Security & trust

Access you can defend in an audit.

Our platform handles finance, contracts and people. These are the protections built into it.

Two-step sign-in

Password first, then a one-time code by email or an authenticator app. Trusted devices can skip the second step.

Account lock-out

After five failed attempts an account is locked for 15 minutes, which stops guessing attacks.

Role-based access

Six role tiers decide who can see and change what, on every screen and every endpoint.

Complete audit trail

Financial and administrative actions record who did what, when, from which IP address, and whether it succeeded.

Protected files

Uploaded documents and chat attachments need a valid sign-in to open, and access ends the moment a user is deactivated.

Invitation-only access

There is no public sign-up. People get access because Rhino gives it to them, and the app install needs an admin-issued code.

Data protection in Uganda

We handle personal data in line with Uganda’s Data Protection and Privacy Act, 2019, and keep only what the business needs to operate, account for its work and stay secure.

Read our privacy policy

Let’s build something that lasts.

Tell us about your project, your materials needs or your building. We’ll respond with a clear plan.