Security Controls
Last updated: June 2026
FarmPro is built for financial-grade agricultural operations. Here is how we protect your farm data, member records, and M-Pesa transaction logs.
Encryption in Transit & at Rest
All data is encrypted in transit using TLS 1.3. Farm records, financial ledgers, and payroll data are encrypted at rest with AES-256 in PostgreSQL.
Row-Level Tenant Isolation
Every database query is scoped to your farmId via Prisma extension middleware. No query can cross tenant boundaries — enforced at the ORM layer, not just application code.
Hosted in AWS Africa (Cape Town)
Production infrastructure runs on AWS af-south-1. Automated backups run daily with a 30-day retention window. Point-in-time recovery is available for Enterprise plans.
Audit Trail
Every sensitive operation — role changes, employee termination, payroll runs, SACCO loan disbursements — is recorded in an immutable audit log with actor ID, timestamp, and IP address.
Responsible Disclosure
If you discover a security vulnerability, please report it to security@farmproerp.co.ke. We aim to acknowledge reports within 48 hours and patch critical findings within 7 days.
Report a Vulnerability
Email security@farmproerp.co.ke with details and steps to reproduce. Please do not publicly disclose until we have had the opportunity to remediate.