Kenya's Courier Hailing Licence: What Every Delivery Platform and Merchant Must Know

In short: Kenya has created a new licence category — the Courier Hailing Service Provider licence — for digital platforms that arrange parcel delivery through an app. It runs for ten years, costs KES 100,000 up front and at least KES 100,000 a year thereafter, and imposes obligations that reach well beyond paperwork: content declaration, sender and recipient verification, real-time tracking, published tariffs, a filed complaints procedure, a published prohibited-articles schedule, and five-year record retention available to the Communications Authority, the Kenya Revenue Authority and law enforcement on request. If your business sends parcels through a delivery app, your delivery partner's compliance is now part of your own risk picture.

What the licence is

Until now, Kenya's postal and courier framework was built for operators who owned depots, vans and staff. The platforms that actually move most urban parcels — apps that connect a customer to a rider — sat awkwardly inside a licensing regime written before they existed.

The Communications Authority of Kenya has closed that gap by creating a distinct licence category. Reporting on the framework describes it as covering platforms that "facilitate the collection, conveyance, dispatch, handling and delivery of parcels through specialised digital systems" — whether the platform runs its own fleet or contracts motorcycles, vans and trucks (Kenyans.co.ke, TechTrends Kenya).

The category is aimed squarely at the app-based sector: the same reporting names Uber, Bolt, Glovo and Little among the platforms affected. Operators already holding a National Courier Operator licence are reported to migrate to the new category, with additional fees payable.

Who needs one

If a business operates a digital platform through which a customer or merchant creates a delivery job and a rider is assigned to it, that business is in scope. Owning the vehicles is not the test. Arranging the delivery is.

Three groups should read this carefully:

• Delivery platforms — the licensee, carrying every obligation below.
• Riders and courier agents — the framework treats riders as agents operating under the platform's licence rather than as independent operators. The platform is answerable for their conduct and compliance, which changes onboarding, verification and supervision from an operational preference into a licence condition.
• Merchants who send parcels — not licensees, but not unaffected either. The record-keeping and content-declaration duties land partly on you, and the consequences of an unlicensed partner land entirely on you. More on that below.

When it starts — and why you will see three different dates

This is the single most confused point in the public coverage, so it is worth being precise about what is known and what is not.

These are not necessarily in conflict — a licence category can be created on one date and the operating conditions commence on another. But the distinction matters enormously, because almost every deadline in the licence runs from a single "Effective Date", and several obligations bite immediately on commencement rather than at some comfortable point afterwards.

Our advice to any operator: do not plan from a news report. Write to the Authority and ask for your Effective Date in writing. It is a two-line email and it is the anchor for every deadline that follows.

What it costs

Two observations that matter more than the headline numbers.

First, the fee floor is flat, so it falls hardest on small operators. At KES 100,000 a year plus levy, a platform doing modest volume pays the same as one doing none. This is a consolidating force in the sector, and it should be read as such.

Second — and this is a live question for any platform business — the annual fee is a percentage of "gross turnover" from licensed services. For a platform, that phrase is ambiguous. Does it mean gross transaction value flowing across the platform, or the platform's own commission? The difference is an order of magnitude. Confirm it with the Authority in writing before your first filing rather than after.

The obligations that actually change how you operate

The fee schedule is the least interesting part of this licence. The conditions are where the work is. These are the ones that change day-to-day operations rather than just paperwork.

Your platform must do specific things, not merely exist. The conditions prescribe platform functionality: register customers, capture and verify sender and recipient details, allow senders to declare contents, allow the operator and its agents to verify contents, allow consumers to verify the identity of the staff and riders handling their parcel, track acceptance, conveyance and delivery in real time, and let consumers file and track complaints. Note the verbs. "Capture" and "verify" are different obligations, and most platforms today do the first without a defined standard for the second.

Records are now discoverable. Operators must maintain records of all postal articles handled and produce them to the Authority or any competent government agency on request — which, as Business Daily put it, brings the Kenya Revenue Authority and the police into the picture. Retention is a minimum of five years.

Prohibited articles must be declared, screened and published. Content declaration before acceptance is mandatory. So is a mechanism to verify contents, screening aligned to revenue, aviation, security and transport requirements, and a schedule of prohibited articles displayed both at outlets and on the platform itself.

You may not open a parcel — except under a defined protocol. Items may not be opened from receipt to delivery, save in narrow circumstances: delivery or return is impossible otherwise, prohibited goods are suspected, or revenue officials so order. Where opening is justified it must be done under controlled conditions with at least two staff present, fully reported, and entered in a confidential register. Read alongside the duty to verify contents, this creates a genuine tension that every operator needs one written procedure to resolve — otherwise riders improvise, and improvisation is what a regulator finds.

