M&A due diligence in Kenya is where deals are won or lost long before anyone signs. Price, structure and warranties all depend on what the buyer finds, and what the buyer misses usually becomes the buyer’s problem the day after completion. An unpaid tax liability, a key contract that ends on a change of control, land with a defective title or customer data collected without a lawful basis can each wipe out the value a buyer expected to gain.
This guide sets out a twelve point legal checklist for buyers, investors and sellers preparing for an acquisition, merger or investment in Kenya. It is written for business owners and deal teams approaching M&A due diligence in Kenya for the first time or the fiftieth who want to understand what good legal due diligence covers and why each area matters.
What M&A due diligence in Kenya is for
M&A due diligence in Kenya has three jobs. It confirms that the target owns what the seller says it owns. It identifies liabilities and risks that affect price or structure. And it tells the deal team what protections the transaction documents need, such as conditions precedent, specific indemnities, price retentions or warranties.
M&A due diligence in Kenya has also become more regulated. The COMESA and EAC merger regimes became suspensory in late 2025, so deals that cross their thresholds cannot close before clearance. We explain those changes in our guide to mergers and acquisitions in Kenya. Due diligence is where a buyer gathers the turnover and asset figures that decide which filings are needed.
The 12 point checklist for M&A due diligence in Kenya
1. Corporate records and ownership
Confirm the company’s incorporation, constitution, share capital and shareholding through a search with the Business Registration Service. Check the register of beneficial owners required under the Companies Act, 2015, board and shareholder resolutions, and any share options, pledges or rights of first refusal that could affect the sale.
2. Material contracts and change of control
Review the target’s key customer, supplier, distribution, licence and finance agreements. Many contain change of control clauses that allow the counterparty to terminate or renegotiate when ownership changes. Identifying these early lets the buyer seek consents as a condition of closing.
3. Financing, security and guarantees
Identify all borrowings, guarantees and security granted by the target. Check charges registered at the companies registry and security interests registered under the Movable Property Security Rights Act, 2017. Loan agreements often restrict a sale or require lender consent.
4. Land and leases
Run official searches on all land and leases the target owns or occupies, and review planning approvals and environmental licences for its premises. A business whose factory or head office sits on land with a defective title or an expired lease carries serious risk. Our guide to the searches property lawyers run sets out what a full property review covers.
5. Employment and pensions
Review employment contracts for senior staff, policies, collective agreements, disputes and statutory compliance, including remittances for social security, social health insurance and the housing levy. Any planned restructuring after completion must follow the redundancy procedure in the Employment Act, as recent restructurings in the market have shown. We discussed the lessons in our piece on Tala’s recent layoffs and the adoption of AI.
6. Tax
Confirm the target’s tax compliance, including corporate income tax, VAT, PAYE and withholding tax, and check for audits, assessments and disputes with the Kenya Revenue Authority. Tax exposure is one of the most common reasons for price adjustments and specific indemnities.
7. Licences and regulatory approvals
List every licence the business needs and confirm that each is valid, held by the right entity and transferable or unaffected by the deal. Regulated sectors such as banking, insurance, energy, telecoms, payments and virtual assets often require regulator approval before a change of control.
8. Data protection and cybersecurity
Under the Data Protection Act, 2019, many data controllers and processors must register with the Office of the Data Protection Commissioner. Check registration, privacy notices, data processing agreements, breach history and how the target transfers personal data abroad. The ODPC’s 2026 guidance on international transfers has raised the bar, as we explained in our piece on the ODPC’s cross border transfer rulebook.
9. Intellectual property
Confirm ownership of trademarks, patents, designs, software and domain names, and check that registrations with the Kenya Industrial Property Institute are in the company’s name. Make sure employees and contractors who created key assets have assigned their rights to the company.
10. Litigation and disputes
Identify current, pending and threatened claims, regulatory investigations and arbitration. Court searches, management disclosures and a review of correspondence with regulators help build the picture.
11. Competition and merger control
Gather the turnover and asset figures needed to test the Kenyan, COMESA and EAC thresholds, and check the target for any history of competition investigations or restrictive agreements with competitors. The Competition Authority of Kenya publishes its guidelines and decisions.
12. Anti bribery, sanctions and integrity
The Bribery Act, 2016 requires private entities to have procedures to prevent bribery. Review the target’s compliance policies, dealings with public officials, government contracts and any red flags involving its owners or agents. Integrity issues can create criminal exposure and reputational damage that no indemnity fully repairs.
Turning M&A due diligence in Kenya into protection
Findings are only useful if they shape the deal. A good due diligence report ranks issues by severity and recommends what to do about each one. Some issues justify a price reduction. Others call for a condition precedent, such as a consent from a counterparty or a regulator. Others belong in a specific indemnity or a retention from the purchase price. A few may justify walking away.
Sellers benefit from M&A due diligence in Kenya too. Running vendor due diligence before going to market lets a seller fix problems early, present the business with confidence and keep control of the timetable.
Frequently asked questions
How long does M&A due diligence in Kenya take?
It depends on the size and complexity of the target and how organised its records are. A well prepared data room can shorten the process considerably.
Who pays for due diligence?
Usually the buyer pays for its own due diligence. Sellers who run vendor due diligence pay for that themselves.
Is legal due diligence enough on its own?
No. Legal, financial and tax due diligence work together, and in some sectors technical, environmental or commercial reviews are also important.
What is a data room?
A secure online space where the seller shares documents with the buyer’s advisers during due diligence.
Plan your due diligence with our M&A team
Thomas Louis Advocates advises buyers, sellers, investors and founders on M&A due diligence in Kenya and across East Africa, including structuring, merger control and transaction documents. Learn more about our Mergers and Acquisitions practice and our Corporate and Commercial Transactions practice.
To discuss a transaction, you can contact our team, email [email protected] or call +254 115 702 315.
This article is for general information only and does not constitute legal advice. Please seek advice on your specific transaction.
