Acquiring a Kenyan tech company is not the same exercise as acquiring a manufacturer or a licensed financial services business. The value sits in code, data, contracts, and a handful of people, most of which does not show up cleanly on a balance sheet, and a due diligence process built around traditional asset checks will miss most of what actually determines whether the deal is worth what you are paying for it.
Who actually owns the IP
Start here, because it is the most common gap. Confirm that every material piece of intellectual property, source code, trademarks, domain names, was actually assigned to the company and not left sitting with a founder, an early contractor, or a development agency that was never asked to sign an assignment. Kenyan startups built quickly in their early days frequently have gaps here, a contractor who wrote core code without a written assignment clause, or a co-founder who left without formally transferring their contribution. Each gap is a live risk that the seller does not actually own what they are selling.
Data protection compliance, not just data volume
A large user base is only valuable if the company has actually been lawful in how it collected and processed that data. Check whether the company is registered with the Office of the Data Protection Commissioner where required, whether it has a genuine legal basis for the personal data it holds, and whether it has a history of breaches or unresolved complaints. An acquirer inherits this compliance position along with the user base, and a data protection failure discovered after closing is far more expensive to fix than one caught during diligence.
The cap table is rarely as clean as the pitch deck suggests
Verify every round actually closed the way the company’s own records say it did: shares properly allotted and filed with the Registrar, any convertible notes or SAFEs correctly converted or still outstanding, and the employee option pool granted on paper matching what was actually issued. It is common for an early-stage Kenyan startup’s statutory registers to lag behind its actual capitalisation table, sometimes by more than one funding round, and an acquirer needs the legal position, not the spreadsheet version, before agreeing a price based on percentage ownership.
Regulatory licensing that travels with the business
If the target holds a regulatory licence, a Digital Credit Provider registration, a Central Bank payment authorisation, a VASP licence, confirm whether that licence is actually transferable on a change of control or whether the acquirer needs to apply fresh, and how long that would take. Several Kenyan financial and fintech regulators treat a change of control as an event requiring their own approval, sometimes before the transaction can even close, which can materially change the deal timeline if it is discovered late.
What actually walks out the door if key people leave
A small technical team usually holds institutional knowledge that never made it into documentation. Check retention arrangements, non-compete and confidentiality terms, and realistically assess what happens to the product roadmap and customer relationships if one or two key engineers or the founder leave shortly after closing. For an early-stage acquisition, this is frequently the single largest undiscussed risk in the deal, and it is worth structuring retention incentives into the transaction rather than assuming goodwill will carry the team through the transition.
