Statutory Requirements for Facilities Management Companies in Kenya: Licences, Certificates and Regulatory Compliance

A professional facilities management company in Kenya operates within a regulatory environment covering business registration, taxation, occupational safety and health, environmental management, construction and technical works, employment obligations, data protection, fire safety and sector-specific licensing. The exact requirements depend on the services a company provides: a company offering cleaning and general maintenance will not necessarily require the same licences as one undertaking electrical installations, construction, waste transportation, pest control, security or lift maintenance.

Bestcare Facilities Management operates as a professional integrated facilities management service provider offering hard and soft facility services, including cleaning, maintenance, electrical and plumbing services, HVAC, pest control, security-related solutions, landscaping, waste management, fire-safety systems and building maintenance. Its published service portfolio reflects this broad scope.

The important distinction is that not every licence in the table below is automatically required by every facilities management company. Some are mandatory for virtually every operating business, while others become mandatory when the company performs a particular regulated activity.

1. Understanding Statutory Compliance in Facilities Management

Facilities management is multidisciplinary. A single contract may involve cleaners, technicians, electricians, plumbers, HVAC specialists, pest-control personnel, waste handlers, contractors and administrative staff.

Consequently, compliance has two dimensions:

Corporate compliance — requirements that apply because the company is operating a business and employing people.
Service-specific compliance — licences and approvals triggered by particular technical or regulated services.

For example, a facilities management company carrying out electrical installation work must meet the applicable Energy and Petroleum Regulatory Authority (EPRA) requirements. A company undertaking construction works may require National Construction Authority (NCA) registration. A company transporting regulated waste requires the appropriate National Environment Management Authority (NEMA) authorisation. NCA expressly identifies electrical works as specialist works for which EPRA licensing may also be required.

