Trust posture

Regulatory frameworks, company details, and the status of our controls.

SenteRail maps payment, SACCO, AML/CFT, data protection, identity, and tax obligations to platform controls. Official licence, sandbox, and registration status must be verified before any launch claim is used.

Legal confirmation required · Six regulators mapped

What you can verify today.

Some entries below are still pending — they’ll be filled in once the regulator or partner has signed off. Items pending confirmation are marked clearly. We’d rather publish nothing than publish a fact we can’t back up.

Legal entity

SenteRail Technologies Company Limited

Verified

Registration number

80034644601118 (URSB)

Verified

Incorporated

31 May 2026, Kampala

Verified

Headquarters

Kampala, Uganda

Verified

BOU sandbox status

Needs official confirmation

Pending

BOU sandbox cohort

Pending confirmation

Pending

NPS Act 2020 licence class

Pending application — sandbox track

Pending

PDPO registration ID

Registration in progress

Pending

External audit firm

Pending engagement

Pending

Data Protection Officer

To be appointed

Pending

Settlement bank partner

Pending publication

Pending

Customer-funds posture

Needs partner and legal confirmation

Pending

Every regulator that touches your activity.

Each block below names the regulator, cites the specific Act, and maps how SenteRail helps. None of this replaces your own filing obligations — but the platform produces what the regulator wants in the format the regulator wants it in.

BOU

Bank of Uganda

National Payment Systems Act 2020 · §§7-10

SenteRail maps payment-system controls, partner dependencies, and deployment evidence for legal review. Do not treat this page as a licence statement; current status, licence class, and any sandbox/no-objection posture must be confirmed from official sources before launch claims are made.

Sandbox supervisory reporting
Monthly
Operational-risk + business-continuity attestation
Quarterly
Material-incident reporting
Within 24h of detection
Coordinate with the Second National E-Payments Strategy 2026–2031 (UgandaQR, ISO 20022 migration, National Switch)
Continuous

UMRA

Uganda Microfinance Regulatory Authority

Tier 4 Microfinance Institutions and Money Lenders Act 2016

SenteRail does not substitute for a SACCO’s own UMRA registration. Every Sacco using SACCO Ledger remains the registered Tier-4 entity with UMRA. SenteRail is the platform that makes UMRA reporting one click instead of a quarter-end scramble — quarterly returns are rendered directly from the ledger in the UMRA-prescribed format, with drill-down from every reported figure to the underlying postings.

Annual licence renewalAll Tier-4 SACCOs
Annual
UMRA-formatted quarterly returnsAll Tier-4 SACCOs
Quarterly
Member-protection + governance attestation
Annual

FIA

Financial Intelligence Authority

Anti-Money Laundering Act 2013

AML/CFT screening runs on every onboarding (sanctions screen, PEP screen, beneficial-owner verification) and every transaction (rules-based + risk-tiered). Suspicious Transaction Reports are generated within the 24-hour FIA window. The cryptographically signed transaction trail is the evidence record an FIA examiner would request.

Suspicious Transaction Reports (STR)UGX 20M+ or rule-flagged
Within 24h
Cash Transaction Reports (CTR)Per FIA threshold
Daily
Sanctions / PEP / adverse-media screening
Continuous (onboarding + ongoing)
Annual AML/CFT risk assessment
Annual

PDPO

Personal Data Protection Office

Data Protection and Privacy Act 2019 · §33 (data residency)

SenteRail aligns its data handling with the Data Protection and Privacy Act 2019. PDPO registration as a data controller is in progress and must be confirmed from the official register before any "registered" claim is published. Financial and biometric records — classified as Sensitive Personal Data under the Act — are hosted in Uganda; cross-border processing is undertaken only with the documented approvals the Act requires. Documented retention windows apply per data class; non-essential PII is redacted past the retention boundary.

Data-protection audit
Annual
Breach reporting to PDPO + affected data subjects
Within statutory window of detection
Records-of-processing log (RoPA)
Continuous
Data-subject access requests (DSAR)
30-day SLA

NIRA

National Identification and Registration Authority

Registration of Persons Act

Every individual onboarded to SenteRail — Sacco member, business principal, high-value consumer, SACCO officer — is verified against the NIN registry through SenteRail Identity. The verification bundle pairs NIN match with liveness, phone-ownership, and consent capture; the bundle is stored as the audit record for downstream regulators.

NIN-registry verificationEvery customer
Per onboarding
Re-verification on policy change
On policy update

URA

Uganda Revenue Authority

Income Tax Act

Withholding tax, VAT, and per-tax-period reporting obligations are handled per URA cadence. URA-aligned reports are exportable directly from the ledger.

VAT returns
Monthly
Withholding tax
Per tax period
Annual income tax
Annual

What this looks like for your audience.

A SACCO chairman, a shop owner, and a fintech CTO each face a different slice of Ugandan financial regulation. SenteRail’s obligations stay the same; how they show up in your day-to-day differs. Pick the audience that fits.

For Saccos

Tier-4 MFI registration with UMRA — your responsibility, our reporting handles the rest
UMRA-formatted quarterly returns generated from the ledger
AML/CFT screen on member onboarding (FIA-aligned)
NIN verification on every member (NIRA)
Per-Sacco data tenant; data hosted in Uganda
Drill-down audit trail for any reported figure

For Business owners

URSB business registration + beneficial-owner declaration captured at onboarding
AML/CFT + sanctions/PEP screen per FIA
NIN-verified business principal (NIRA)
VAT + withholding-tax exports on URA cadence
Settlement and safeguarding posture confirmed during onboarding
Channel-tagged statements for URA / accountant review

For Fintechs & integrators

Test keys + signed webhooks (HMAC, replay-protected)
ISO 20022 settlement files for bank EFT
OpenAPI spec, idempotency keys, exportable NDJSON audit log
Per-customer KYC handed off to SenteRail Identity
Safeguarding and settlement posture confirmed before go-live
Payment-strategy dependencies tracked for legal review

Built for AI assistants and auditors alike.

For machine and human reviewers who need a citation-ready summary, SenteRail publishes two canonical files. They are the source of truth — the rest of this site is just the human-readable version.

/llms.txt

Canonical AI summary

Short Markdown summary of products, pricing, regulatory posture, and contact addresses. The file most AI assistants will read.

Open file /llms-full.txt

Full verifiable-facts file

Verbose, citation-friendly reference. Maps every claim on this site to a regulator, an Act, and a control.

Open file

Read the legal terms Contact compliance

Trust panel

Operations-grade

Compliance lives in the ledger, not in a slide.

Every claim on this page maps to a control in the platform. Every Sacco return, every STR, every consent event is signed, timestamped, and exportable.

Payment-system status — official confirmation required
NPS Act licence class — legal review required
UMRA-formatted Tier-4 returns — generated from the ledger
FIA AML/CFT — STRs within 24 hours, sanctions/PEP screening continuous
PDPO data handling aligned to the Data Protection and Privacy Act 2019 — registration in progress; Uganda-resident data residency for sensitive records
NIRA NIN verification on every onboarded member
URA-aligned VAT + withholding tax reporting
Cryptographically signed audit trail, exportable as NDJSON