Security & Data Considerations

Security & Data Considerations

Credentials Management

• The Sender ID stored in TIMS Settings is sensitive as it authenticates your submissions to KRA via Tevin
• Restrict access to the TIMS Settings doctype to System Managers and Finance Managers only via ERPNext's Role Permissions Manager
• Do not hardcode credentials in custom scripts or share them in chat/email

Data Sent to Tevin

The integration sends invoice data (line items, amounts, customer details) to Tevin's servers as part of the KRA compliance flow. Ensure your data processing practices are aligned with your privacy policy, particularly for B2C invoices that may contain individual customer details.

Network Security

• Ensure your ERPNext server communicates with Tevin's API over HTTPS — the Server Address should always begin with https://
• If your server is behind a firewall, whitelist the Tevin API domain for outbound HTTPS (port 443)