Compliance built into how we operate
Regulated business needs a compliant partner. TumaBoda handles data under Kenya's Data Protection Act, provides eTIMS-compliant invoicing, and operates defined controls — so enterprise, healthcare, and government organizations work with total confidence.
Tuma Boda Limited • Office of the Data Protection Commissioner
Compliance built into how we operate
ODPC Registered
No. 225-596B-3FA2
eTIMS Invoicing
Tax compliant billing
OTP Handover
Recipient verification
Legal Governance
Advocate oversight
Enterprises, healthcare providers, government agencies, and financial institutions require logistics partners that take regulatory compliance seriously. TumaBoda is built from the ground up to operate with total legal and operational transparency — combining data protection, eTIMS tax integration, and verified chain-of-custody controls.
Data protection, tax compliance, and operational controls
Comprehensive compliance frameworks designed for regulated African commerce.
Data Protection & Privacy
Registered Data Controller with the Office of the Data Protection Commissioner (ODPC Reg. 225-596B-3FA2). Compliant with Kenya's Data Protection Act, 2019.
Tax & eTIMS Compliance
Delivery fees and corporate transactions carry eTIMS-compliant invoicing via integration with Zed by Riverbank Solutions to support business accounting.
Operational Controls & OTP
Every handover requires recipient 4-digit PIN confirmation, verified rider identification, and immutable audit logs to eliminate parcel disputes.
Regulated Sector Readiness
Custom chain-of-custody protocols for healthcare logistics, pharmaceutical deliveries, financial documents, and government procurement.
Compliance at a glance
Audit-ready operational standards across data, tax, and delivery handling.
Legal oversight and data controller registration
Tuma Boda Limited is officially registered with the Office of the Data Protection Commissioner (ODPC) under registration number 225-596B-3FA2.
Our compliance framework is maintained by Director of Legal Affairs, Peter Maina Njoroge (Advocate), while data protection officer responsibilities are held by founder and CEO Kepha M. Sitati.
Data Protection
DPA 2019-aligned handling & minimisation
Tax Compliance
eTIMS-compliant automated invoicing
Operational Control
Recipient OTP, rider ID, audit trails
Legal Governance
Maintained by Advocate & ODPC DPO
Is TumaBoda compliant with Kenyan regulations?
TumaBoda handles personal data in line with Kenya's Data Protection Act, 2019 (ODPC Reg No. 225-596B-3FA2), provides eTIMS-compliant invoicing for delivery transactions via Zed by Riverbank Solutions, and operates strict controls including OTP-verified handover, rider identification, and audit trails.
Frequently asked questions
Everything you need to know about TumaBoda compliance and regulatory readiness.
How does TumaBoda handle personal data?
TumaBoda handles personal data strictly in line with Kenya's Data Protection Act, 2019, implementing data minimisation and role-based access control. Tuma Boda Limited is a registered Data Controller with the Office of the Data Protection Commissioner (ODPC) under registration number 225-596B-3FA2. Data protection governance is maintained by our Director of Legal Affairs, Peter Maina Njoroge (Advocate), and our registered Data Protection Officer, founder & CEO Kepha M. Sitati.
Are TumaBoda deliveries tax compliant?
Yes. Through integration with Zed by Riverbank Solutions, delivery transactions can be recorded with eTIMS-compliant invoicing, supporting merchants' official tax and audit requirements.
Do you meet sector-specific regulatory requirements?
Yes. TumaBoda works with clients in regulated sectors including healthcare, finance, retail, and government to implement tailored chain-of-custody, OTP verification, and confidential handling procedures.
Have compliance or audit questions?
Our legal and operational teams are available to review specific compliance requirements for your enterprise or government organization.
