Trends Analysis (2021-2025)
Digital Loans Services
We dive into the five-year performance trajectories (2021–2025) of the evaluated companies and entities in the Digital Loans Sector. By analysing historical trends and core metrics, this section reveals key patterns, competitive advantages, and priority improvement areas providing actionable insights into compliance drivers and hurdles to empower better decision-making and forward-thinking planning.
Trends in performance of assessed companies over time in the Digital Loans Sector
Performance Trends for Assessed Digital Loans Services over the Years (2024-2025) in Rwanda
An assessment of data protection and privacy compliance performance among Spenn, Save, and Kiva shows varying trends over the two-year period. Given the highly sensitive financial and personal data processed by these digital loan platforms, the findings offer important insight into their privacy maturity and regulatory alignment.
Spenn recorded a slight decrease from 42% in 2024 to 40% in 2025, indicating a minor regression in data protection and privacy practices. While the score remains relatively moderate, the decline may suggest challenges in maintaining or enhancing internal privacy controls, policies, and staff awareness. Continued focus is required to ensure sustained compliance with evolving data protection regulations and to mitigate risks related to sensitive financial data.
Save experienced a decline from 31% in 2024 to 28% in 2025, signaling a slight deterioration in its privacy framework. This suggests that the company may face challenges in strengthening governance, technical safeguards, or operational practices for data protection. The low to moderate score highlights the need for accelerated efforts to enhance data protection measures to maintain customer trust and comply with regulatory standards.
Kiva, in contrast, demonstrated a significant improvement, rising from 34% in 2024 to 49% in 2025. This notable increase indicates that Kiva has made substantial progress in strengthening its data protection and privacy practices, likely through improved policy implementation, enhanced technical safeguards, and greater organizational awareness. The improvement positions Kiva as a leading performer in this group, reflecting a commitment to safeguarding customer data and reducing compliance risks.
Overall, the data highlights uneven privacy and data protection maturity among digital loan service providers. Kiva stands out for its significant progress, demonstrating that deliberate investment in privacy practices can yield measurable results. In contrast, Spenn and Save show slight declines, signaling a need for renewed focus on maintaining and enhancing data protection frameworks. These findings underscore the importance of continuous assessment, staff training, and investment in secure digital infrastructure. Providers with stagnant or declining performance remain vulnerable to regulatory non-compliance, data breaches, and loss of customer trust. Strengthening privacy and data protection practices is critical not only for compliance but also for ensuring the secure handling of highly sensitive financial and personal information in the digital loan sector.
Spenn recorded a slight decrease from 42% in 2024 to 40% in 2025, indicating a minor regression in data protection and privacy practices. While the score remains relatively moderate, the decline may suggest challenges in maintaining or enhancing internal privacy controls, policies, and staff awareness. Continued focus is required to ensure sustained compliance with evolving data protection regulations and to mitigate risks related to sensitive financial data.
Save experienced a decline from 31% in 2024 to 28% in 2025, signaling a slight deterioration in its privacy framework. This suggests that the company may face challenges in strengthening governance, technical safeguards, or operational practices for data protection. The low to moderate score highlights the need for accelerated efforts to enhance data protection measures to maintain customer trust and comply with regulatory standards.
Kiva, in contrast, demonstrated a significant improvement, rising from 34% in 2024 to 49% in 2025. This notable increase indicates that Kiva has made substantial progress in strengthening its data protection and privacy practices, likely through improved policy implementation, enhanced technical safeguards, and greater organizational awareness. The improvement positions Kiva as a leading performer in this group, reflecting a commitment to safeguarding customer data and reducing compliance risks.
Overall, the data highlights uneven privacy and data protection maturity among digital loan service providers. Kiva stands out for its significant progress, demonstrating that deliberate investment in privacy practices can yield measurable results. In contrast, Spenn and Save show slight declines, signaling a need for renewed focus on maintaining and enhancing data protection frameworks. These findings underscore the importance of continuous assessment, staff training, and investment in secure digital infrastructure. Providers with stagnant or declining performance remain vulnerable to regulatory non-compliance, data breaches, and loss of customer trust. Strengthening privacy and data protection practices is critical not only for compliance but also for ensuring the secure handling of highly sensitive financial and personal information in the digital loan sector.