2. Detailed Table of Statutory Licences, Certificates and Compliance Requirements

No.	Licence, Certificate or Compliance Requirement	Main Purpose	When It Applies to an FM Company	Authorising / Regulatory Body
1	Certificate of Incorporation / Business Registration	Establishes the company as a legally recognised business entity	Required for a registered company	Business Registration Service (BRS)
2	KRA PIN Certificate	Identifies the business for tax and government transactions	Required for businesses	Kenya Revenue Authority (KRA)
3	Tax Compliance Certificate (TCC)	Demonstrates that applicable taxes have been filed and paid	Required for ongoing tax-compliant operations and commonly required for tenders and licences	KRA
4	eTIMS compliance	Enables compliant electronic invoicing and tax administration	Applicable to persons carrying on business	KRA
5	County Single Business Permit	Authorises commercial operations within the relevant county	Required according to the county and business activity	Relevant County Government
6	Workplace Registration Certificate	Registers the company’s workplace for occupational safety purposes	Required where the company operates a workplace covered by OSHA	Directorate of Occupational Safety and Health Services (DOSHS)
7	OSH compliance / workplace safety programme	Protects employees and other persons from workplace hazards	Applies to workplaces and field operations	DOSHS / Ministry of Labour
8	Annual Health & Safety Audit	Identifies occupational hazards and verifies safety controls	Required under applicable OSH requirements	DOSHS / approved OSH professionals
9	Fire Safety Audit / Fire Risk Compliance	Identifies and controls workplace fire risks	Applicable to workplaces and facilities managed by the company	DOSHS / approved fire safety auditors
10	WIBA insurance / Work Injury Benefits compliance	Provides statutory compensation protection for employees injured or occupationally exposed at work	Applicable to employers	Directorate of Occupational Safety and Health Services / relevant insurers
11	NSSF Employer Registration	Enables statutory social-security contributions for employees	Required for employers	National Social Security Fund (NSSF)
12	SHA Employer Registration and contribution compliance	Enables employer participation in the Social Health Insurance framework	Applicable to employers and employees	Social Health Authority (SHA)
13	NCA Contractor Registration	Authorises a business to undertake regulated construction/contracting work	Required when undertaking construction works covered by NCA	National Construction Authority (NCA)
14	NCA Practising Licence	Demonstrates current authority to practise as a registered contractor	Required for registered construction contractors	NCA
15	EPRA Electrical Contractor Licence	Authorises electrical contracting and installation work	Required when providing regulated electrical installation services	Energy and Petroleum Regulatory Authority (EPRA)
16	EPRA Electrical Worker Licence	Authorises qualified electrical personnel to undertake regulated electrical work	Required for electricians performing regulated work	EPRA
17	EPRA Solar PV Contractor Licence	Authorises regulated solar PV contracting	Required where the FM company undertakes solar PV installation	EPRA
18	EPRA Solar PV Worker Licence	Authorises qualified personnel undertaking solar PV work	Required for applicable solar PV work	EPRA
19	NEMA Waste Transport Licence	Authorises regulated transportation of waste	Required where the company transports regulated waste	NEMA
20	NEMA Waste Management Authorisations	Regulates collection, transportation, treatment and disposal of applicable waste	Required depending on the waste activity undertaken	NEMA
21	NEMA EIA Licence	Ensures environmental impacts of qualifying projects are assessed and mitigated	Required for qualifying projects	NEMA
22	Effluent Discharge Licence	Controls discharge of effluent into the environment	Required where applicable to the facility/activity	NEMA
23	Environmental Audit / Environmental Compliance	Provides ongoing environmental monitoring and compliance	Applicable to qualifying facilities and activities	NEMA
24	ODPC Data Controller / Processor Registration	Regulates lawful processing and protection of personal data	Required where the company’s processing activities fall within registration requirements	Office of the Data Protection Commissioner (ODPC)
25	NITA registration / industrial training compliance	Supports lawful workforce training and skills development	Applicable according to the company’s employment and training arrangements	National Industrial Training Authority (NITA)
26	Professional/technical personnel certificates	Demonstrates competence of staff performing regulated technical services	Required according to the technical service	Relevant professional/regulatory body
27	Plant and equipment inspection certificates	Confirms safety of applicable machinery, lifting equipment and plant	Required where regulated equipment is operated	DOSHS / competent persons
28	Lift/elevator regulatory compliance	Ensures safe installation, examination and operation of lifts	Required where lift/elevator work is undertaken	DOSHS and other applicable regulators
29	Fire equipment inspection/service records	Demonstrates that firefighting equipment is maintained and inspected	Required when maintaining fire-safety systems and in managed workplaces	DOSHS / competent persons
30	Public procurement / supplier registration documents	Enables participation in public procurement processes	Applicable when bidding for government work	Procuring entity / PPRA / National Treasury frameworks
31	AGPO registration, where applicable	Enables eligible businesses to participate under reserved government procurement opportunities	Only for qualifying enterprises/groups	National Treasury / AGPO
32	Insurance policies and certificates	Transfers specified operational and liability risks	Strongly relevant to professional FM operations and may be contractually mandatory	Licensed insurance provider / IRA-regulated sector
33	Contractor/subcontractor compliance documentation	Ensures outsourced specialists are properly licensed	Required where regulated work is subcontracted	Relevant regulator for each service

The table should be read as a compliance framework rather than a declaration that every item is mandatory for every FM company. The legal requirement is triggered by the nature of the work, the premises, equipment, workforce and contracts involved.

3. Company Registration and Corporate Legitimacy

The first level of compliance is establishing the business legally.

A facilities management company should have valid corporate registration documentation identifying the legal entity, directors and ownership structure. This is particularly important when entering commercial contracts, applying for licences, opening corporate accounts, bidding for tenders or registering with sector regulators.

A KRA PIN is also fundamental because KRA states that a PIN is used when conducting business with KRA, other government agencies and service providers.

Tax Compliance Certificate

The KRA Tax Compliance Certificate provides evidence that a taxpayer has met the applicable tax obligations. KRA states that a TCC is valid for 12 months and requires compliance with applicable return filing, tax payment and outstanding-tax obligations. KRA’s enhanced TCC requirements also include eTIMS compliance for persons carrying on business.

For a facilities management company, maintaining a current TCC is particularly important because commercial clients and public-sector procurement processes frequently require evidence of tax compliance.

4. County Single Business Permit

Facilities management companies operate from physical business premises and undertake commercial activities within particular counties. The applicable Single Business Permit is therefore an important county-level operating requirement.

The permit allows the county government to regulate and license commercial activities within its jurisdiction.

