Create a licence matrix covering national, county, sector, premises, environmental and product permissions. For each item, record the regulated activity, applicant, prerequisite, dependency, renewal and change-of-control rule.

County governments typically administer business permits and location-dependent permissions such as fire, signage, planning and public health. Requirements and administration vary by county. Confirm the premises can support the intended use before committing to a lease.

Sector oversight may include the Central Bank of Kenya for banking and payments, Insurance Regulatory Authority, Communications Authority, Energy and Petroleum Regulatory Authority, Capital Markets Authority, Pharmacy and Poisons Board, health regulators, National Environment Management Authority, Kenya Civil Aviation Authority and mining authorities. KEBS regulates standards and conformity for many products.

Separate suppliers to a regulated business from businesses conducting the regulated activity. A technology vendor is not automatically a payment provider, but a platform holding or moving client funds may require authorisation. Analyse the actual customer journey, legal obligations and flow of funds.

Licences can carry capital, local ownership, governance, technical, premises, reporting, outsourcing, cyber, consumer and prior-approval obligations. A later share sale or director change may need regulator consent. Do not import regulated equipment or advertise a licensed service before the relevant permission is confirmed.

Agents assisting with permits should be subject to diligence, a written scope, anti-bribery terms, payment controls and records. Government-facing work should never depend on undocumented facilitation.