Performance Trends for Assessed Digital Loans Services over the Years (2024-2025) in Tanzania
An assessment of data protection and privacy compliance among PesaX Tanzania, Branch International Tanzania, MkopoWako Tanzania, and TwigaLoan reveals significant fluctuations over the two-year period, highlighting varying levels of maturity in safeguarding sensitive financial and personal data.
PesaX Tanzania exhibited a remarkable increase in compliance performance, rising from 4% in 2024 to 35% in 2025. This substantial improvement suggests that the company has taken significant steps to strengthen its privacy framework, implement robust data protection policies, and enhance operational controls. The progress indicates a growing commitment to safeguarding customer data and aligning with relevant data protection regulations.
Branch International Tanzania maintained a relatively stable score, slightly decreasing from 38% in 2024 to 37% in 2025. While the marginal decline is not significant, it suggests the need for continuous monitoring and reinforcement of existing privacy controls to sustain compliance. Branch Tanzania demonstrates moderate maturity in data protection practices, reflecting ongoing efforts to protect sensitive financial information.
MkopoWako Tanzania experienced a sharp decline from 29% in 2024 to 4% in 2025, signaling a major regression in data protection and privacy practices. This drop indicates serious gaps in governance, technical safeguards, or operational compliance, and exposes the company to heightened regulatory and reputational risks. Immediate corrective actions are required to rebuild its privacy framework and ensure protection of customer data.
TwigaLoan maintained a consistently low score of 4% in both years, indicating persistent deficiencies in privacy and data protection practices. The stagnant low performance highlights significant vulnerabilities in handling sensitive financial information, underscoring the urgent need for foundational privacy controls and regulatory compliance measures.
Overall, the data highlights a highly uneven compliance landscape among digital loan providers in Tanzania. PesaX Tanzania stands out for its remarkable improvement, demonstrating that focused investment in privacy and data protection can yield tangible results. Branch Tanzania shows moderate maturity with stable performance, while MkopoWako Tanzania and TwigaLoan lag significantly, presenting critical risks. These trends underscore the importance of continuous improvement in privacy governance, staff training, and technical safeguards. Providers with low or declining performance remain highly vulnerable to data breaches, regulatory penalties, and erosion of customer trust. Strengthening privacy and data protection frameworks is essential not only for regulatory compliance but also for ensuring the secure handling of sensitive financial and personal information in the growing digital loan sector.
Performance Trends for Assessed Digital Loans Services over the Years (2023-2025) in Mauritius
An assessment of data protection and privacy compliance among Finclub, Fundkiss, and Cim Finance shows differing trajectories between 2023 and 2025, reflecting varying levels of maturity in privacy governance and compliance within the digital loan services sector.
Finclub demonstrated steady improvement from 39.8% in 2023 to 43% in 2024, confirming the positive trend noted in last year's analysis. However, in 2025, its score declined slightly to 42%, indicating a minor regression. While this decrease is marginal, it suggests challenges in sustaining momentum or fully embedding privacy controls across operations. Overall, Finclub maintains a moderate level of compliance, but continued focus is needed to strengthen governance, monitoring, and implementation to prevent stagnation.
Fundkiss continued its upward trajectory beyond 2024. After improving from 34.7% in 2023 to 40% in 2024, the company further increased its score to 46% in 2025. This sustained improvement reflects consistent efforts to enhance data protection policies, operational controls, and staff awareness. Fundkiss's progress indicates growing compliance maturity and a stronger alignment with data protection and privacy requirements compared to previous years.
Cim Finance demonstrated stable and relatively strong performance, maintaining a score of 59% in both 2024 and 2025. Although 2023 data is not available for comparison, the consistent high score suggests that Cim Finance has established a mature data protection and privacy framework. The stability indicates effective governance structures and the ability to sustain compliance over time, positioning the institution as a sector leader.
