Skip to content
Modern operations and enterprise IT

What’s your next operational breakthrough?

Practical automation, dependable cloud infrastructure and applied AI, built for commercial firms, regional distributors and mid-market enterprises across East Africa.

Request an operational diagnostic

Three to five days, on site, with the people doing the work.

Where every engagement starts No obligation

The operational diagnostic

We sit with the people doing the work and trace one operational cycle end to end: where information is re-entered, where it stalls, where it is lost. You receive a written map with the friction points ranked by what they cost, and a recommendation that may be to change nothing at all.

You receive
A written map
Commitment
None after
01 · Architecture

Enterprise structure for growing teams

One record for inventory, finance and client data, so the numbers agree without anyone reconciling them by hand.

02 · Intelligence

Applied AI, without the theatre

Private models that read contracts, parse invoices and route enquiries, each one scoped against work someone is doing today.

03 · Resilience

Continuity you can evidence

Tested restores, enforced access policy and a support line that answers, so a bad morning does not become a lost week.

Industry focus

Where the work usually lands

Every commercial environment carries its own constraints. Select a sector to see the problem it runs into and the systems we build against it. These are the ones we are asked for most, not the ones we are limited to.

One stock position across the counter, the phone and the chat thread

When trade runs through a branch till, a wholesale phone desk and a WhatsApp order line at the same time, the three records drift apart within days. We build a single master registry that every channel writes to and reads from, so availability is accurate at the moment of sale, the same unit cannot be sold twice, and replenishment is raised from recorded movement rather than from memory.

Order to invoice

Raised on settlement

The invoice is generated when payment is confirmed against the settlement feed, and pushed to the packing bench without anyone re-keying it.

Stock position

One registry, every channel

Branches and the wholesale desk write to the same record, which removes the weekly reconciliation between them.

Implementation scope

  • Connectors between the accounting ledger and every point of sale
  • WhatsApp and phone order capture with per-customer pricing tiers
  • Settlement notifications routed straight to packing and dispatch
  • Reorder thresholds calculated from recorded movement

Member records that reconcile, and controls an examiner can inspect

Savings and credit societies, microfinance institutions, brokers and payment businesses carry an obligation most commercial firms do not: every figure must reconcile, and every access to a member record must be accountable. We build the reconciliation layer between mobile money, bank and ledger, and put the access controls, audit trails and retention rules in place before an examiner asks for them rather than afterwards.

Reconciliation

Daily, breaks surfaced

Mobile money, bank and ledger positions compared on a schedule, with only the exceptions raised for a person to resolve.

Every record access

Attributable

Role-based permissions over member data, with an immutable log of who opened which record and when.

Implementation scope

  • M-Pesa, card and bank settlement reconciliation against the core ledger
  • Role-based access control and immutable audit trails on member data
  • Statement and notice generation, scheduled and evidenced
  • Data Protection Act readiness, including ODPC registration support

Appointments that confirm themselves, and records that survive a bad day

A missed appointment is unrecoverable revenue, and an unreachable record is a clinical problem before it is an IT one. We automate two-way appointment confirmation so the front desk stops making reminder calls and a cancellation releases the slot on its own. Records and imaging are held locally for speed and mirrored offsite for survival, with the restore rehearsed rather than assumed.

Confirmation

Two-way, slot released

A patient reply confirms or cancels, and a cancellation returns the slot to the diary without a phone call.

Records

Local, mirrored offsite

Encrypted on-premise store mirrored to a second location, with a documented restore test rather than an untested backup.

Implementation scope

  • Practice management and scheduling integration with messaging
  • Failover connectivity so a fibre cut does not close the front desk
  • Role-based access to records with session-level audit trails
  • Retention and consent handling under the Data Protection Act

First-pass review that shows its working, with matter data held tight

Advocates, accountants, surveyors and engineering consultancies lose days to the first read of leases, tender conditions, audit files and discovery bundles. We deploy retrieval over the firm’s own archive so a question returns the relevant passage together with the document and paragraph it came from, ready to be checked rather than trusted. Records stay inside a tenant the firm controls and are excluded from third-party model training by contract and by configuration.

