Enterprise Trust
Enterprise Trust
Last Updated: 6 September 2026
Businesses trust Kay Vault to promote their products, services, and content to a wider audience. This page summarizes how we protect your data, run our infrastructure, and support businesses that rely on the Platform — for procurement, security review, and vendor-assessment purposes.
For deeper detail, see our Security and Compliance, Privacy Policy, and Terms of Service pages.
- Who We Are
Kay Vault is a promotional platform operated by YEBOAH ASIAMAH TECHNOLOGIES, registered in Ghana. We help businesses and individuals promote physical products, digital products, services, and content through a verified-Hub and feed-round system.
- Identity-Verified Ecosystem
Every Hub on Kay Vault — including yours — goes through identity and business verification before it can publish. This isn't just a compliance checkbox: it means the Platform your brand appears alongside is made up of verified publishers, not anonymous or fraudulent accounts. This reduces brand-safety risk for enterprise Hub owners promoting alongside other verified businesses.
- Infrastructure and Reliability
- Dedicated, self-managed infrastructure: Our servers, database, and cache run on infrastructure we control directly rather than shared multi-tenant platforms we don't manage.
- Separated services: Application, database, and cache layers run as isolated services to limit the impact of any single failure.
- Reputable data center providers: Our hosting provider (Hetzner) and media storage provider (Cloudflare R2) both operate under recognized industry certifications (ISO 27001, SOC 2 — see Security and Compliance for details).
4. Data Handling
-
Your content stays yours: You retain ownership of the content and materials you post. See Section 5.2 of our Terms of Service for the specific license you grant us to display and promote it.
-
Scoped access: Access to sensitive data (identity verification documents, account credentials) is restricted to systems and personnel who need it.
5. Payment Security
Paid features (such as promoted feed slots) are billed through Paystack, a PCI-DSS compliant payment processor. Kay Vault does not directly handle or store cardholder data.
6. Compliance Posture
- We aim to operate in line with Ghana's Data Protection Act, 2012 (Act 843).
- Our payment processor is PCI-DSS compliant.
- [If applicable: "We can provide a Data Processing Agreement (DPA) for enterprise customers upon request — contact support@kayvault.com."]
7. Sub-Processors
We work with the following third-party providers to operate the Platform. We'll update this list if it changes materially.
| Provider | Purpose |
|---|---|
| Hetzner | Server, database, and cache hosting |
| Cloudflare R2 | Media storage (images, video, audio, documents) |
| Resend | Transactional email delivery |
| Paystack | Payment processing |
- Support for Enterprise Hubs
- Dedicated review: All Hubs, including enterprise accounts, go through our standard identity verification process — we can discuss expedited review for larger organizations with appropriate documentation.
- Incident Response and Transparency
In the event of a security incident affecting your data, we will investigate promptly and notify affected businesses in line with our obligations under applicable law and any agreement in place with you. See our Security and Compliance page for our general incident response approach.
- Questions or Vendor Assessments
If your organization needs additional documentation for a vendor security review, procurement process, or due diligence (e.g., a completed security questionnaire, references, or a DPA), contact us at support@kayvault.com.