Tariffs require prior approval. Descriptions of service, terms and conditions, and charges must be filed with the Authority for approval before a service is offered or a charge is changed — expressly including promotions and special offers. Charges and terms must also be displayed at the point of service. For any platform running dynamic or promotional pricing, this is the most operationally disruptive condition in the licence. The practical answer is to file tariffs as bands with a promotional envelope rather than as fixed prices, so that ordinary commercial movement does not require a fresh filing each time.

Customer care is a pre-condition, not a follow-up. A customer care system must exist before services commence, and a complaint-handling procedure must be filed at least seven days before commencement, then annually. Services must be accessible to persons living with disabilities.

Compensation must be filed and published. Procedures for tracking, investigating and resolving loss, delay and damage claims must be maintained; compensation policies must be submitted to the Authority and made available to customers at outlets and on the website; claims must be settled within 90 days in line with the filed policy. The state of an article must be verified at both acceptance and delivery — which is precisely why proof at both ends of a delivery, rather than only at handover, is now an operational requirement and not a product differentiator.

Corporate changes need advance notice. Shareholding changes crossing 15%, 30% or 50%, and any acquisition of control, require notification 30 days before the change takes effect. The Authority may prohibit a change in the public interest. Any founder raising capital should map their cap table against these thresholds now — a convertible instrument that converts across 15% is caught, and the notice period is measured against when the change takes effect, not when the paperwork was signed.

Partnerships need pre-approval. Any agreement or arrangement for the provision of licensed services in Kenya, and any joint venture requiring a licence under the Act, must be submitted to the Authority for approval not later than 30 days before it takes effect. For a platform business built on merchant and enterprise partnerships, this is a permanent change to commercial cadence: every new arrangement now carries a 30-day regulatory tail.

Interconnection becomes a duty. A requesting licensee must be permitted to connect to your platform on fair, transparent and non-discriminatory terms. This is worth pausing on. It converts a partner API from a commercial choice into a regulated product — and it is, quietly, the strongest statutory support anyone has yet given to the argument that delivery platforms are infrastructure rather than applications.

The Authority gets unlimited access. To premises, operational areas, facilities, platforms, files, records and other data, including confidential material.

The deadline clock

Most obligations run from the Effective Date. Anyone operating in this sector should build this calendar now, with their confirmed date substituted for the placeholder.

One point that is easy to miss and expensive to learn: the framework treats time spent operating without a Compliance Certificate as an aggravating factor when the Authority weighs a penalty. That is a direct argument for filing early rather than at the deadline.

What this means if you are a merchant, not a platform

You are not the licensee. You are still exposed, in three ways.

Your records are part of the chain. The duty to declare contents starts with the sender. If your staff are declaring "goods" on a delivery form and nothing more, you are the weak point in a record chain that a revenue or law-enforcement request will eventually test.

An unlicensed partner is your problem too. If your delivery partner is operating outside the framework, the goods being moved are still yours, the customer relationship is still yours, and the reputational and commercial consequences of a seizure, a suspension or a service shutdown land on your business, not theirs. Suspension of a non-compliant operator is expressly contemplated in the framework.

Your own regulated obligations do not transfer. A pharmacy does not stop being a pharmacy because a rider is carrying the parcel. A distributor's excise and tax record-keeping is not outsourced along with the delivery. Choosing a partner whose records you could actually produce under scrutiny is now part of ordinary commercial diligence.

The practical response is short: ask your delivery partner for their licence details, ask where their prohibited-articles schedule is published, and ask how long they retain delivery records. Any operator taking this seriously will answer in a sentence. We have written a longer version of that conversation as a seven-point checklist for merchants.

What operators should do in the next 30 days

1. Get your Effective Date in writing from the Authority. Every deadline depends on it and the public dates do not agree.
2. Confirm how "gross turnover" is calculated for a platform before your first fee filing.
3. Publish a prohibited-articles schedule on your platform and at any outlet. This is a same-week task and it is visible to the regulator, to merchants and to search engines.
4. Write one contents declaration and verification procedure that reconciles the duty to verify contents with the prohibition on opening items — and stand up the confidential register for the exceptions.
5. Build a tariff schedule as bands with a promotional envelope, not as a fixed price list, before filing.
6. Clear any rider verification backlog. Under this framework an unverified active rider stops being an operations queue and becomes a compliance defect.
7. Map your cap table and partnership pipeline against the 30-day notice conditions. Anything you can sign and bring into effect before commencement avoids the pre-approval process entirely.

None of this is exotic. For most credible operators the substance already exists inside standard operating procedures — it has simply never been packaged for a regulator. The work is repackaging, not invention. But it is work, and the clock has started.