Every organisation in Kenya keeps some employee files, but many still rely on paper folders, spreadsheets on shared drives, and email attachments scattered across inboxes. That approach works until a labour inspector arrives, a former employee lodges a claim at the Employment and Labour Relations Court, or the Kenya Revenue Authority requests proof that deductions were remitted correctly. A missing payslip or an incomplete contract can turn a routine inquiry into a costly fine and weeks of frantic reconstruction.
Why HR record keeping matters for compliance and protection
Kenyan law places clear obligations on employers through the Employment Act, which requires written employment particulars, and the Tax Procedures Act, which mandates retention of tax documents for seven years. Beyond these statutes, the National Social Security Fund, the National Hospital Insurance Fund, and the Kenya Revenue Authority all conduct periodic audits that demand complete payroll registers, remittance receipts, and employee records. Without an organised system, a business cannot prove it followed the law, even if it did. Solid HR record keeping protects the company by preserving evidence that contracts were signed, deductions were paid on time, and terminations followed due process.
Poor documentation exposes organisations to disputes they could easily avoid. An employee claiming unfair dismissal will expect the employer to produce the warning letters, investigation notes, and disciplinary hearing minutes that justify the termination. If those records do not exist or cannot be found quickly, the court or tribunal may rule in the employee's favour by default. Likewise, if KRA questions a PAYE calculation from two years ago and the company cannot present the corresponding payslip and P9, assessments and penalties follow automatically.
Fines are only part of the cost. Reputational damage and lost productivity compound the problem. News of a labour dispute or a tax penalty spreads quickly among job-seekers, customers, and investors, especially when social media amplifies every complaint. Meanwhile, senior staff spend days reconstructing files instead of focusing on growth. A compliance gap that could have been closed with a proper filing system ends up costing far more than the investment in better processes.
Readiness for audits means maintaining a complete, accessible record for every employee from hire to exit. When an NSSF inspector requests proof that contributions match the declared salaries, the company should be able to pull up monthly schedules and remittance receipts in minutes, not hours. That level of preparedness signals professionalism and discourages further scrutiny. It also gives HR teams confidence that they can answer any question without panic or guesswork.
Mandatory employment and recruitment records to keep
Every employment relationship begins with an offer letter and a signed contract, and both must be kept on file for the duration of employment plus at least five years after exit. The contract should include job title, duties, salary, working hours, and notice periods as specified in the Employment Act. If these documents are incomplete or unsigned, the employer loses the ability to enforce probation, confidentiality, or notice clauses. A dispute over job scope or compensation becomes a swearing match instead of a simple reference to the contract.
Job applications, interview scorecards, and selection justifications for unsuccessful candidates deserve secure storage, even though many companies delete them within weeks. If a rejected candidate alleges discrimination, the employer must show that the hiring decision was based on objective criteria such as qualifications, experience, and interview performance. Without interview notes or a scoring matrix, the company cannot defend itself against a claim that race, gender, or personal bias influenced the outcome. Retain recruitment records for at least two years after the vacancy closes.
Right-to-work documents prove that the employee is legally entitled to work in Kenya and that the employer verified identity and tax status. Keep copies of national identity cards, Kenya Revenue Authority personal identification numbers, academic certificates, and professional licences where applicable. If a labour inspector finds an employee without a valid work permit or KRA PIN, the company faces immediate penalties. These documents should be collected during onboarding and stored in a dedicated folder for each employee.
Pre-employment medical certificates and background check reports are optional in many roles but mandatory in sectors such as healthcare, education, and security. When collected, they must be kept confidential and accessible only to authorised personnel. Document the date of the check, the agency or clinic that conducted it, and the outcome. If a role requires periodic re-certification, track expiry dates to avoid employing someone whose clearance has lapsed.
Payroll, tax, and statutory deduction records
Monthly payroll registers are the backbone of HR compliance audit preparation, listing every employee's gross pay, allowances, deductions, and net pay for that period. Each register should be signed by the person who prepared it and the manager who approved it, creating an audit trail that KRA, NSSF, and NHIF expect to see. Store registers alongside the corresponding payslips and bank transfer receipts to confirm that employees received the declared amounts. Missing even one month's register can trigger a full review of the prior year.
PAYE, NSSF, NHIF, and housing levy remittance certificates prove that the company deducted the correct amounts and paid them to the relevant authority on time. Download and archive these certificates immediately after each payment, because some portals purge old records after a few months. If KRA requests proof of a remittance from three years ago, the company must produce the certificate, the payment reference, and the corresponding bank statement. Without all three, the authority may treat the payment as never made and demand it again, plus interest and penalties.
Statutory deduction schedules break down each employee's contributions by pay period and should reconcile perfectly with the payroll register and the remittance certificate. Year-end documents such as P9 forms for employees and P10 employer declarations summarise the full tax year and must be submitted to KRA and provided to employees for their own records. Keep originals and copies of these forms for at least seven years from the date of the last entry, as required by the Tax Procedures Act. Digital copies stored on AI HR software with automatic retention tagging reduce the risk of accidental deletion.
Retention periods matter more than many employers realise. Tax authorities can audit returns up to five years after submission, and in cases of suspected fraud the window extends to ten years. Playing it safe with a seven-year retention policy covers most scenarios and demonstrates good faith. For payroll records older than seven years, consult a tax advisor before deleting, especially if the company underwent a merger, acquisition, or restructuring that might invite retrospective scrutiny.