The exact permit category, fee and conditions depend on:

County;
Nature of business;
Size of operation;
Premises;
Number of employees;
Activities undertaken; and
Applicable county legislation.

A company operating nationally should therefore not assume that one county permit automatically satisfies every county-specific requirement.

5. Occupational Safety and Health Compliance

Occupational safety is particularly important for facilities management because technicians and operational employees work in environments containing electrical, mechanical, chemical, biological, fire, working-at-height and other hazards.

The Occupational Safety and Health Act, 2007 requires workplaces to be registered. Section 44 provides for registration of premises before they are occupied or used as workplaces and issuance of a workplace registration certificate.

DOSHS provides a formal workplace registration and renewal process involving workplace registration forms, assessment, payment of the registration fee and OSH levy, processing and issuance of the workplace registration certificate.

Why this matters to an FM company

A professional FM provider should have systems covering:

Risk assessments;
Safe systems of work;
Personal protective equipment;
Toolbox talks;
Incident reporting;
Emergency procedures;
First-aid arrangements;
Safety training;
Chemical handling;
Working-at-height procedures;
Electrical safety;
Machinery safety;
Contractor safety; and
Site-specific induction.

The objective is not simply to possess a certificate. The company must demonstrate that safety is incorporated into its operational processes.

6. Fire Safety Compliance

Fire safety is another major statutory consideration for facilities management.

The Factories and Other Places of Work (Fire Risk Reduction) Rules, 2007 apply to workplaces covered by the occupational safety framework. The Rules address fire detection, firefighting equipment, evacuation, fire drills, firefighting teams, training, fire safety policies and fire safety audits.

Among other requirements, the Rules provide for:

Fire risk assessment;
Firefighting equipment;
Fire detection systems;
Fire drills;
Emergency communication;
Assembly points;
Firefighting teams;
Fire safety training;
Maintenance of firefighting equipment; and
Annual fire safety audits by approved fire safety auditors.

The Rules specifically provide for an annual fire safety audit conducted by an approved fire safety auditor.

For an FM company, this is particularly relevant when managing:

Office buildings;
Shopping centres;
Schools;
Hospitals;
Warehouses;
Manufacturing facilities;
Apartment complexes;
Hotels; and
Institutional facilities.

7. NSSF Employer Compliance

A facilities management company with employees must also comply with applicable social-security obligations.

NSSF provides employer registration for companies and businesses and requires supporting corporate documents. NSSF also states that employers must ensure employees are registered and contributions are remitted.

This is particularly significant for FM businesses because they commonly employ substantial numbers of:

Cleaners;
Housekeepers;
Technicians;
Supervisors;
Facility managers;
Landscapers;
Administrative staff;
Drivers; and
Other operational personnel.

8. SHA Employer Compliance

The Social Health Authority provides an employer registration system for organisations. Its employer registration process requires, among other information, a valid KRA PIN and business registration documentation.

A compliant facilities management company should therefore maintain appropriate employer registration and contribution records for its workforce.

9. National Construction Authority Registration

Facilities management frequently overlaps with construction and building works.

However, general maintenance does not automatically mean that every FM company is a construction contractor.

Where the company undertakes work falling within NCA-regulated construction contracting, NCA registration becomes relevant.

The NCA states that a person may not carry on the business of a contractor unless registered by the Board and holding a valid practising licence. NCA registration covers categories including building engineering and mechanical and electrical specialist works.

NCA’s requirements include corporate documentation, qualified technical personnel, a valid KRA TCC, business licence and, where applicable, an EPRA electrical licence or Communications Authority licence.

Why NCA registration matters

It provides evidence that a contractor has undergone the statutory registration process applicable to construction activities.

For a facilities company, this may become relevant when undertaking:

Building alterations;
Construction works;
Structural works;
Mechanical installations;
Electrical construction;
Specialist engineering works; or
Other NCA-regulated works.

10. EPRA Electrical Licensing

Electrical work is a highly regulated area.

EPRA states that the Electric Power (Electrical Installation Work) Rules, 2006 establish requirements for licensing electricians and electrical contractors.

EPRA provides separate processes for electrical contractor and electrical-worker licensing.

