Security & Data Protection

Enterprise-grade security protecting your educational data 24/7.

SOC 2 Compliant ISO 27001 Certified

Your Data Security is Our Top Priority

We implement multiple layers of security to protect your educational data, from infrastructure to application level. Our comprehensive security program ensures your information remains safe, private, and accessible only to authorized users.

99.99%

Uptime SLA

256-bit

AES Encryption

24/7

Security Monitoring

Daily

Data Backups

Multi-Layer Security Architecture

Our security approach covers every aspect of data protection, from physical infrastructure to user access controls.

Infrastructure Security

  • Cloud Infrastructure: Hosted on secure, compliant cloud platforms with 99.99% uptime SLA
  • Network Security: Firewalls, DDoS protection, and intrusion detection systems
  • Physical Security: Biometric access controls and 24/7 surveillance at data centers
  • Geographic Redundancy: Data replicated across multiple secure locations

Data Encryption

  • Encryption at Rest: All stored data encrypted with AES-256 encryption
  • Encryption in Transit: TLS 1.3 for all data transmission
  • Key Management: Hardware security modules (HSMs) for encryption key protection
  • Database Encryption: Field-level encryption for sensitive student data

Access Controls

  • Role-Based Access: Granular permissions based on user roles and responsibilities
  • Multi-Factor Authentication: Required for all administrative accounts
  • Single Sign-On (SSO): Integration with school identity providers
  • Session Management: Automatic logout and session timeout controls

Monitoring & Auditing

  • 24/7 Monitoring: Real-time security monitoring and threat detection
  • Audit Logs: Comprehensive logging of all user activities and system events
  • Anomaly Detection: AI-powered detection of unusual access patterns
  • Incident Response: Rapid response team for security incidents

Compliance & Certifications

We maintain the highest standards of compliance with international and local data protection regulations.

ISO 27001

International standard for information security management systems, ensuring systematic approach to managing sensitive information.

SOC 2 Type II

Audited compliance with security, availability, processing integrity, confidentiality, and privacy principles.

Kenya Data Protection Act

Full compliance with Kenya's Data Protection Act 2019, ensuring local regulatory requirements are met.

FERPA Aligned

Educational data handling practices aligned with international student privacy protection standards.

Data Backup & Disaster Recovery

Your educational data is protected with enterprise-grade backup and recovery solutions, ensuring business continuity even in the face of unexpected events.

Continuous Backups

Real-time data replication with point-in-time recovery capabilities

Geographic Distribution

Backups stored in multiple geographic locations for maximum protection

Quick Recovery

Recovery Time Objective (RTO) of less than 4 hours for critical systems

15 minutes

Backup Frequency

30 days

Retention Period

99.999%

Data Durability

Security Best Practices for Users

While we protect your data at the platform level, here are best practices to enhance your account security.

Password Security

  • Use strong, unique passwords for your Elimurise account
  • Enable multi-factor authentication (MFA) when available
  • Never share your login credentials with others
  • Change passwords immediately if you suspect compromise

Network Security

  • Always use secure, trusted internet connections
  • Avoid accessing sensitive data on public WiFi
  • Keep your devices and browsers updated
  • Log out completely when using shared computers

Incident Reporting

  • Report suspicious activities immediately
  • Contact support for any security concerns
  • Document any unusual system behavior
  • Follow your institution's security protocols

Security Contact & Reporting

If you discover a security vulnerability or have security concerns, please contact our security team immediately.

Security Team

security@elimurise.co.ke

Vulnerability Reporting

security-reports@elimurise.co.ke

Emergency Hotline

+254 700 SECURE (732873)

Our Response Commitment

  • Initial Response: Within 2 hours for critical security issues
  • Investigation: Thorough investigation within 24 hours
  • Resolution: Security patches deployed within 48 hours
  • Communication: Regular updates throughout the process