Security
Your money, your network and your customers' data, protected.
An ISP portal controls payments, routers and personal data. Here is how DeeISP360 protects each of them.
Two-step sign-in
- SMS code or authenticator app
- Required per role, set by the owner
- Trusted devices and session revocation
- Lockout after repeated failures
Roles and permissions
- Owner, finance, helpdesk, technician and reseller roles
- Each sees only what it should
- Finance cannot change routers or delete logs
- Optional limits by POP
Audit log that cannot be edited
- Who, what, when, before and after, and why
- Chained so tampering is detectable
- Manual suspensions, overrides and cash entries flagged
- Exportable for auditors
Two people for money
- Ledger adjustments and refunds need approval
- Cash entries need a second person
- The person who raised an item cannot approve it
- Limits you set
Each ISP kept apart
- Every ISP's data isolated from every other's
- Our support needs a reason and a time limit to open your portal
- Each support visit recorded in your audit log
- Your own portal address
Encryption and backups
- TLS for everything in transit
- Data and secrets encrypted at rest
- Router and M-Pesa credentials in a vault
- Daily backups, kept for 30 days
Kenya Data Protection Act, 2019
For your subscribers' personal data you are the data controller and DeeISP360 is your data processor. We process it only to provide the service, on your instructions, under a data processing agreement that forms part of our terms.
We help you meet your own obligations: subscribers' data can be exported or deleted on request, access to it is limited by role, and every view of sensitive fields such as PPPoE passwords is restricted to the roles you choose.
If a breach affecting your data occurs, we will tell you without undue delay so you can notify the Data Commissioner within the required 72 hours.
Report a security issue
If you believe you have found a vulnerability, email security@deeisp360.com. We acknowledge reports within two business days and do not take action against good-faith research.
Put your billing and network on autopilot.
Apply in about ten minutes. Our team reviews it within one business day, then the owner gets an invite to their own portal.