Neurobyte Technologies

Data Ethics & Safeguarding

Neurobyte's commitment to responsible data use, privacy and security by design, safeguarding and responsible AI, aligned to the Kenya Data Protection Act.

Handling data and AI responsibly is core to how we work, not an afterthought. This is our commitment to protecting the people, institutions and communities our work touches. These principles apply to every project, for corporates, governments and development partners alike, and are anchored to the Kenya Data Protection Act, GDPR, and NIST-aligned security practice.

Six principles we work to

  • Lawful, minimal data use: we process personal data only with a lawful basis and a clear purpose, and we collect the minimum needed. Kenya Data Protection Act and GDPR principles (purpose limitation, minimisation, accuracy, storage limitation) guide every engagement.
  • Privacy and security by design: protection is built in from day one, not bolted on. Encryption in transit and at rest, least-privilege access, and Data Protection Impact Assessments for higher-risk processing.
  • Safeguarding and do-no-harm: we design and deliver so that our work protects, never harms, the people it touches, with particular care for children and for vulnerable and marginalised groups. We will decline or redesign work that puts people at risk.
  • Responsible AI: AI we build keeps a human in the loop for consequential decisions, is checked for bias and accuracy, and is secured against the OWASP LLM Top 10. We are transparent about where AI is used and what its limits are.
  • Consent, rights and transparency: we help clients honour data-subject rights (access, rectification, erasure and objection) and be transparent with the people whose data they hold about how and why it is used.
  • Accountability: we keep records, assign clear ownership, and can evidence how data is handled to a client, a partner, a regulator or a board. Accountability is a control, not paperwork.

Our own standing

We hold ourselves to what we ask of clients. Neurobyte Technologies Ltd is registered with Kenya's Office of the Data Protection Commissioner under the Data Protection Act, 2019 as both a Data Controller and a Data Processor, registration number 805-7801-3679.

Raise a concern

If you believe our work, a system we have built, or a use of data raises a safeguarding, privacy or ethics concern, tell us at info@neurobyte.co.ke. We take every report seriously and respond promptly and confidentially.

See also our Privacy Policy, our Security & Trust page, and our development partnerships.