Leave, attendance, and disciplinary documentation
Annual leave requests, sick leave certificates, and maternity or paternity leave notices form a complete absence record that protects both the employer and the employee. The law entitles employees to specific leave days, and disputes often arise over whether leave was taken, approved, or compensated correctly. A timestamped leave application signed by the manager and an approved calendar entry eliminate ambiguity. Sick leave certificates from registered clinics validate absences that might otherwise be treated as unauthorised, preventing unfair deductions or disciplinary action.
Attendance logs and timesheets are essential for organisations that pay hourly rates, overtime, or shift allowances, but even salaried workplaces benefit from tracking when people are present. Remote-work and flextime approvals, if offered, should be documented in writing so that performance conversations do not devolve into arguments about whether the employee was working or absent. An accurate attendance record supports salary calculations, probation reviews, and decisions about contract renewal. It also helps identify patterns of absenteeism that might indicate health issues or disengagement.
Written warnings, investigation notes, and disciplinary hearing minutes are the foundation of a defensible termination. If an employee's performance or conduct warrants a warning, issue it in writing, specify the problem, state the expected improvement, and set a review date. File the signed acknowledgement or delivery receipt in the employee's folder. When termination becomes necessary, the accumulated warnings and hearing minutes prove that the employer followed fair procedure and gave the employee a chance to improve.
Termination letters, exit interviews, and final settlement statements close the employment relationship and should be kept for at least five years after the exit date. The termination letter must state the reason, the effective date, and any notice or payment in lieu of notice. The final settlement statement itemises unused leave, any owed allowances, and deductions for advances or loans. If a former employee later claims unfair dismissal or unpaid wages, these documents are the first pieces of evidence a tribunal will request.
Performance, training, and promotion records
Performance appraisal forms, goal-setting worksheets, and manager feedback capture an employee's development over time and provide context for salary adjustments, promotions, or disciplinary action. An annual review that praises someone's work contradicts a termination letter issued a month later for poor performance, unless interim warnings explain the decline. Keep appraisal forms signed by both the employee and the manager, along with any supporting notes or improvement plans. These records show that performance discussions happened regularly, not just when a problem arose.
Training attendance registers, certificates, and development plans demonstrate the company's investment in employee growth and compliance with sector-specific requirements. Some industries mandate periodic training on health and safety, data protection, or anti-money laundering, and proof of attendance is required during inspections. Even when training is voluntary, documenting it helps justify promotion decisions by showing that the employee acquired the skills needed for the next role. It also counters claims that the company denied development opportunities to certain groups.
Promotion and salary-adjustment letters should include the new job title, reporting line, salary, effective date, and a brief justification for the change. If a promotion follows a competitive internal selection process, retain the interview notes and comparison matrix. Clear documentation defends the employer against allegations of favouritism or discrimination, especially if one candidate was promoted over peers with similar tenure. It also creates a transparent record that future managers can consult when planning succession or reviewing pay equity.
These records defend merit-based decisions during audits or disputes by providing objective evidence that promotions, raises, and terminations followed consistent criteria. A tribunal or labour inspector reviewing several cases will look for patterns: did the company promote people with documented achievements, or did it favour certain demographics regardless of performance? A well-organised performance and training file answers those questions before they escalate into formal complaints or media scrutiny.
How to organise and secure HR records for audit readiness
Digital filing by employee identification number or department with version control and timestamps replaces the chaos of shared folders where files are overwritten, renamed, or deleted without trace. Each employee should have a master folder containing subfolders for contracts, payroll, leave, performance, and exit documents. Version control tags every edit with a date and user name, so the audit trail shows who updated a contract or corrected a payslip. Timestamps prove when a document was created, which matters if a dispute centres on whether a warning was issued before or after an incident.
Role-based access controls determine who can view, edit, or delete sensitive documents, protecting employee privacy and preventing unauthorised changes. HR officers need full access to personnel files, but line managers should see only the performance and leave records of their direct reports. Finance teams require payroll and tax documents but not disciplinary records. An access log that records every file opening and download discourages data leaks and satisfies data-protection regulations. If a breach occurs, the log identifies the source immediately.
Regular audits of missing or expired documents should happen quarterly, not the day before an external review. Run reports that flag employees without signed contracts, expired medical certificates, or incomplete tax records. Chase approvals for pending leave requests and reminders for overdue performance reviews. A proactive audit gives the team time to correct gaps and prevents the panic that sets in when an NSSF inspector requests documents that should have been filed months ago.
Automated retention schedules and secure archiving prevent accidental deletion of records that must be kept for seven years or more. Configure the system to move closed files to a read-only archive after a defined period, such as one year post-exit, and apply a deletion lock until the statutory retention period expires. Backups should be encrypted, stored off-site, and tested regularly to confirm they can be restored. A robust archiving policy protects the company from both compliance failures and data loss due to hardware failure or cyberattack.
HR record keeping is not glamorous, but it is the foundation of every employment decision an organisation makes. A comprehensive, well-organised file for each employee transforms audits from dreaded events into routine check-ins and shields the business from disputes that could have been avoided with a single document. As African economies grow and labour regulation tightens, the companies that thrive will be those that treat compliance as a strategic advantage rather than a last-minute scramble.