Overall, the data reflects a gradual strengthening of data protection and privacy practices within the digital loan services sector, though progress remains uneven. Fundkiss shows clear and sustained improvement, while Finclub appears to be plateauing after earlier gains. Cim Finance continues to demonstrate comparatively strong and stable compliance. These findings underscore the importance of continuous investment in privacy governance, staff training, and monitoring mechanisms. Providers that sustain or improve compliance are better positioned to manage regulatory risk and maintain customer trust, while those experiencing stagnation risk falling behind evolving data protection expectations. Strengthening data protection and privacy practices remains critical to ensuring secure handling of sensitive financial and personal data in the digital loan services sector.
Performance Trends for Assessed Digital Loans Services over the Years (2023-2025) in Zimbabwe
An assessment of data protection and privacy compliance among Ecocash, Zibuko, InnBucks, and eShagi shows mixed performance trends between 2023 and 2025, indicating uneven compliance maturity across the digital loan services sector.
Ecocash demonstrated positive progress from 38.0% in 2023 to 43.0% in 2024, as noted in last year's analysis, reflecting strengthened data protection practices. However, in 2025, its score declined significantly to 25.0%, indicating a marked regression. This drop suggests challenges in sustaining previously implemented privacy controls or adapting to evolving compliance requirements. Despite earlier progress, the 2025 decline exposes increased regulatory and reputational risks and underscores the need for renewed focus on maintaining robust data protection governance.
Zibuko showed a modest improvement from 5.6% in 2023 to 8.0% in 2024, consistent with the positive but limited progress highlighted in last year's analysis. In 2025, however, its score declined to 5.0%, effectively erasing the gains made in 2024. This regression highlights persistent weaknesses in privacy and data protection practices and suggests that compliance efforts have not been institutionalized.
InnBucks experienced a sharp decline, dropping from 37.0% in 2024 to 7.0% in 2025. Although 2023 data is unavailable, the steep reduction between 2024 and 2025 indicates a significant deterioration in data protection and privacy practices. This suggests serious gaps in governance, internal controls, or ongoing compliance monitoring, exposing the company to heightened data protection risks.
eShagi demonstrated a notable improvement, increasing from 5.0% in 2024 to 20.0% in 2025. This upward trend indicates initial efforts to strengthen data protection measures and improve compliance maturity. While encouraging, the 2025 score remains relatively low, signaling that further work is required to establish a comprehensive and sustainable privacy framework.
Overall, the data reveals significant volatility in data protection and privacy compliance across digital loan service providers. While some platforms, such as eShagi, show encouraging improvement, others including Ecocash, Zibuko, and InnBucks have experienced notable regressions after earlier progress. These findings underscore the importance of sustained and institutionalized privacy governance, rather than one-off compliance initiatives. Providers with declining or unstable performance face increased risks of regulatory non-compliance, data breaches, and erosion of customer trust. Strengthening data protection and privacy practices through continuous monitoring, staff training, and investment in secure systems remains critical for ensuring the safe handling of sensitive financial and personal data in the digital loan services sector.
Performance Trends for Assessed Digital Loans Services over the Years (2023-2025) in Kenya
An assessment of data protection and privacy compliance among Tala, Branch International (Kenya), Zenka, and LendPlus reveals shifting performance trends between 2023 and 2025, highlighting varying levels of compliance maturity within the digital loan services sector.
Tala experienced a continued decline in performance over the review period. After dropping from 50.76% in 2023 to 47% in 2024, as noted in last year's analysis, Tala's score further decreased to 34% in 2025. This sustained downward trend indicates challenges in maintaining previously established data protection and privacy controls. While Tala had historically demonstrated relatively strong compliance, the decline suggests a need to reassess governance structures, monitoring mechanisms, and operational practices to prevent further regression and mitigate regulatory and reputational risks.
