---
title: "Security & Data Considerations"
space: "TIMS Tevin Type-C Integration"
url: "https://docs.navari.co.ke/tims-tevin/security-data-considerations"
updated: "2026-05-26"
---

## Security & Data Considerations

### Credentials Management

- The **Sender ID** stored in TIMS Settings is sensitive as it authenticates your submissions to KRA via Tevin
- Restrict access to the TIMS Settings doctype to System Managers and Finance Managers only via ERPNext's **Role Permissions Manager**
- Do not hardcode credentials in custom scripts or share them in chat/email



### Data Sent to Tevin

The integration sends invoice data (line items, amounts, customer details) to Tevin's servers as part of the KRA compliance flow. Ensure your data processing practices are aligned with your privacy policy, particularly for B2C invoices that may contain individual customer details.

### Network Security

- Ensure your ERPNext server communicates with Tevin's API over **HTTPS** — the Server Address should always begin with `https://`
- If your server is behind a firewall, whitelist the Tevin API domain for outbound HTTPS (port 443)