JMSURFHOST

Trust Where your data lives and how we protect it

Your data stays in Kenya.

Every server we sell runs on our own hardware in our own Nairobi datacentre. We know where your data is, who can reach it and how it is backed up, and we put it in writing.

Request our Data Processing Agreement Request our SLA

Where data lives

One country, one datacentre, our own servers.

We do not resell someone else's cloud. The machines your services run on belong to JMSURF TECHNOLOGIES LTD.

Nairobi, Kenya

Your servers, hosting and backups are kept in our datacentre in Nairobi. We can confirm this in a letter for your compliance file.

Our own hardware

Servers, storage and firewalls are owned and run by our team, so no outside provider stands between you and your data.

Controlled access

Only named staff can reach the datacentre and the systems that run it. Every customer's services are kept apart.

How it is protected

Layers of protection, built in.

Dedicated firewall

Add your own virtual firewall with its own rules, VPN and network, kept apart from every other customer.

Encrypted connections

Panels, sites and remote access use encrypted connections, and staff VPN access is available as an add-on.

Backups

Daily backups kept 7 days, or 30 days with an off-site copy that stays under our control.

Automatic failover

Copies are taken every 5 minutes, so if a server fails, service moves over with very little lost.

Compliance

Kenya's Data Protection Act 2019.

When you host personal data with us, you are the data controller and we act as your data processor. We work to the Act and put our duties in a written agreement.

  • We process your data only on your instructions, for the services you order.
  • Data is kept in Kenya, so you know exactly where it is.
  • Access is limited to staff who need it, under confidentiality.
  • We tell you without delay if we learn of a breach that affects your data.
  • When a service ends, your data is returned or deleted as agreed.
  • A Data Processing Agreement and a Service Level Agreement are available on request.

ODPC registration as a data processor: in progress.

Paperwork

The documents your auditors ask for.

Ask and we send them to you. Each request opens a message to our team.

Data Processing Agreement

Our duties as your processor under the Data Protection Act.

Request it

Service Level Agreement

Uptime, support response times and service credits.

Request it

Data location letter

A signed letter confirming your data is kept in Kenya.

Request it

FAQ

Questions, answered.

Where exactly is my data kept?

In our own datacentre in Nairobi, Kenya, on hardware we own. Backup copies stay under our control.

Do you hold any certifications?

Not yet. Today we share our Data Processing Agreement, SLA and a data location letter, and our ODPC registration as a data processor is in progress.

Can you sign our own data processing terms?

Send them through the contact form and we will review them with you.

Who can see my data?

Only staff who need access to run your service, and only for that purpose. Your servers and backups are kept apart from other customers.

Put it in writing.

Request our Data Processing Agreement and SLA for your compliance file.

Request the DPA Request the SLA