Security

Secured two ways

Your capital is secured by collateral and custody arrangements. Your data is secured by the platform. Both are described below.

Your Capital

How mandates are secured

Collateral is identified before commitment, valued by an independent certified valuer, and the legal charge registered so it is effective against third parties. Valuations are refreshed on a predetermined schedule set by collateral type.

SolutionSecurity BasisRefreshed
CORPORATE ADVISORY SOLUTIONSDebenture / Registered Charge / Board CovenantAnnual or upon material corporate change
WEALTH MANAGEMENT & PLANNING ADVISORYSegregated Custodian Account / Trustee OversightReal-time continuous custody reconciliation
INVESTMENT ADVISORYRing-fenced SPV / Documented CollateralizationQuarterly valuation & portfolio review
PROJECT FINANCING SOLUTIONSFirst Legal Mortgage / Cash Escrow / Step-in RightsSemi-annual independent engineer inspection
OFFSHORE FIDUCIARY AGENT SOLUTIONSLicensed Trust Jurisdiction / Fiduciary EscrowContinuous statutory compliance review
PORTFOLIO MONITORINGDual-signoff Verification / Verified Audit TrailMonthly reconciliation & governance reporting
Collateral is not a guarantee. Security reduces loss given default; it does not remove the risk of loss. Valuations can fluctuate, and enforcing a legal charge takes time and cost. Capital deployed across all commercial ventures remains at risk.
Your Data

How this platform protects you

Enterprise security controls engineered to protect confidential communications, corporate dossiers, and executive correspondence.

Encryption in transit

Every connection is served over TLS with HSTS. The site refuses to load sub-resources from anywhere but its own verified origin and secured infrastructure.

No passwords to steal

Sign-in and document verification utilizes single-use secure cryptographic links followed by time-based codes. There are no stored static passwords to be breached or reused.

Consent before collection

No tracking cookies are set and no third-party behavioral telemetry is created. We collect only what is strictly required for confidential communication.

Uploads are verified

Submitted advisory documents are checked by byte content, not merely file extension, sanitized, and stored in encrypted, isolated cold storage outside the web root.

Least privilege access

Every client enquiry and portfolio record is governed by strict role-based access control. Hiding a control on the front-end is never treated as protection.

Third parties are fenced

A strict Content Security Policy (CSP) isolates the application. Third-party ad trackers, external pixels, or marketing beacons are strictly prohibited on this platform.

Stated honestly: The controls above are implemented across our infrastructure stack. Continuous third-party vulnerability assessments and strict segregation of duties ensure client data remains private and confidential at all times.
Contact on WhatsAppChat with our Nairobi team