Home / Compliance
TRUST & COMPLIANCE

Compliance & security standards.

How we keep money, data, and merchants safe — and the standards we hold ourselves to.

Regulatory standing

LumiQ Pay operates within the financial regulatory framework of Kenya and the wider region. We work with licensed financial institutions and payment partners to deliver acquiring, collection, and payout services.

Standards we align to

PCI-DSS aligned

Cardholder data handled to PCI-DSS standards and tokenized, so sensitive details never touch merchant servers.

Data protection

Compliant with the Kenya Data Protection Act, 2019 — lawful processing, encryption, and data-subject rights.

KYC / AML

Merchant verification, sanctions screening, and transaction monitoring to detect and prevent financial crime.

How we protect transactions

  • Encryption everywhere — data secured in transit and at rest.
  • LumiQ Shield — machine-learning fraud scoring on every transaction in real time.
  • Atomic ledger — every money movement is synchronous and auditable; balances are never eventually consistent.
  • Continuous monitoring — redundant infrastructure with real-time alerting and incident response.

Report a vulnerability

If you believe you've found a security issue, email security@lumiqpay.com with details. We appreciate responsible disclosure and will respond promptly.

Compliance enquiries

For regulatory, risk, or compliance questions, contact compliance@lumiqpay.com.