Legal
Data processing summary
Last updated: 12 October 2026
This page summarises how Sauti processes personal data for its customers. The signed services and data processing agreement is the binding document; customers can download the draft from Settings › Organization.
Roles
The customer (campaign or organisation) is the data controller for supporters' personal data. Sauti is the data processor and processes it only on the customer's documented instructions, given through use of the Service.
Purposes
Delivering messages and calls; managing audiences, surveys, field operations, donations, payouts and election-day reporting; producing reports; and meeting legal obligations.
Security measures
- Per-organisation envelope encryption of contact details and identity numbers, with keys in a dedicated key service and an outer key layer.
- Masking of contact details in every staff-facing surface; decryption only in isolated dispatch, call-bridge and reveal services.
- Two-factor authentication for all users, phishing-resistant keys for sensitive operator roles, role and geographic access control enforced in the application and the database.
- Tamper-evident audit trails; audited reveals with recorded reasons; two-operator approval for exports.
- Mandatory opt-out handling, content screening, quiet hours and privacy banding of small numbers.
- Encrypted backups and monitored infrastructure.
Sub-processors
Sauti uses sub-processors such as hosting, mobile network and messaging providers, and payment providers. Sauti keeps a register of sub-processors with their purpose, location and agreement, and passes on equivalent data protection obligations.
Location
Personal data is hosted with reputable cloud and data-centre providers listed in the sub-processor register. Any transfer outside Kenya happens only as the Data Protection Act, 2019 permits, with appropriate safeguards.
Assistance
Sauti helps customers respond to data subject requests, carry out data protection impact assessments, and meet breach notification duties, including notifying the customer without undue delay after becoming aware of a breach.
Retention and deletion
Data is retained according to the schedule in the agreement and deleted or anonymised afterwards, except where the law requires retention.