Compliance built into how we operate
Regulated business needs a compliant partner. TumaBoda handles data under Kenya's Data Protection Act, and operates defined controls — so enterprise, healthcare, and government organizations work with total confidence.
Compliance built into how we operate
ODPC Registered
No. 225-596B-3FA2
Audit Trails
Every job recorded
OTP Handover
Recipient verification
Legal Governance
Advocate oversight
Enterprises, healthcare providers, government agencies, and financial institutions require logistics partners that take regulatory compliance seriously. TumaBoda is built from the ground up to operate with total legal and operational transparency — combining data protection and verified chain-of-custody controls.
Data protection, tax compliance, and operational controls
Comprehensive compliance frameworks designed for regulated African commerce.
Data Protection & Privacy
Registered Data Controller with the Office of the Data Protection Commissioner (ODPC Reg. 225-596B-3FA2). Compliant with Kenya's Data Protection Act, 2019.
Audit Trails & Records
Every rider is identified, every job leaves an audit trail, and every handover is verified.
Operational Controls & OTP
Every handover requires recipient 6-digit PIN confirmation, verified rider identification, and immutable audit logs to eliminate parcel disputes.
Regulated Sector Readiness
Custom chain-of-custody protocols for healthcare logistics, pharmaceutical deliveries, financial documents, and government procurement.
Compliance at a glance
Audit-ready operational standards across data, tax, and delivery handling.
Legal oversight and data controller registration
Tuma Boda Limited is officially registered with the Office of the Data Protection Commissioner (ODPC) under registration number 225-596B-3FA2.
Our compliance framework is maintained by Director of Legal Affairs, Peter Maina Njoroge (Advocate), while data protection officer responsibilities are held by founder and CEO Kepha M. Sitati.
Data Protection
DPA 2019-aligned handling & minimisation
Operational Control
Recipient OTP, rider ID, audit trails
Legal Governance
Maintained by Advocate & ODPC DPO
Frequently asked questions
Everything you need to know about TumaBoda compliance and regulatory readiness.
TumaBoda handles personal data strictly in line with Kenya's Data Protection Act, 2019, implementing data minimisation and role-based access control. Tuma Boda Limited is a registered Data Controller with the Office of the Data Protection Commissioner (ODPC) under registration number 225-596B-3FA2. Data protection governance is maintained by our Director of Legal Affairs, Peter Maina Njoroge (Advocate), and our registered Data Protection Officer, founder & CEO Kepha M. Sitati.
Yes. TumaBoda works with clients in regulated sectors including healthcare, finance, retail, and government to implement tailored chain-of-custody, OTP verification, and confidential handling procedures.
Have compliance or audit questions?
Our legal and operational teams are available to review specific compliance requirements for your enterprise or government organization.