The electrical contractor licensing process includes requirements such as:

Company/business registration;
Valid trading licence or Single Business Permit;
Permanent office documentation;
KRA PIN;
KRA Tax Compliance Certificate;
CR12;
Identification documentation; and
Technical requirements.

Therefore, an FM company should not present ordinary maintenance personnel as authorised electrical contractors where the work legally requires EPRA licensing.

The same principle applies to solar PV installations, for which EPRA provides separate contractor and worker licensing processes.

11. NEMA Environmental Compliance

Environmental management is an increasingly important part of facilities management.

NEMA issues environmental licences and permits covering areas including:

Environmental impact assessment;
Effluent discharge;
Waste management;
Waste transportation;
Waste treatment;
Waste disposal;
Recycling; and
Other regulated environmental activities.

The Environmental Management and Co-ordination (Waste Management) Regulations, 2024 replaced the previous 2006 waste regulations and introduced changes including revised licensing arrangements and a national waste information system.

NEMA also states that waste service providers must obtain the relevant licences for waste-management activities.

FM activities that can trigger NEMA requirements

These may include:

Waste collection;
Waste transportation;
Hazardous waste handling;
Waste treatment;
Disposal;
Recycling;
Effluent management;
Environmental audits; and
Projects requiring environmental assessment.

The critical issue is to distinguish between managing waste generated at a client’s premises and operating as a licensed waste transporter, treatment facility or disposal facility. Different obligations may apply.

12. Data Protection Compliance

Facilities management companies increasingly handle personal information.

For example, an FM company may process:

Employee information;
Client contact details;
Visitor records;
Access-control records;
CCTV information;
Contractor information;
Payroll information;
Tenant information; and
Building security information.

The Office of the Data Protection Commissioner (ODPC) regulates personal-data processing in Kenya.

ODPC states that organisations and individuals processing personal data may be required to register as data controllers or processors under the Data Protection Act and associated regulations.

This is particularly relevant to FM companies providing:

CCTV management;
Access control;
Security coordination;
Visitor management;
Reception services;
Employee administration; and
Digital facility-management platforms.

Data protection compliance should therefore include both registration, where applicable, and operational safeguards such as access controls, confidentiality procedures, data retention policies and incident-response procedures.

13. Machinery, Plant and Technical Equipment Compliance

Facilities management companies may operate or maintain:

Lifts;
Escalators;
Generators;
Pressure systems;
Electrical equipment;
Workshop machinery;
Hoists;
Pumps;
HVAC systems;
Refrigeration equipment; and
Other mechanical plant.

Where statutory inspection, testing or examination is required, the company should maintain current certificates and records.

DOSHS lists examination and testing of plants and plant inspection among its occupational safety services.

The exact requirement depends on the equipment and the nature of the operation. A responsible FM provider should therefore maintain an asset compliance register showing each regulated item, inspection date, certificate, next due date and responsible competent person.

14. Professional Certifications and Competent Personnel

Licensing of the company alone is not sufficient for many technical services.

A facilities management company should deploy appropriately qualified and competent personnel for specialised work.

Depending on the service, this can include:

Licensed electricians;
Qualified HVAC technicians;
Plumbing technicians;
Fire-safety personnel;
Occupational safety professionals;
Environmental professionals;
Pest-control technicians;
Qualified lift/elevator specialists;
Construction professionals;
Equipment operators; and
Other technically qualified personnel.

For example, DOSHS publishes minimum qualifications for approval of competent persons and institutions, including OSH advisers and fire safety auditors.

This is important because statutory compliance frequently depends not merely on who employs the worker, but on whether the person undertaking a regulated function is appropriately qualified, licensed or approved.

15. Public Procurement and AGPO Compliance

Facilities management companies seeking government contracts may need additional procurement documentation.

A current KRA TCC is an important component of tender compliance. KRA expressly identifies TCCs as being required for government tendering among other uses.

Eligible enterprises may also participate through AGPO — Access to Government Procurement Opportunities. PPRA explains that the procurement framework provides mechanisms for eligible disadvantaged groups and qualifying enterprises to participate in public procurement.

Accordingly, a facilities management provider pursuing public-sector work should maintain a tender-readiness file containing current:

Company registration documents;
KRA PIN;
TCC;
County business permits;
NCA documents, where applicable;
EPRA documents, where applicable;
NEMA documents, where applicable;
Insurance certificates;
Employee compliance records;
Professional certificates; and
Supplier/AGPO documentation where applicable.

