NEW e-TIMS expense matching is now live · Tax Administration 3.0

The HR system that runs your Kenyan team.

Avali is a complete HR platform — people, leave, performance, attendance, and analytics — with payroll, KRA filings and M-PESA disbursement built right in. One source of truth for everyone you employ.

Book a 20-minute demo See how it works

Trusted by

240+ Kenyan SMEs SOC 2 Type II ODPC registered KRA TIMS partner

avali.live — april 2026 cycle LIVE

14:32:01KRAP10 batch #2026-04-GMK validated · 48 employees · KES 411,776.00 PAYE due

14:32:03SHASHIF XML generated · 2.75% gross · KES 186,280.00 · checksum OK

14:32:08NSSFTier I + II split · LEL 7,000 / UEL 36,000 · employer match queued

14:32:12AIAnomaly scan complete · 3 outliers flagged · 0 ghost employees detected

14:32:18MPESAB2C bulk file ready · 41 disbursements · maker-checker awaiting CFO sign-off

14:32:24OKe-TIMS expense ledger reconciled · all entries matched against VSCU

14:32:30OKP9A annual cards prepared for FY 2025/26 · ready for individual download

14:32:35⚠NITA Q1 levy due in 11 days · auto-file scheduled for 14 May

14:32:42$ avali run --cycle apr-2026 --approve

01 Six pillars

An HR platform, with payroll built in.

Avali starts with people — onboarding, records, leave, performance, attendance — and extends naturally into payroll, statutory filings and treasury. Six pillars, one system.

01 · People Core (HR)

Every employee, one record.

Onboarding, contracts, IDs, KRA PINs, NSSF numbers, next-of-kin, leave balances, performance — one tidy file per person, with full audit history.

// Avali --file-statutory

P10 → KRA iTax

✓ posted · 48 emps

SHIF → SHA portal

✓ posted · KES 186,280

NSSF → Self-service

✓ posted · Tier I+II

Onboarding Leave & Time-off Performance Org chart Documents vault

02 · Payroll Engine

P10, SHIF, NSSF — filed in seconds.

Native GavaConnect integration. PAYE, SHIF (2.75%), NSSF Year 4, AHL, HELB, NITA — all calculated, filed, and reconciled with M-PESA disbursement and e-TIMS matching.

P10 unified SHIF XML v3 M-PESA B2C e-TIMS VSCU

03 · Zero Trust

Hidden from the public internet.

Cloudflare Identity-Aware Access. Zero open ports. JWT-validated sessions. Your payroll dashboard simply does not exist for unauthenticated traffic.

CF Tunnel JWT auth DDoS V4

04 · Privacy Shield

Kenyan data, kept in Kenya.

Full ODPC compliance. AES-256 at rest. Local residency, right-to-erasure workflows, and consent management built in.

ODPC reg. AES-256 DPA 2026

05 · Treasury Hub

M-PESA bulk · maker-checker.

Pay 50 employees in 90 seconds via M-PESA B2C, EFT or bank file. Two-eye approval. Failed disbursements auto-retry with smart fallbacks.

M-PESA B2C EFT bulk 2-eye sign-off

06 · HR Intelligence

Headcount, attrition, cost-to-company — live.

Cross-references attendance, leave, performance and pay to surface attrition risk, salary-band outliers, ghost-employee flags, and gender pay gaps. Every chart drillable to person.

Attrition risk Cost-to-company Pay-gap audit Ghost scan

EMP-0892Mercy Otieno✓ MATCH

EMP-0893Brian Wafula✓ MATCH

EMP-0894— no biometric —⚠ GHOST

EMP-0895Faith Kariuki✓ MATCH

EMP-0896Daniel Kipkoech✓ MATCH

02 From timesheet to payslip

Four moves. One cycle.

Avali replaces the spreadsheet shuffle with a single, auditable cycle. Most teams finish their April run in under 20 minutes.

Sync attendance.

~2 min

ZKTeco devices push punches over an encrypted tunnel. Holiday rates and shift premiums are calculated automatically. Late entries can still be corrected by managers.

ZKTeco ADMS Holiday 2.0× Manual override

Review the run.

