Compliance

ReliaPay Limited is authorised as a payment service provider in Kenya, Uganda, Tanzania, Rwanda, and Somalia. Each operating entity is supervised by the relevant central bank or payments regulator and is subject to ongoing prudential, conduct, and anti-money-laundering supervision.

Where we offer cross-border payouts and FX, we operate under local foreign-exchange permissions and bilateral arrangements with our banking partners. A current list of licensed entities and registration numbers is available on request.

We invest in independent assurance — not because it is required, but because it is the only credible signal of operational maturity in payments.

• PCI DSS Level 1 — the highest tier of card-data security, audited annually by a Qualified Security Assessor.
• ISO/IEC 27001 — information security management system, certified end-to-end.
• SOC 2 Type II — security, availability, and confidentiality controls audited continuously.
• Local data-protection registrationin each market, including registration with Kenya's Office of the Data Protection Commissioner.

Auditor letters, attestation reports, and our SOC 2 Type II report are available to qualified prospects under NDA.

We operate a risk-based anti-money-laundering and counter-financing-of-terrorism programme aligned with the Financial Action Task Force (FATF) recommendations and the requirements of each market we serve.

• Documented AML, CFT, and sanctions policy reviewed annually by the board.
• Tiered customer due diligence and enhanced due diligence for higher-risk merchants.
• Real-time sanctions and politically-exposed-person screening on every merchant and counterparty.
• Transaction monitoring with typology-based rules and machine-learning detection.
• Dedicated Money Laundering Reporting Officer (MLRO) in each licensed market.
• Mandatory annual AML, CFT, and sanctions training for every employee.

Every merchant on ReliaPay completes a Know-Your-Business (KYB) review before going live. We verify legal existence, beneficial ownership, business activity, and intended use of the platform. Where required, we collect additional documentation such as operating licenses, bank statements, or proof of address.

Some industries — adult content, unregulated financial services, gambling without a licence, and a small number of others — are not supported. The full list of restricted businesses is available in our Terms of Service.

We cooperate with regulators, financial intelligence units, and law-enforcement agencies in line with applicable law. Lawful requests are reviewed by our legal team and responded to via established channels.

We do not provide customer data in response to informal requests. All requests must be served on legal@reliapay.africa with appropriate legal authority.