M-Pesa (Safaricom Daraja) · Trust Center

Mpesa Trust Center

Trust center

M-Pesa (Safaricom Daraja) maintains a public trust center documenting PCI DSS v4, ISO/IEC 27001, ISO/IEC 27701, and GDPR-aligned / Kenya Data Protection Act 2019 compliance.

Mobile MoneyPaymentsFintechKenyaAfricaM-Pesa
Trust center: https://www.safaricom.co.ke/data-privacy-statements

Certifications & Compliance

PCI DSS v4ISO/IEC 27001ISO/IEC 27701GDPR-aligned / Kenya Data Protection Act 2019

Source

Trust Center

Raw ↑ 
generated: '2026-07-17'
method: searched
probe: true
source: https://www.safaricom.co.ke/
url: https://www.safaricom.co.ke/data-privacy-statements
certifications:
- PCI DSS v4
- ISO/IEC 27001
- ISO/IEC 27701
- GDPR-aligned / Kenya Data Protection Act 2019
evidence:
- source: https://www.safaricom.co.ke/media-center-landing/press-releases/safaricom-awarded-the-highest-certification-in-privacy-information-system-management
  keywords:
  - iso 27701
  - privacy information management
  - m-pesa
- source: https://www.safaricom.co.ke/data-privacy-statements
  keywords:
  - data privacy
  - encryption
  - audits
notes: >-
  Safaricom (M-Pesa operator) holds PCI DSS v4, ISO/IEC 27001, and ISO/IEC 27701
  certifications and is regulated under Kenya's Data Protection Act 2019. M-Pesa is
  also supervised by the Central Bank of Kenya. The Daraja platform enforces
  application-layer credential encryption (RSA against the M-Pesa public certificate)
  for privileged operations.