encrypted at rest. Parent and student records can be erased on request, and that erasure runs as a defined path in the product rather than as a manual database edit.
Authentication endpoints are rate limited to blunt credential stuffing, and our content security policy permits no third-party script origins — nothing outside PayDesk executes in your browser.
Reporting a vulnerability
If you believe you have found a security issue in PayDesk, email hello@paydesk.live with enough detail for us to reproduce it. We will acknowledge your report and keep you updated while we investigate. We do not currently run a paid bounty programme.