16. International Management-System Certifications

Statutory licences should not be confused with voluntary or contractual certifications.

International standards such as:

ISO 9001 — Quality Management Systems
ISO 14001 — Environmental Management Systems
ISO 45001 — Occupational Health and Safety Management Systems

are management-system standards rather than substitutes for statutory licences.

They can nevertheless provide substantial commercial value by demonstrating that a facilities management company has structured systems for quality, environmental management and occupational health and safety.

Bestcare Facilities Management’s published materials describe its operations as compliance-focused and identify quality, environmental and occupational health and safety management as important elements of its FM approach. A separate Bestcare FM web property also states that the organisation holds ISO 9001:2015, ISO 14001:2015 and ISO 45001:2018 certifications and NITA registration.

For procurement purposes, however, clients should always request copies of the current certificates and verify the certification body, certificate number, scope and validity dates rather than relying solely on a website statement.

17. Bestcare Facilities Management as a Compliance-Focused Service Provider

Bestcare Facilities Management presents itself as an integrated facilities management provider serving residential, commercial and industrial environments. Its published service portfolio includes cleaning, preventive and reactive maintenance, MEP services, HVAC, fire-safety systems, landscaping, pest control, waste management, industrial equipment support, energy management and HSE compliance.

This broad service scope means that compliance cannot be treated as a single certificate.

Instead, a professional provider such as Bestcare should maintain a compliance matrix that maps each service against:

Service Area	Principal Compliance Considerations
Cleaning & Janitorial	County business permit, employment compliance, OSH, chemical safety, waste management
Building Maintenance	OSH, competent personnel, NCA where construction work applies
Electrical Maintenance	EPRA licensing where regulated electrical installation work is undertaken
Plumbing	Competent personnel and applicable construction/technical requirements
HVAC	Competent technical personnel, OSH and equipment safety
Fire Safety	Fire-risk requirements, competent persons and applicable inspection/audit requirements
Pest Control	Applicable pest-control/chemical regulatory requirements and safe chemical handling
Waste Management	NEMA requirements according to collection, transportation, treatment and disposal activities
Landscaping	OSH, equipment safety, chemical handling and environmental requirements
Generator Maintenance	Electrical, mechanical, occupational safety and environmental requirements as applicable
Lift/Elevator Services	Statutory examination, competent-person and equipment-safety requirements
Security/CCTV	Applicable security-sector and data-protection requirements
Access Control	Data protection and electronic-security considerations
Facility Staffing	Employment, NSSF, SHA, WIBA and OSH compliance
Construction Support	NCA and relevant technical licences where the activity falls within regulated construction work

This approach is substantially stronger than simply describing an organisation as “fully licensed.”

18. What “Fully Authorised, Licensed, Approved and Certified” Should Mean

For Bestcare Facilities Management, the phrase “fully authorised, licensed, approved and certified service provider” should be understood in a service-specific and evidence-based manner.

A credible compliance claim should be supported by:

Valid corporate registration documents
Current KRA PIN
Current KRA Tax Compliance Certificate
Applicable county business permits
Workplace registration
OSH compliance documentation
WIBA insurance
NSSF employer compliance
SHA employer compliance
Relevant NCA registration and licence where construction services are undertaken
Relevant EPRA licences where electrical or solar PV works are undertaken
Relevant NEMA licences for regulated environmental and waste activities
Applicable ODPC registration
Competence certificates for technical personnel
Plant and equipment inspection certificates
Fire-safety audit and inspection records
Professional liability and other applicable insurance
Current ISO certificates where claimed
NITA registration or training documentation where applicable
Current subcontractor licences for regulated services performed by third parties

The phrase should therefore not be interpreted to mean that one government authority issues a universal “facilities management licence.” Kenya regulates the individual activities that make up facilities management through different regulators.

19. Why Regulatory Compliance Matters to Clients

When a property owner appoints an FM company, the client is not merely purchasing cleaning or maintenance.