~6 min

Every payslip is calculated, validated, and surfaced for review. AI anomaly engine flags outliers and ghost employees before approvers ever see a number.

Variance flags AI audit Maker-checker

File & pay.

~4 min

P10 to KRA. SHIF XML to SHA. NSSF Tier I+II to self-service. M-PESA bulk to employees. All four happen in parallel — receipts stored against your filing log.

GavaConnect M-PESA B2C Bank EFT

Reconcile.

~2 min

Every shilling lands in your e-TIMS expense ledger automatically. Variance reports, P9 individual cards, and audit packs are ready before you're back from lunch.

e-TIMS VSCU P9 export Audit pack

P9 · APR 2026 · #GMK-241

Mercy Atieno

Senior Engineer · Engineering · KRA PIN A0123456789Z

Earnings

Basic salary+ 180,000.00

House allowance+ 36,000.00

Transport allowance+ 8,000.00

Performance bonus+ 18,000.00

Gross pay242,000.00

Statutory

PAYE (banded)− 48,720.00

SHIF (2.75%)− 6,655.00

NSSF Tier I+II− 4,320.00

AHL (1.5%)− 3,630.00

HELB− 1,500.00

Total deductions− 64,825.00

Net pay

KES177,175.00

KRA verified SHA filed e-TIMS matched M-PESA paid

03 Pricing

Pay for the headcount, not the headache.

Everything compliance-related is included from day one. P10, SHIF, NSSF, AHL, P9 — across every plan. The tier you pick is about scale, not coverage.

Tier 01

Essential

For early-stage teams running monthly payroll for under 25 employees.

KES 5,000 / month

+ KES 200 per active employee

P10, SHIF, NSSF, AHL filings
P9 annual cards
M-PESA B2C disbursement
Self-service employee portal
Email support

Start with Essential

RECOMMENDED

Tier 02

Professional

For growing companies that need e-TIMS, AI audit, and full Zero Trust security.

KES 15,000 / month

+ KES 350 per active employee

Everything in Essential
Real-time e-TIMS expense matching
Zero Trust identity-aware access
AI ghost-employee detection
ZKTeco biometric integration
Priority WhatsApp + phone support

Try Professional

Tier 03

Enterprise

For companies with custom flows, dedicated tunnels, or Employer-of-Record needs.

Custom

Annual contract · volume pricing

Everything in Professional
Dedicated Zero Trust tunnel
Custom e-TIMS & ERP API flows
Employer-of-Record (EOR)
SLA-backed 99.99% uptime
Dedicated CSM & quarterly review

Talk to sales

04 Trust & questions

The questions every CFO asks us first.

We've built Avali to satisfy auditors, not just users. Here's how we think about security, data, and compliance.

Is Avali officially certified by KRA? +

Yes — we're a registered KRA TIMS partner with active GavaConnect API credentials. Every P10 you submit through Avali is signed by your own iTax credentials and acknowledged with a KRA receipt before we mark it filed.

What happens to our data? +

Your data is stored exclusively in Kenyan data centres in line with the Data Protection Act 2026. We're a registered ODPC data processor (REG-2026-AVLP). All employee PII is AES-256 encrypted at rest with hardware-backed keys.

How does e-TIMS matching actually work? +

Every payroll line — net pay, statutory remittance, allowance — generates a corresponding e-TIMS expense entry via the VSCU bridge. We reconcile both sides automatically and flag any mismatch within 60 seconds of the run closing.

Can we migrate from another payroll system? +

Yes. Our migration team has moved teams from QuickBooks, Sage Pastel, Workday, and homegrown Excel systems. A typical migration takes 3–7 working days including parallel-run validation.

What about NSSF Year 4 and SHIF transition? +

Both are fully supported. NSSF Tier I/II contributions split with the new LEL (KES 7,000) and UEL (KES 36,000). SHIF replaces NHIF at 2.75% of gross with a KES 300 minimum — and we run side-by-side comparisons during transition months so finance teams can audit the change.

Do you offer Employer-of-Record (EOR)? +

Yes — on the Enterprise plan. We employ contractors on your behalf, handle their statutory contributions, and deliver fully compliant Kenyan payslips. Useful for international companies hiring their first Nairobi employees.