Security & compliance
Protecting what matters most to your organisation.
Access control
Storage areas are restricted to authorised staff. In the client portal, each user sees only their own organisation's records according to their role, and two-step login is required for every account.
Chain of custody
Every receipt, move, retrieval, return and destruction is logged automatically against the box's unique barcode with a timestamp. These logs cannot be skipped or edited from the portal.
Authorised retrieval
Records are released only against requests from authorised client users, and every request carries a reference and tracked status.
Incident management
Suspected incidents are investigated, contained and reported to affected clients without undue delay.
Data protection
We process personal data in line with the Kenya Data Protection Act, 2019, acting on our clients' documented instructions.
Security
Built Around the Security of Your Information
Controlled records access
Only authorised ESTROY staff and your nominated users can access your records.
Barcode-based traceability
Every box carries a unique barcode linked to its inventory record.
Chain-of-custody documentation
Every receipt, move, retrieval and return is logged with a timestamp.
Organised archive inventory
Each box has an assigned storage location you can see in the portal.
Authorised retrieval
Records are released only on requests from authorised users.
Confidentiality & secure handling
Staff handle records under confidentiality obligations, in line with the Kenya Data Protection Act, 2019.
ESTROY does not currently claim any third-party certification or insurance accreditation. We will publish these here once obtained.