Every answer

Carries its source

Retrieval returns the document and paragraph behind each answer, so a fee earner verifies rather than relies.

Where data sits

A tenant you control

Encrypted storage, access logging, and retention set to the firm’s own policy rather than a vendor default.

Implementation scope

  • Microsoft 365 or Google Workspace hardening for a practice
  • Conditional access, device policy and hardware token enforcement
  • Client intake with identity verification and conflict checking
  • Kenya Data Protection Act readiness, extending to GDPR where instructed

Proof of delivery that closes the paperwork at the drop

Cash sits still while paperwork travels. Drivers confirm milestones from a lightweight page built for a weak signal and an old handset, a signature is captured at the drop, and finance is notified the moment a consignment is closed. The billing document is produced against delivered goods rather than against an end-of-week reconstruction.

Invoicing

Triggered at the drop

Delivery confirmation generates the billing document, so the paperwork does not travel back to the depot before it is raised.

Visibility

Live status board

Loading, transit and delivered consignments are visible to management without a phone call to the driver.

Implementation scope

  • Driver-facing dispatch pages built for low bandwidth and old handsets
  • Signature capture with automatic proof-of-delivery documents
  • Client notification of dispatch and estimated arrival
  • Route and fuel reconciliation against completed drops

Intake, production and dispatch recorded once, where they happen

Processors, packers and light manufacturers run on figures captured at a weighbridge, an intake bay or a production line, then retyped into an office system hours later. We move the capture to the point of work, onto a device that tolerates a dusty environment and an intermittent link, so yield, wastage and dispatch are recorded once. Costing then reflects what was produced rather than what was reconstructed afterwards.

Capture

At the point of work

Intake, production and dispatch entered once, on the floor, and visible to the office immediately.

When the link drops

Queues, then syncs

Entries are held on the device and reconciled when the connection returns, because rural sites lose signal.

Implementation scope

  • Intake, weighbridge and production capture on low-cost or rugged devices
  • Yield and wastage reporting against batch or lot
  • Supplier and outgrower payment schedules generated from recorded intake
  • Offline-first capture with conflict-safe synchronisation
Service lines

How the work is organised

Lines that cover most of what a mid-market business asks for, each measured against the hours it removes or the revenue it protects. They are how we organise ourselves, not a list of what we will take on. If your problem is technical and it is not here, it is still worth asking.

01 / Advisory

Technology strategy and architecture

Decide what to build, what to buy and what to leave alone, before anyone spends money. The target state written down, with the order of work argued for.

  • Current-state architecture map across applications, data and infrastructure
  • Target state and a sequenced roadmap with dependencies made explicit
  • Independent vendor and product evaluation, with no commission taken
02 / Delivery

Systems integration and automation

Stop moving the same numbers between a spreadsheet, an accounting package and a messaging thread. We connect the software you already pay for, and build the interfaces it lacks.

  • ERP and CRM synchronisation, including QuickBooks, Zoho and Odoo
  • Payment and settlement reconciliation across M-Pesa, card and bank rails
  • Automated invoicing, statements and client notifications
03 / Data and AI

Data and applied AI

Reporting you can trust, and language models pointed at your own documents in a tenant you control. Retrieval and drafting that can be checked.

  • Reporting layer with agreed definitions, so the numbers stop disagreeing
  • Document, invoice and delivery-note parsing into structured records
  • Internal knowledge retrieval, with every answer citing its source passage
04 / Infrastructure

Cloud and infrastructure

Move off personal mailboxes and unmanaged laptops onto managed identity, with connectivity that fails over and backups that have actually been restored.

  • Enterprise email and domain migration with no interruption to trading
  • Managed identity, device enrolment and administrative account separation
  • Encrypted offsite backup with a documented, rehearsed restore
05 / Risk

Cybersecurity and digital trust

Most of the controls that would have prevented the incident are already in the licences you hold. We switch them on, prove they work, and write down who has access to what.

  • Multi-factor authentication and conditional access rollout
  • Access review, privilege reduction and joiner-mover-leaver process
  • Security posture assessment against a written baseline
06 / Managed service

Managed services and support

Someone who answers when a laptop, a printer or a link fails, and who improves one workflow every month rather than waiting to be asked.

