Disclaimers

Risiti is a software tool. It is not tax advice.

PesaStack Limited is not a licensed tax consultant, accountant, tax agent, or auditor. Nothing on the Risiti platform — including any calculations, suggestions, or automated validations — constitutes tax advice, accounting advice, or legal counsel.

You are solely responsible for ensuring your invoices are tax-correct. If you are unsure about your tax obligations, item classifications, VAT applicability, or KRA compliance requirements, consult a qualified Kenyan tax professional or accountant.

Risiti provides an eTIMS invoicing workflow. Where production access is enabled, invoice requests are transmitted through the applicable KRA eTIMS integration. KRA's taxpayer, technical, vetting, certification and production requirements remain authoritative. However:

• KRA acceptance depends on your data. KRA may reject an invoice if the data you provided is incorrect — wrong buyer PIN, wrong item classification, incorrect amounts, or inconsistency with other KRA records. If KRA rejects your invoice, it is your responsibility to correct and resubmit it. PesaStack is not liable for KRA rejections caused by data errors you introduced.
• KRA system availability is outside our control. KRA's eTIMS infrastructure may experience downtime, scheduled maintenance, or unexpected outages. We have no control over KRA's systems. If KRA is unavailable, your invoice submission will be queued and retried automatically — but we cannot guarantee when or whether KRA will accept it.
• API and policy changes may affect the Service. KRA may update its eTIMS API specifications, change integration requirements, or modify its policies. This may temporarily disrupt Risiti's functionality. We will update the Service as quickly as possible but are not liable for any period of disruption.
• No liability for KRA penalties. PesaStack is not liable for KRA penalties, fines, disallowed expenses, failed tax audits, or any other tax consequence arising from the use of Risiti, including consequences arising from incorrect data submitted through our platform.

Risiti does not originate or independently audit customer-controlled submissions. An API Customer determines when to call the API, which Connected Business and transaction to identify, and what commercial and tax data to send. Risiti's validation, sandbox output, status pages, or KRA acknowledgement do not certify that a transaction occurred, that the submitter had authority, or that the tax treatment is correct.

To the maximum extent permitted by law, PesaStack is not liable for consequences caused by false, inaccurate, incomplete, duplicated, unauthorized, or improperly classified invoices, credit notes, items, purchases, stock movements, supplier records, consent records, or buyer-initiated invoices supplied or approved by an API Customer, its users, or a Connected Business.

API Customers must secure their API keys, use minimum scopes, maintain authorization from every Connected Business, comply with applicable privacy and tax law, and preserve the commercial evidence supporting each submission.

M-Pesa is a product of Safaricom PLC. PesaStack Limited is not affiliated with, endorsed by, partnered with, or a subsidiary of Safaricom PLC.

Subscription payments made through Risiti are processed via Safaricom's Daraja API. PesaStack is not responsible for:

• M-Pesa network outages or Safaricom system downtime that prevent payment completion.
• Failed transactions due to M-Pesa account limits, insufficient balance, or Safaricom technical errors.
• Delays in payment confirmation caused by Safaricom's infrastructure.
• M-Pesa transaction charges, which are set by and payable to Safaricom under their published tariffs.

In the event of an M-Pesa payment failure, contact us at hello@getrisiti.com and we will assist you in resolving the payment.

You are responsible for verifying every compliance record before submission.

Risiti performs structural, arithmetic, security, and workflow checks. However, Risiti cannot independently verify commercial truth, authority, consent, tax treatment, eligibility, or supporting documents. Credit notes must correct the proper original invoice; supplier purchases and stock movements must reflect actual events; buyer-initiated invoices require applicable KRA eligibility, declarations, and seller consent.

Once an invoice is transmitted to KRA's eTIMS system, it cannot be reversed or deleted through Risiti. KRA's eTIMS system treats submitted invoices as permanent records. If you need to correct a submitted invoice, the proper remedy is a credit note (refund invoice) — consult your accountant or KRA's guidance on invoice corrections.

Risiti is provided on an "as-is" and "as-available" basis. PesaStack does not warrant that:

• The Service will be uninterrupted, error-free, or available at all times.
• Any errors or bugs will be corrected within a specific timeframe.
• The Service will meet your specific business requirements.

We target 99.5% uptime but do not provide a legally binding SLA for standard subscription plans. Planned maintenance will be communicated in advance where practicable.

Risiti depends on third-party services to function. PesaStack is not responsible for disruptions, changes, or discontinuation of:

• KRA eTIMS — Kenya Revenue Authority's invoice management system
• Safaricom M-Pesa — Mobile money payment processing
• Celcom Africa — SMS delivery infrastructure
• Convex — Cloud data storage and backend infrastructure

Changes by any of these providers may affect Risiti's functionality. We will communicate material disruptions via SMS and in-app notifications as quickly as possible.