Photo by Unsplash

Startup Legal Basics in Kenya: 5 Things to Do on Day One

7 min read

Five legal basics for startups in Kenya, with BRS and ODPC fees, the data protection exemption and its exceptions, IP assignment and first-hire contracts.

The first legal steps for a startup in Kenya are to register a company with the Business Registration Service, sign a founders' agreement, put your intellectual property in the company's name, check whether you must register with the Office of the Data Protection Commissioner, and set up employment basics before your first hire. Done early, most of it costs little.

This is general information to help you plan, written in plain words, and it is not legal advice. For investor terms, regulated sectors or anything with large sums at stake, talk to an advocate. I checked the fees and rules below on 5 November 2026.

1. Should I register a company before I launch?

If you plan to raise money, sign contracts with larger clients or hire staff, register a private limited company. It is a separate legal person, so contracts and debts sit with the company. A business name is cheaper, but in law you and the business are the same person, and your own assets carry the risk.

The Business Registration Service lists KES 10,650 for a private limited company and KES 950 for a business name, and you file everything on eCitizen (BRS fee schedule). Our guide to registering a company in Kenya walks through the forms step by step.

2. What should a founders' agreement cover?

Write it while you still agree on everything. A useful founders' agreement sets out:

  • Who owns what. The share split, and what each founder puts in: cash, time, code or customers.
  • Vesting. Founders earn their shares over time, so someone who leaves early does not keep a large stake for work they never did. For example, shares might vest monthly over four years, with nothing vesting until the first anniversary. That first year is called a cliff.
  • Roles and decisions. Who decides on product, money and hiring, and how you break a deadlock.
  • Leaving. What happens to vested and unvested shares when a founder leaves, and on what terms the company can buy them back.
  • Time and outside work. Whether everyone is full time, and which side projects are allowed.

Make sure the share split in your company filings matches the agreement. Changing shareholdings after registration means more forms, so settle it before you file.

3. Who owns the code, the name and the logo?

Your company should own everything it sells, and have the paperwork to show it. Ask every founder, employee, freelancer and agency who builds for you to sign a written assignment of intellectual property to the company, covering work already done and work to come. Raise it before you pay a freelancer for the first time, while it is an easy conversation.

Then protect the name. Trade marks in Kenya are registered with the Kenya Industrial Property Institute, which takes applications online and payments through eCitizen (KIPI trade marks). Search the register before you print anything with your name on it. When an investor's lawyer runs due diligence, expect to be asked for these assignments and registrations.

4. Do I need to register with the Data Protection Commissioner?

If you collect names, phone numbers, ID numbers or any other personal data, the Data Protection Act 2019 applies to you. Registering with the Office of the Data Protection Commissioner (ODPC) is a separate step with its own rules.

Under the 2021 registration regulations, a business with annual turnover below KES 5 million and fewer than ten employees is exempt from mandatory registration. The exemption does not cover some purposes. Businesses that process personal data for financial services, health care, education, transport (including ride-hailing apps), property management, hospitality, telecoms, gambling, direct marketing or genetic data must register whatever their size (Afriwise, from Dentons Hamilton Harrison & Mathews). A small fintech or healthtech startup is likely to need registration from the start.

Registration fees run from KES 4,000 to KES 40,000 depending on the size of the business, and a certificate lasts 24 months (Afriwise). Renewal fees run from KES 2,000 for micro and small entities to KES 25,000 for large ones. In August 2026 the ODPC gave businesses with expired certificates 14 days to renew and published their names, and the same report cites fines of up to KES 5 million for failing to register (Kenyans.co.ke).

Alongside registration, you need a privacy notice that says what you collect and why, consent where the Act requires it, and a plan for what you will do if data leaks.

5. What do I need before my first hire?

  • A written contract. Under the Employment Act 2007, employment of more than three months should be in writing, with a written statement of the main terms (WageIndicator Kenya). Put the IP assignment and confidentiality terms in the same contract.
  • Probation in writing. WageIndicator's summary of the Act says probation should not be set longer than six months, and can be extended to a total of one year only with the employee's agreement.
  • Employer registration. Register for PAYE with KRA, register with NSSF, and register on the SHA employer portal for Social Health Insurance Fund deductions.
  • Contractors. A freelancer still needs a written agreement covering scope, payment terms and IP assignment.

What can wait until later?

An offshore holding company, a share option plan and a detailed shareholders' agreement can usually wait until an investor asks for them. Sector licences are different. If you move money, lend, handle health records or run transport, find out which regulator you answer to before you launch.

When you sit down with co-founders or an advocate to sign all this, you can book one of our four meeting rooms at the house. If you want to build alongside other founders for 12 weeks, the Hackhouse Residency takes no equity, and HH Gen 27.1 applications are open.

Key facts

  • Private limited company: KES 10,650 in BRS fees. Business name: KES 950.
  • A founders' agreement should cover the share split, vesting, decisions, leaving and outside work.
  • Get written IP assignments from every founder, employee and contractor, and register trade marks with KIPI.
  • ODPC exemption: turnover below KES 5 million and fewer than ten employees, except for listed purposes such as financial services, health and education.
  • ODPC registration costs KES 4,000 to KES 40,000, and the certificate lasts 24 months.
  • Employment of more than three months should have a written contract.

Frequently asked questions

Do I need a lawyer to start a company in Kenya?

Not to register it. You can file on eCitizen yourself. An advocate earns their fee on the founders' agreement, investor documents and anything in a regulated sector.

Does my startup need to register with the ODPC?

If your turnover is below KES 5 million and you have fewer than ten employees, you are exempt, unless you process personal data for a listed purpose such as financial services, health, education or transport. In that case you register whatever your size.

When should co-founders sign a founders' agreement?

Before you register the company or take any outside money. The share split you file at registration should match what you have agreed in writing.

Can I hire a developer without a written contract?

For anything longer than three months, the Employment Act expects a written contract. For freelancers, a written agreement protects both sides and makes sure the company owns the code.

Sources

Go deeper with us. Join the Hackhouse community for conversations that go beyond the surface, where builders share the hard-won lessons that never make it into press releases.

EntrepreneurshipStartupsAfricaLeadershipBuildInAfricaHackhouseFounderTipsAfricanStartupsStartupLegalStartupLegalBasics

Share this post