  • Remote helpdesk for staff workstations, email and network faults
  • Backup verification, patching and endpoint monitoring
  • One agreed workflow improvement per month, scoped in advance
Delivery method

Five stages, in order, every time

The sequence does not change with the size of the engagement. Only the time spent in each stage does.

  1. 01

    Diagnostic

    We sit with the people doing the work and trace one operational cycle end to end, recording where information is re-entered, where it stalls and where it is lost. The output is a written map with the friction points ranked by what they cost.

    A written map

  2. 02

    Scope and estimate

    We propose the smallest change that resolves the most expensive problem, with a fixed boundary, a fixed price, and the acceptance test written down before either side commits.

    A fixed proposal

  3. 03

    Build and pilot

    The system is built against a copy of your real data and run alongside the existing process, so the two can be compared before anything is switched off.

    A system run in parallel

  4. 04

    Handover

    Credentials transferred, documentation written for the staff who will run it, and training recorded so a new joiner can be brought up without calling us.

    Credentials and documentation

  5. 05

    Review

    We measure against the acceptance test agreed at scoping. If it did not land, we say so and fix it. This is also where the next candidate workflow is identified.

    A measurement against scope

Engagement models

Scoped to your operational reality

There is no rate card. Every engagement is scoped around the specific bottleneck, the systems already in place, and the size of the team that has to run it afterwards.

Focused execution

Implementation sprint

For a firm with one pressing operational problem that does not warrant a multi-month programme.

  • Deliverable boundaries agreed in writing before work starts
  • A delivery date fixed in the engagement letter, not estimated afterwards
  • Written handover and recorded training for the staff who will use it
  • Defect support for an agreed period after go-live
Most engagements begin here Ongoing operations

Managed systems and helpdesk

Your IT function, run remotely. We keep the systems standing and improve one workflow each month.

  • Defined response commitment for staff laptops, email and network faults
  • Daily backup verification and endpoint patching
  • One workflow improvement delivered per month, agreed in advance
  • Monthly arrangement sized to seat count, reviewed quarterly
Executive counsel

Fractional technology advisory

Senior guidance for founders and managing partners about to commit capital to software or infrastructure.

  • Independent vendor evaluation and contract review
  • Fortnightly technology steering session with the leadership team
  • Data Protection Act compliance and digital risk governance
  • Direct access to the engagement principal, not an account manager

Not sure which applies? Start with a diagnostic. It is a fixed piece of work with a written output, and it carries no obligation to proceed.

The practice

Independent practitioners, remote-first, hub in Nairobi

We work between the engineering practices of larger markets and the operational realities of East African trade. We do not resell licences, we do not take vendor commission, and we do not build anything you cannot take elsewhere.

The practice works mainly remotely, with on-site time where it earns its keep, and Nairobi is the operational hub. Either way the engineers who built a system are the ones who answer when it needs attention.

Scope and price
Fixed in writing
How we work
Remote-first

Operating principles

01
Plain language

Technical decisions are explained in terms of operational impact, cost and accountability. If a recommendation cannot be justified in a sentence a director would repeat, it is not ready.

02
You own everything

Domain records, credentials, automation logic and source code are registered to you from day one. There is no proprietary layer holding your operations hostage, and no exit fee.

03
Measured against work

Every system we build must remove hours of repeated effort or protect revenue that is currently at risk. We agree the measure before the build, and report against it after.

04
We will say no

Where a spreadsheet, a written procedure or an off-the-shelf product already solves the problem, we will tell you and decline the work. Selling unnecessary systems is how firms end up here.

Initiate an assessment

Request an operational diagnostic

Speak with a consultant. We review the systems you run today, identify where the operational friction actually sits, and set out what would have to change.

  • A written map of one operational cycle, end to end
  • Friction points ranked by what they cost you
  • A recommendation, including where to do nothing

The more concrete the bottleneck, the more useful the first conversation.

Within one business day. No mailing list, no follow-up sequence.

Prefer to write directly? mambatech@zohomail.com or call +254 759 967 305.