Statutory Requirements for Facilities Management Companies in Kenya: Licences, Certificates and Regulatory Compliance

A professional facilities management company in Kenya operates within a regulatory environment covering business registration, taxation, occupational safety and health, environmental management, construction and technical works, employment obligations, data protection, fire safety and sector-specific licensing. The exact requirements depend on the services a company provides: a company offering cleaning and general maintenance will not necessarily require the same licences as one undertaking electrical installations, construction, waste transportation, pest control, security or lift maintenance.

Bestcare Facilities Management operates as a professional integrated facilities management service provider offering hard and soft facility services, including cleaning, maintenance, electrical and plumbing services, HVAC, pest control, security-related solutions, landscaping, waste management, fire-safety systems and building maintenance. Its published service portfolio reflects this broad scope.

The important distinction is that not every licence in the table below is automatically required by every facilities management company. Some are mandatory for virtually every operating business, while others become mandatory when the company performs a particular regulated activity.

1. Understanding Statutory Compliance in Facilities Management

Facilities management is multidisciplinary. A single contract may involve cleaners, technicians, electricians, plumbers, HVAC specialists, pest-control personnel, waste handlers, contractors and administrative staff.

Consequently, compliance has two dimensions:

1. Corporate compliance — requirements that apply because the company is operating a business and employing people.
2. Service-specific compliance — licences and approvals triggered by particular technical or regulated services.

For example, a facilities management company carrying out electrical installation work must meet the applicable Energy and Petroleum Regulatory Authority (EPRA) requirements. A company undertaking construction works may require National Construction Authority (NCA) registration. A company transporting regulated waste requires the appropriate National Environment Management Authority (NEMA) authorisation. NCA expressly identifies electrical works as specialist works for which EPRA licensing may also be required.

2. Detailed Table of Statutory Licences, Certificates and Compliance Requirements

The table should be read as a compliance framework rather than a declaration that every item is mandatory for every FM company. The legal requirement is triggered by the nature of the work, the premises, equipment, workforce and contracts involved.

3. Company Registration and Corporate Legitimacy

The first level of compliance is establishing the business legally.

A facilities management company should have valid corporate registration documentation identifying the legal entity, directors and ownership structure. This is particularly important when entering commercial contracts, applying for licences, opening corporate accounts, bidding for tenders or registering with sector regulators.

A KRA PIN is also fundamental because KRA states that a PIN is used when conducting business with KRA, other government agencies and service providers.

Tax Compliance Certificate

The KRA Tax Compliance Certificate provides evidence that a taxpayer has met the applicable tax obligations. KRA states that a TCC is valid for 12 months and requires compliance with applicable return filing, tax payment and outstanding-tax obligations. KRA’s enhanced TCC requirements also include eTIMS compliance for persons carrying on business.

For a facilities management company, maintaining a current TCC is particularly important because commercial clients and public-sector procurement processes frequently require evidence of tax compliance.

4. County Single Business Permit

Facilities management companies operate from physical business premises and undertake commercial activities within particular counties. The applicable Single Business Permit is therefore an important county-level operating requirement.

The permit allows the county government to regulate and license commercial activities within its jurisdiction.

The exact permit category, fee and conditions depend on:

• County;
• Nature of business;
• Size of operation;
• Premises;
• Number of employees;
• Activities undertaken; and
• Applicable county legislation.

A company operating nationally should therefore not assume that one county permit automatically satisfies every county-specific requirement.

5. Occupational Safety and Health Compliance

Occupational safety is particularly important for facilities management because technicians and operational employees work in environments containing electrical, mechanical, chemical, biological, fire, working-at-height and other hazards.

The Occupational Safety and Health Act, 2007 requires workplaces to be registered. Section 44 provides for registration of premises before they are occupied or used as workplaces and issuance of a workplace registration certificate.

DOSHS provides a formal workplace registration and renewal process involving workplace registration forms, assessment, payment of the registration fee and OSH levy, processing and issuance of the workplace registration certificate.

Why this matters to an FM company

A professional FM provider should have systems covering:

• Risk assessments;
• Safe systems of work;
• Personal protective equipment;
• Toolbox talks;
• Incident reporting;
• Emergency procedures;
• First-aid arrangements;
• Safety training;
• Chemical handling;
• Working-at-height procedures;
• Electrical safety;
• Machinery safety;
• Contractor safety; and
• Site-specific induction.

The objective is not simply to possess a certificate. The company must demonstrate that safety is incorporated into its operational processes.

6. Fire Safety Compliance

Fire safety is another major statutory consideration for facilities management.

