Address
Elroy Hub, Kiambu RD.
p.o.box 13305-00100
Nairobi
Work Hours
Monday to Friday: 7AM - 7PM
Weekend: 10AM - 5PM
Address
Elroy Hub, Kiambu RD.
p.o.box 13305-00100
Nairobi
Work Hours
Monday to Friday: 7AM - 7PM
Weekend: 10AM - 5PM

Tax audits by the Kenya Revenue Authority (KRA) are becoming more frequent and data-driven. For many businesses in Kenya, a KRA audit can result in heavy penalties, disruptions, and reputational risk if not handled properly. In this guide, we explain…

Corporate failures are not unique to the global market — Kenya has seen its share of high-profile business collapses and scandals in recent years. From collapsed banks to struggling parastatals and governance crises in listed companies, the common thread is…

In Kenya’s fast-changing business environment, risk is often seen as something to avoid. Many organizations treat risk management as a defensive exercise a way to reduce losses, avoid fines, or survive crises. But the truth is different: when done strategically,…

Small and Medium Enterprises (SMEs) are the backbone of Kenya’s economy, contributing over 30% of GDP and employing millions of people. Yet, compliance remains one of their greatest challenges. From KRA tax requirements to labor laws and sector-specific regulations, many…

In 2023, the Capital Markets Authority (CMA) issued its ESG Disclosure Guidance, making environmental, social and governance reporting mandatory for all companies listed on the Nairobi Securities Exchange (NSE). This isn’t just about sustainability—it’s about investor confidence, regulatory compliance, and…

In Kenya’s increasingly competitive and regulated business environment, sustainability goes far beyond environmental concerns. It means building a business that can withstand risks, adapt to changes, and consistently deliver value to stakeholders. One of the most effective tools for achieving…

Yet in our audits, we consistently find the same critical gaps: Gap 1: No Data Protection Impact Assessment (DPIA) Many fintechs launch new products without assessing data risks. The law requires a DPIA for any processing that’s “likely to result…