Skip to main content

Trust & security

Utility money,
handled with care.

Residents trust us with their payments and landlords trust us with their income. Here's how we protect both.

Commercial towers in central Nairobi

Payment verified

Before any token is issued

Command logged

Who, what and when

Payments

Every payment checked, once.

Card details never stored

Card and M-Pesa payments go through our payment partner's checkout. We never see or keep card numbers.

Verified with the payment partner

Every payment is confirmed directly with the payment partner before anything is issued.

One payment, one token

A payment can only ever issue one token, even after a retry or a double tap.

Access & data

The right people see the right things.

Access by role

Admins, landlords, staff and tenants each see only what belongs to them, enforced in the database.

Verified phone numbers

Tenants confirm their number with a one-time SMS code before an account is created.

Remote commands logged

Every disconnect and reconnect is recorded with who sent it and when, behind a confirmation step.

Secrets stay on the server

Payment and meter-vendor credentials live only on our servers, never in the browser.

Encrypted in transit

The site and app are served over HTTPS.

Found a security issue?

Please tell us privately at hello@oneplumbing.co.ke and we'll look into it straight away.

Let's build it together

Build smarter utility infrastructure.

Whether you own one building, manage a portfolio or run a utility network, see how OnePlumbing connects your meters, residents and payments.