The Factories and Other Places of Work (Fire Risk Reduction) Rules, 2007 apply to workplaces covered by the occupational safety framework. The Rules address fire detection, firefighting equipment, evacuation, fire drills, firefighting teams, training, fire safety policies and fire safety audits.

Among other requirements, the Rules provide for:

• Fire risk assessment;
• Firefighting equipment;
• Fire detection systems;
• Fire drills;
• Emergency communication;
• Assembly points;
• Firefighting teams;
• Fire safety training;
• Maintenance of firefighting equipment; and
• Annual fire safety audits by approved fire safety auditors.

The Rules specifically provide for an annual fire safety audit conducted by an approved fire safety auditor.

For an FM company, this is particularly relevant when managing:

• Office buildings;
• Shopping centres;
• Schools;
• Hospitals;
• Warehouses;
• Manufacturing facilities;
• Apartment complexes;
• Hotels; and
• Institutional facilities.

7. NSSF Employer Compliance

A facilities management company with employees must also comply with applicable social-security obligations.

NSSF provides employer registration for companies and businesses and requires supporting corporate documents. NSSF also states that employers must ensure employees are registered and contributions are remitted.

This is particularly significant for FM businesses because they commonly employ substantial numbers of:

• Cleaners;
• Housekeepers;
• Technicians;
• Supervisors;
• Facility managers;
• Landscapers;
• Administrative staff;
• Drivers; and
• Other operational personnel.

8. SHA Employer Compliance

The Social Health Authority provides an employer registration system for organisations. Its employer registration process requires, among other information, a valid KRA PIN and business registration documentation.

A compliant facilities management company should therefore maintain appropriate employer registration and contribution records for its workforce.

9. National Construction Authority Registration

Facilities management frequently overlaps with construction and building works.

However, general maintenance does not automatically mean that every FM company is a construction contractor.

Where the company undertakes work falling within NCA-regulated construction contracting, NCA registration becomes relevant.

The NCA states that a person may not carry on the business of a contractor unless registered by the Board and holding a valid practising licence. NCA registration covers categories including building engineering and mechanical and electrical specialist works.

NCA’s requirements include corporate documentation, qualified technical personnel, a valid KRA TCC, business licence and, where applicable, an EPRA electrical licence or Communications Authority licence.

Why NCA registration matters

It provides evidence that a contractor has undergone the statutory registration process applicable to construction activities.

For a facilities company, this may become relevant when undertaking:

• Building alterations;
• Construction works;
• Structural works;
• Mechanical installations;
• Electrical construction;
• Specialist engineering works; or
• Other NCA-regulated works.

10. EPRA Electrical Licensing

Electrical work is a highly regulated area.

EPRA states that the Electric Power (Electrical Installation Work) Rules, 2006 establish requirements for licensing electricians and electrical contractors.

EPRA provides separate processes for electrical contractor and electrical-worker licensing.

The electrical contractor licensing process includes requirements such as:

• Company/business registration;
• Valid trading licence or Single Business Permit;
• Permanent office documentation;
• KRA PIN;
• KRA Tax Compliance Certificate;
• CR12;
• Identification documentation; and
• Technical requirements.

Therefore, an FM company should not present ordinary maintenance personnel as authorised electrical contractors where the work legally requires EPRA licensing.

The same principle applies to solar PV installations, for which EPRA provides separate contractor and worker licensing processes.

11. NEMA Environmental Compliance

Environmental management is an increasingly important part of facilities management.

NEMA issues environmental licences and permits covering areas including:

• Environmental impact assessment;
• Effluent discharge;
• Waste management;
• Waste transportation;
• Waste treatment;
• Waste disposal;
• Recycling; and
• Other regulated environmental activities.

The Environmental Management and Co-ordination (Waste Management) Regulations, 2024 replaced the previous 2006 waste regulations and introduced changes including revised licensing arrangements and a national waste information system.

NEMA also states that waste service providers must obtain the relevant licences for waste-management activities.

FM activities that can trigger NEMA requirements

These may include:

• Waste collection;
• Waste transportation;
• Hazardous waste handling;
• Waste treatment;
• Disposal;
• Recycling;
• Effluent management;
• Environmental audits; and
• Projects requiring environmental assessment.

The critical issue is to distinguish between managing waste generated at a client’s premises and operating as a licensed waste transporter, treatment facility or disposal facility. Different obligations may apply.

12. Data Protection Compliance

Facilities management companies increasingly handle personal information.

For example, an FM company may process:

• Employee information;
• Client contact details;
• Visitor records;
• Access-control records;
• CCTV information;
• Contractor information;
• Payroll information;
• Tenant information; and
• Building security information.

The Office of the Data Protection Commissioner (ODPC) regulates personal-data processing in Kenya.

