Trust & Security

Your security is our core product

We didn't build security on top of our platform. We built our platform on top of security.

Funds held safely until both parties confirm the deal.

Buyer funds are held in a regulated, ring-fenced escrow account — never co-mingled with Sitechx operating funds.
Auto-release logic triggers only when both buyer and seller confirm delivery and quality. Disputes halt release immediately.
Our escrow engine processes releases in under 2 hours for standard transactions, with same-day settlement to the seller's M-Pesa or bank account.
Every escrow event is logged with a cryptographic timestamp for full auditability.

Every business and individual on the platform is verified.

We cross-check National ID numbers against the IPRS (Integrated Population Registration System) database in real-time.
Business registration numbers are verified against Kenya's eCitizen Business Registry and KRA PIN databases.
Verification is completed within 24 hours by our human-assisted AI review team.
Verified accounts receive a green checkmark; enhanced-verified accounts (Growth/Enterprise) receive a gold trust badge.

Real-time fraud scoring on every transaction and user action.

Our AI fraud model scores every transaction in real-time using 200+ behavioral signals, including device fingerprint, location patterns, and transaction velocity.
Anomalous activity triggers a soft hold and an immediate review — often before the user even knows there's an issue.
Our fraud detection has a 99.2% precision rate with a false positive rate below 0.3%.
Blacklisted entities are shared across our network, protecting all platform members simultaneously.

All deal communications are encrypted and audit-logged.

In-platform messaging uses AES-256 encryption in transit and at rest. No third-party messaging apps with uncontrolled data exposure.
Every message, document, and agreement exchanged in a transaction thread is permanently logged and tied to the escrow record.
Negotiated deal terms are locked as a smart agreement at order creation — neither party can alter them unilaterally.
Dispute resolution teams have full access to the complete communication history when reviewing claims.

Enterprise-grade infrastructure with 99.9% uptime SLA.

Hosted on ISO 27001-compliant cloud infrastructure with multi-region failover. Our platform has maintained 99.8% uptime over the past 12 months.
All data is encrypted at rest (AES-256) and in transit (TLS 1.3). Database access requires multi-factor authentication.
Regular third-party penetration testing and a responsible disclosure bug bounty program.
Compliance with Kenya Data Protection Act 2019 and alignment with GDPR principles for international users.

Every action is logged. Nothing is lost. Everything is auditable.

Immutable transaction logs for every order, payment, delivery confirmation, and dispute — stored for a minimum of 7 years.
One-click compliance report exports for KRA, KEBS, or internal auditing requirements.
API access to your own audit trail data for integration with your accounting or ERP system.
Our compliance team actively monitors regulatory changes in Kenya and East Africa to keep the platform ahead of requirements.

Regulatory compliance

We operate within and ahead of Kenya's regulatory framework.

Kenya Data Protection Act 2019Compliant

Central Bank of Kenya GuidelinesAligned

ISO 27001 InfrastructureHosted on certified infra

PCI DSSCompliant for card payments

GDPR PrinciplesImplemented

KRA TIMS IntegrationIn progress

Growth support that stays practical

Let Sitechx help your business improve SEO, connect with the right clients and suppliers, and make smarter decisions with AI-powered market analysis.

Tailored support · Practical reporting · 24/7 availability