Security & data protection.
Your subscriber data is the foundation of your business. Here is how we protect it.
Kenya Data Protection Act 2019
Metron is designed from the ground up to comply with the Kenya DPA 2019. Subscriber data is processed only for the purposes stated at collection and never shared with third parties without consent.
Row-Level Security
Every data query is scoped to your organisation at the database level using PostgreSQL Row-Level Security policies. Your subscriber data is never accessible to other Metron customers.
Encrypted in transit and at rest
All data is encrypted in transit using TLS 1.3. Data at rest is encrypted using AES-256. Encryption keys are managed by AWS KMS with automatic annual rotation.
Daily automated backups
Full database snapshots are taken daily and retained for 30 days. Point-in-time recovery is available for the last 7 days. Backups are tested monthly.
Data residency in Africa
By default, all Metron data is hosted in AWS af-south-1 (Cape Town). ISPs requiring data residency in East Africa can request a dedicated deployment in a Kenya/Uganda region.
On-premises / standalone option
Enterprise and carrier accounts can deploy Metron on their own servers. No data leaves your network. Available on the Carrier plan.