Back to documentation
Security & Compliance
Data handling, encryption, and audit logging across Astroune products.
Data encryption
Data is encrypted in transit (HTTPS everywhere) and at rest. Sensitive fields such as payment identifiers follow additional access controls beyond standard field-level permissions.
Audit logging
Sensitive actions — void approvals, permission changes, payroll runs, loan disbursements — are logged with who performed the action and when, rather than relying on application state alone to reconstruct what happened.
Compliance posture
Astroune is SOC 2-aligned, with data residency options available for enterprise customers. Product-specific compliance features — SASRA reporting for Sacco Suite, KRA statutory filing for PayDesk, eTIMS invoicing for Astra ERP — are documented on each product's own page.