ODPC states that organisations and individuals processing personal data may be required to register as data controllers or processors under the Data Protection Act and associated regulations.

This is particularly relevant to FM companies providing:

• CCTV management;
• Access control;
• Security coordination;
• Visitor management;
• Reception services;
• Employee administration; and
• Digital facility-management platforms.

Data protection compliance should therefore include both registration, where applicable, and operational safeguards such as access controls, confidentiality procedures, data retention policies and incident-response procedures.

13. Machinery, Plant and Technical Equipment Compliance

Facilities management companies may operate or maintain:

• Lifts;
• Escalators;
• Generators;
• Pressure systems;
• Electrical equipment;
• Workshop machinery;
• Hoists;
• Pumps;
• HVAC systems;
• Refrigeration equipment; and
• Other mechanical plant.

Where statutory inspection, testing or examination is required, the company should maintain current certificates and records.

DOSHS lists examination and testing of plants and plant inspection among its occupational safety services.

The exact requirement depends on the equipment and the nature of the operation. A responsible FM provider should therefore maintain an asset compliance register showing each regulated item, inspection date, certificate, next due date and responsible competent person.

14. Professional Certifications and Competent Personnel

Licensing of the company alone is not sufficient for many technical services.

A facilities management company should deploy appropriately qualified and competent personnel for specialised work.

Depending on the service, this can include:

• Licensed electricians;
• Qualified HVAC technicians;
• Plumbing technicians;
• Fire-safety personnel;
• Occupational safety professionals;
• Environmental professionals;
• Pest-control technicians;
• Qualified lift/elevator specialists;
• Construction professionals;
• Equipment operators; and
• Other technically qualified personnel.

For example, DOSHS publishes minimum qualifications for approval of competent persons and institutions, including OSH advisers and fire safety auditors.

This is important because statutory compliance frequently depends not merely on who employs the worker, but on whether the person undertaking a regulated function is appropriately qualified, licensed or approved.

15. Public Procurement and AGPO Compliance

Facilities management companies seeking government contracts may need additional procurement documentation.

A current KRA TCC is an important component of tender compliance. KRA expressly identifies TCCs as being required for government tendering among other uses.

Eligible enterprises may also participate through AGPO — Access to Government Procurement Opportunities. PPRA explains that the procurement framework provides mechanisms for eligible disadvantaged groups and qualifying enterprises to participate in public procurement.

Accordingly, a facilities management provider pursuing public-sector work should maintain a tender-readiness file containing current:

• Company registration documents;
• KRA PIN;
• TCC;
• County business permits;
• NCA documents, where applicable;
• EPRA documents, where applicable;
• NEMA documents, where applicable;
• Insurance certificates;
• Employee compliance records;
• Professional certificates; and
• Supplier/AGPO documentation where applicable.

16. International Management-System Certifications

Statutory licences should not be confused with voluntary or contractual certifications.

International standards such as:

• ISO 9001 — Quality Management Systems
• ISO 14001 — Environmental Management Systems
• ISO 45001 — Occupational Health and Safety Management Systems

are management-system standards rather than substitutes for statutory licences.

They can nevertheless provide substantial commercial value by demonstrating that a facilities management company has structured systems for quality, environmental management and occupational health and safety.

Bestcare Facilities Management’s published materials describe its operations as compliance-focused and identify quality, environmental and occupational health and safety management as important elements of its FM approach. A separate Bestcare FM web property also states that the organisation holds ISO 9001:2015, ISO 14001:2015 and ISO 45001:2018 certifications and NITA registration.

For procurement purposes, however, clients should always request copies of the current certificates and verify the certification body, certificate number, scope and validity dates rather than relying solely on a website statement.

17. Bestcare Facilities Management as a Compliance-Focused Service Provider

Bestcare Facilities Management presents itself as an integrated facilities management provider serving residential, commercial and industrial environments. Its published service portfolio includes cleaning, preventive and reactive maintenance, MEP services, HVAC, fire-safety systems, landscaping, pest control, waste management, industrial equipment support, energy management and HSE compliance.

This broad service scope means that compliance cannot be treated as a single certificate.

Instead, a professional provider such as Bestcare should maintain a compliance matrix that maps each service against:

This approach is substantially stronger than simply describing an organisation as “fully licensed.”

18. What “Fully Authorised, Licensed, Approved and Certified” Should Mean

For Bestcare Facilities Management, the phrase “fully authorised, licensed, approved and certified service provider” should be understood in a service-specific and evidence-based manner.