The client is effectively outsourcing part of the responsibility for:

Asset reliability;
Workplace safety;
Regulatory documentation;
Environmental management;
Contractor supervision;
Emergency preparedness;
Maintenance records;
Technical compliance;
Staff management; and
Operational continuity.

An appropriately compliant FM provider therefore reduces the client’s exposure to operational and regulatory risks.

For example, hiring an unlicensed provider for regulated electrical work can create safety, insurance and regulatory problems. Similarly, using an improperly authorised waste transporter can create environmental compliance exposure.

20. Recommended Compliance File for Bestcare Facilities Management

For every major corporate or institutional client, Bestcare should maintain a central Statutory Compliance File containing:

Corporate Documents

Certificate of Incorporation
CR12/company ownership records
KRA PIN
Current Tax Compliance Certificate
County business permit

Employee Compliance

NSSF registration
SHA registration/contribution records
WIBA policy
Employee contracts
Training records
PPE records
Medical/occupational health records where applicable

Workplace Safety

DOSHS workplace registration
Risk assessments
OSH audits
Safety policies
Incident records
Emergency plans
First-aid arrangements

Fire Safety

Fire safety audit
Fire equipment inspection records
Fire drill records
Fire training records
Emergency evacuation plans
Fire equipment maintenance certificates

Technical Compliance

EPRA licences where applicable
NCA registration where applicable
Competent-person certificates
Plant inspection certificates
Equipment maintenance records

Environmental Compliance

NEMA licences where applicable
Waste transportation documentation
Waste disposal records
Environmental audits where required
Chemical-management records
Effluent compliance documentation where applicable

Information Governance

ODPC registration where applicable
Data protection policy
Confidentiality agreements
CCTV/data-processing procedures
Data retention procedures
Access-control procedures

Quality Assurance

ISO certificates where applicable
Quality-management procedures
Service-level agreements
Preventive-maintenance schedules
Inspection checklists
Corrective-action reports
Client service reports

21. The Difference Between Statutory Compliance and Service Certification

One of the most important points for clients is that certification does not replace statutory licensing.

For example:

Document	What It Demonstrates
ISO 9001	Quality management system
ISO 14001	Environmental management system
ISO 45001	Occupational health and safety management system
EPRA Licence	Authorisation for applicable electrical/energy activities
NCA Licence	Authorisation for applicable construction contracting
NEMA Licence	Authorisation for applicable environmental/waste activities
DOSHS Workplace Certificate	Registration of a workplace
KRA TCC	Tax compliance
NSSF Registration	Employer social-security compliance
SHA Registration	Employer health-insurance framework compliance
County Business Permit	County-level commercial operating permission
ODPC Registration	Registration relating to regulated personal-data processing

This distinction helps clients evaluate an FM provider correctly. A company can hold an excellent ISO certification while still needing separate licences for specific regulated activities.

22. How Clients Can Verify Bestcare’s Compliance

Before awarding a large facilities management contract, a client should request a vendor compliance pack from Bestcare Facilities Management.

The pack should contain copies of the relevant current documents and clearly indicate:

Issuing authority;
Certificate/licence number;
Holder’s legal name;
Scope of authorisation;
Date of issue;
Expiry/renewal date;
Relevant service category; and
Any conditions attached to the licence.

For third-party technical services, the client should also verify the licence of the actual contractor or technician undertaking the regulated work.

This is especially important for electrical installations, construction works, waste transportation, fire-safety audits and other regulated specialist activities.

A standard facilities management company in Kenya does not operate under a single universal “FM licence.” Its legal compliance is a portfolio of corporate registrations, tax obligations, workplace requirements, employee protections, environmental approvals and specialist licences, with additional requirements triggered by the specific services it performs.

Bestcare Facilities Management’s published portfolio demonstrates the breadth of services for which a modern FM provider may be responsible. For Bestcare to present itself as a fully authorised, licensed, approved and certified service provider, the strongest approach is to maintain current documentary evidence for every applicable regulatory requirement and to use appropriately licensed specialists whenever a service falls under a sector-specific regulator.

The result is a facilities management provider that can give clients more than routine maintenance and cleaning: it can provide documented regulatory compliance, competent technical service, occupational safety, environmental responsibility, quality management and accountable facility operations.

Statutory Requirements for Facilities Management Companies: We are Fully Compliant!