Tano Trust & Compliance
Political campaigns handle sensitive personal data under Kenya's Data Protection Act. Here is how we think about data ownership, compliance, and platform governance.
Your data is yours
Every campaign's voter, donor, volunteer, and finance data lives in that campaign's own isolated database. We don't pool campaign data across tenants, sell it, or use it to build cross-campaign products without your consent.
Kenya Data Protection Act (KDPA) tooling
Higher-tier plans include KDPA compliance tools for managing constituent and donor personal data responsibly — see the pricing page for which tier includes them. Internally, our platform team operates its own data-protection processes for handling data subject requests and reviewing data-processing activities across the platform.
Controlled internal access
Access to a campaign's account by Tano Tena staff — for support or troubleshooting — requires a documented reason and is logged, not silent. Sensitive internal actions (such as releasing data under a legal hold) require sign-off from more than one authorized person, not a single administrator acting alone.
Tamper-evident records
Changes to campaign data are recorded in an append-only, hash-chained audit log — see our Security page for how this works technically.
Legal documents
Read our Terms of Service and Privacy Policy for the full legal terms governing your use of the platform and how we handle personal data.
Questions about compliance?
If you have a specific compliance requirement — a data processing agreement, a specific security questionnaire, or a KDPA-related question — reach out and we'll work through it with you.