A credible compliance claim should be supported by:

1. Valid corporate registration documents
2. Current KRA PIN
3. Current KRA Tax Compliance Certificate
4. Applicable county business permits
5. Workplace registration
6. OSH compliance documentation
7. WIBA insurance
8. NSSF employer compliance
9. SHA employer compliance
10. Relevant NCA registration and licence where construction services are undertaken
11. Relevant EPRA licences where electrical or solar PV works are undertaken
12. Relevant NEMA licences for regulated environmental and waste activities
13. Applicable ODPC registration
14. Competence certificates for technical personnel
15. Plant and equipment inspection certificates
16. Fire-safety audit and inspection records
17. Professional liability and other applicable insurance
18. Current ISO certificates where claimed
19. NITA registration or training documentation where applicable
20. Current subcontractor licences for regulated services performed by third parties

The phrase should therefore not be interpreted to mean that one government authority issues a universal “facilities management licence.” Kenya regulates the individual activities that make up facilities management through different regulators.

19. Why Regulatory Compliance Matters to Clients

When a property owner appoints an FM company, the client is not merely purchasing cleaning or maintenance.

The client is effectively outsourcing part of the responsibility for:

• Asset reliability;
• Workplace safety;
• Regulatory documentation;
• Environmental management;
• Contractor supervision;
• Emergency preparedness;
• Maintenance records;
• Technical compliance;
• Staff management; and
• Operational continuity.

An appropriately compliant FM provider therefore reduces the client’s exposure to operational and regulatory risks.

For example, hiring an unlicensed provider for regulated electrical work can create safety, insurance and regulatory problems. Similarly, using an improperly authorised waste transporter can create environmental compliance exposure.

20. Recommended Compliance File for Bestcare Facilities Management

For every major corporate or institutional client, Bestcare should maintain a central Statutory Compliance File containing:

Corporate Documents

• Certificate of Incorporation
• CR12/company ownership records
• KRA PIN
• Current Tax Compliance Certificate
• County business permit

Employee Compliance

• NSSF registration
• SHA registration/contribution records
• WIBA policy
• Employee contracts
• Training records
• PPE records
• Medical/occupational health records where applicable

Workplace Safety

• DOSHS workplace registration
• Risk assessments
• OSH audits
• Safety policies
• Incident records
• Emergency plans
• First-aid arrangements

Fire Safety

• Fire safety audit
• Fire equipment inspection records
• Fire drill records
• Fire training records
• Emergency evacuation plans
• Fire equipment maintenance certificates

Technical Compliance

• EPRA licences where applicable
• NCA registration where applicable
• Competent-person certificates
• Plant inspection certificates
• Equipment maintenance records

Environmental Compliance

• NEMA licences where applicable
• Waste transportation documentation
• Waste disposal records
• Environmental audits where required
• Chemical-management records
• Effluent compliance documentation where applicable

Information Governance

• ODPC registration where applicable
• Data protection policy
• Confidentiality agreements
• CCTV/data-processing procedures
• Data retention procedures
• Access-control procedures

Quality Assurance

• ISO certificates where applicable
• Quality-management procedures
• Service-level agreements
• Preventive-maintenance schedules
• Inspection checklists
• Corrective-action reports
• Client service reports

21. The Difference Between Statutory Compliance and Service Certification

One of the most important points for clients is that certification does not replace statutory licensing.

For example:

This distinction helps clients evaluate an FM provider correctly. A company can hold an excellent ISO certification while still needing separate licences for specific regulated activities.

22. How Clients Can Verify Bestcare’s Compliance

Before awarding a large facilities management contract, a client should request a vendor compliance pack from Bestcare Facilities Management.

The pack should contain copies of the relevant current documents and clearly indicate:

• Issuing authority;
• Certificate/licence number;
• Holder’s legal name;
• Scope of authorisation;
• Date of issue;
• Expiry/renewal date;
• Relevant service category; and
• Any conditions attached to the licence.

For third-party technical services, the client should also verify the licence of the actual contractor or technician undertaking the regulated work.

This is especially important for electrical installations, construction works, waste transportation, fire-safety audits and other regulated specialist activities.

A standard facilities management company in Kenya does not operate under a single universal “FM licence.” Its legal compliance is a portfolio of corporate registrations, tax obligations, workplace requirements, employee protections, environmental approvals and specialist licences, with additional requirements triggered by the specific services it performs.

Bestcare Facilities Management’s published portfolio demonstrates the breadth of services for which a modern FM provider may be responsible. For Bestcare to present itself as a fully authorised, licensed, approved and certified service provider, the strongest approach is to maintain current documentary evidence for every applicable regulatory requirement and to use appropriately licensed specialists whenever a service falls under a sector-specific regulator.

The result is a facilities management provider that can give clients more than routine maintenance and cleaning: it can provide documented regulatory compliance, competent technical service, occupational safety, environmental responsibility, quality management and accountable facility operations.