Legal & Compliance

Migradia Ltd owns and operates the following proprietary brands and products:

• Migradia — enterprise technology partner brand; services, solutions and advisory
• Vid-it — intelligent video infrastructure SaaS platform
• Mygra — self-service cloud migration orchestration platform
• Gagamba — distributed web intelligence and data platform
• Onemum — community, membership and engagement platform
• Migra — enterprise migration planning and execution tooling

All product names, logos and trade marks are the property of Migradia Ltd or their respective owners. Unauthorised use is prohibited.

Migradia supplies technology equipment — including CCTV surveillance systems, server and rack infrastructure, and audio-visual (AV) and unified-communications equipment — sourced from licensed technology partners. All equipment is supplied with:

• Original manufacturer licences and/or software entitlements
• Applicable manufacturer warranties (duration as specified per SOW)
• Migradia installation warranty (12 months unless otherwise stated)
• Compliance certificates and installation records as required by Kenyan law

Migradia does not supply equipment without valid partner authorisation. Partner and reseller accreditation documentation is available on request via partners@migradia.com.

Migradia uses the following communication channels to deliver services and support:

• WhatsApp Business — verified business account for support, notifications and updates
• SMS — service alerts, one-time passwords (OTPs) and support confirmations
• USSD — short-code access for certain service interactions where applicable
• Email — primary channel for formal communications, contracts and invoicing
• Telephone — direct support line for enterprise clients

Marketing communications via any of these channels require prior opt-in consent. You can opt out at any time. See our Privacy Policy for details.

Migradia takes the security of our systems and your data seriously. We implement:

• TLS 1.2+ encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• Role-based access control (RBAC) and least-privilege principles
• Multi-factor authentication for all internal systems
• Regular third-party penetration testing
• SIEM monitoring and 24/7 security operations for enterprise clients
• Vulnerability disclosure programme (see below)

Our security practices are aligned with ISO 27001 principles. Formal certification is in progress.

If you believe you have found a security vulnerability in any Migradia system or product, please report it responsibly to security@migradia.com. We will acknowledge receipt within 2 business days and work with you to resolve the issue. We ask that you:

• Do not access, modify or delete data that is not yours
• Do not disclose the vulnerability publicly before we have resolved it
• Provide sufficient detail for us to reproduce and understand the issue

We will not pursue legal action against researchers who act in good faith within these guidelines.

Migradia operates in compliance with applicable Kenyan and international law, including:

• Kenya Data Protection Act 2019 and Regulations 2021
• Kenya Communications Act (Cap 411A) — for SMS, USSD and electronic communications
• EU GDPR (for personal data of EU residents)
• Anti-Money Laundering (AML) and Know Your Customer (KYC) requirements
• Export control regulations applicable to technology equipment and software

The information on migradia.com is provided for general informational purposes only. While we endeavour to keep information accurate and up to date, we make no warranties about its completeness or suitability for any particular purpose. Content relating to technology products, services and pricing is subject to change without notice.

References to third-party products, companies, standards or certifications are for informational purposes only and do not constitute endorsement.