Branch International (Kenya) shows a recovery following the decline observed in 2024. After decreasing from 43.28% in 2023 to 36% in 2024, Branch improved significantly to 51% in 2025. This rebound suggests renewed focus on strengthening data protection policies, technical safeguards, and organizational accountability. The improvement positions Branch among the stronger performers in 2025, reflecting a more mature and proactive approach to privacy compliance.
Zenka maintained relatively stable performance, with a slight decrease from 50% in 2024 to 49% in 2025. Although 2023 data is unavailable, the marginal change suggests that Zenka has largely sustained its data protection and privacy practices. The consistently high score indicates a solid compliance foundation, though continued improvement is necessary to reach higher maturity levels and adapt to evolving regulatory requirements.
LendPlus demonstrated notable improvement, increasing from 35% in 2024 to 51% in 2025. This significant rise indicates substantial progress in strengthening data protection and privacy practices, potentially through improved governance, policy implementation, and staff training. The improvement reflects growing compliance maturity and a stronger commitment to safeguarding customer data.
Overall, the data reflects a dynamic and uneven compliance landscape within the digital loan services sector. While Tala shows a concerning downward trend, Branch International (Kenya) and LendPlus demonstrate that targeted corrective actions can reverse declines and significantly improve compliance outcomes. Zenka's stable performance suggests a relatively mature framework that requires ongoing reinforcement. These findings underscore the importance of continuous monitoring, institutionalized privacy governance, and sustained investment in data protection measures. Digital loan providers experiencing declining performance face increased exposure to regulatory enforcement, data breaches, and erosion of consumer trust. Conversely, those demonstrating recovery or improvement are better positioned to manage compliance risks and maintain confidence in their handling of sensitive financial and personal data.
Performance Trends for Assessed Digital Loans Services over the Years (2023-2025) in Uganda
An assessment of data protection and privacy compliance among DoveCash, ManguCash, iSente, and Quick Sente shows mixed performance trends between 2023 and 2025, indicating varying levels of maturity in data protection practices across the digital loan services sector.
DoveCash demonstrated gradual improvement from 28.75% in 2023 to 31% in 2024, as highlighted in last year's analysis. However, in 2025, its score declined slightly to 30%, suggesting a minor regression. While the platform maintains a moderate level of compliance, the stagnation indicates challenges in sustaining momentum and fully embedding privacy controls. Continued investment in governance, monitoring, and staff awareness will be necessary to prevent further decline.
ManguCash showed strong progress from 33.35% in 2023 to 45% in 2024, confirming the positive trend noted previously. In 2025, however, its score fell significantly to 32%, representing a notable regression. This decline suggests difficulties in maintaining the enhanced privacy measures introduced in 2024, potentially due to gaps in ongoing compliance monitoring or institutionalization of controls. Despite earlier gains, the 2025 performance exposes renewed compliance risks.
iSente experienced a slight decline from 30% in 2024 to 29% in 2025. Although 2023 data is unavailable, the marginal decrease suggests relatively stable but modest compliance maturity. The scores indicate that while some privacy measures are in place, further strengthening is required to align with higher data protection standards.
Quick Sente also recorded a small decrease, dropping from 29% in 2024 to 27% in 2025. This downward trend, though limited, points to challenges in sustaining data protection practices. The consistently low-to-moderate scores highlight the need for stronger governance structures and more robust privacy controls.
Overall, the data indicates volatility and limited sustainability of data protection improvements among digital loan service providers. While some platforms, such as ManguCash and DoveCash, showed progress between 2023 and 2024, these gains were not consistently maintained into 2025. These findings underscore the importance of institutionalizing data protection and privacy measures, rather than relying on short-term compliance efforts. Providers with declining or stagnant performance remain vulnerable to regulatory non-compliance, data breaches, and erosion of customer trust. Strengthening governance frameworks, continuous compliance monitoring, and staff training will be critical to ensuring secure handling of sensitive financial and personal data within the digital loan services sector.