Frequently Asked Questions

We offer 9 core enterprise systems: HR Management, Procurement Management, eLearning Management, Real Estate Management, Supply Chain Management, Executive Decision Support, CRM, Hospital Management, and POS System. Each is available as cloud-hosted SaaS or on-premise deployment.

Yes. Every Krestworks system is designed as a starting point, not a ceiling. We regularly extend and customise systems to match specific business logic, approval workflows, industry regulations, and reporting requirements.

Implementation timelines vary by system and scope. A standard deployment takes 2–6 weeks. Customised deployments with complex integrations can take 8–16 weeks. We provide a detailed implementation timeline during the proposal stage.

Yes. All implementations include role-based training for end users, managers, and administrators. We deliver training via live sessions, recorded walkthroughs, and written user manuals tailored to your configuration.

Our systems are built for enterprise scale. The architecture is optimised for large datasets, high concurrent user loads, and multi-year data growth. We size infrastructure specifically to your volume requirements.

Yes. Custom software development is one of our core services. We design and build bespoke enterprise systems, web platforms, mobile apps, and APIs tailored to your exact requirements — no templates, no compromises.

You do — completely. All intellectual property transfers to you on final payment. We retain no ownership rights or licence fees on custom-built systems.

We follow Agile/Scrum methodology with 2-week sprints. You see working software at the end of every sprint, not just a final reveal. Requirements can evolve through a formal change management process.

A focused module (e.g., a leave management system) typically takes 4–8 weeks. A full enterprise platform takes 4–6 months. Complex multi-system platforms can take 6–12 months. We always provide a detailed timeline in our proposal.

Yes. We are willing to sign mutual NDAs before any discovery session where sensitive business information will be shared.

We offer three pricing models: (1) Subscription — monthly/annual SaaS access to our standard systems, (2) Enterprise Licence — full system ownership with one-time or phased payment, (3) Custom Package — scoped custom development with T&M or fixed-price contracts.

We offer a 7-day sandbox environment for all standard products. This gives you hands-on access to the full system with pre-loaded test data. Contact us to request sandbox access.

Yes. Subscription pricing includes cloud hosting, SSL certificates, database management, uptime monitoring, and regular security updates. Enterprise licences are priced separately from infrastructure.

No. Our pricing is transparent. Custom development, additional modules, and training beyond the initial onboarding are quoted separately and always agreed before work begins.

Yes. We encourage phased adoption. Many clients start with a core module (e.g., HR), validate the value, and expand to additional modules over 6–12 months.

Yes. We have integration experience with most major ERP platforms (SAP, Odoo, QuickBooks), payment gateways (M-PESA Daraja, Stripe, Flutterwave), communication platforms (Twilio, SendGrid), and HR systems. If it has an API, we can connect to it.

Yes. We implement the full Safaricom Daraja API — STK Push, C2B, B2C, Reversals, and Account Balance. We handle sandbox testing, production go-live, and all edge cases including timeouts and payment reconciliation.

Yes. We integrate biometric attendance terminals, fingerprint readers, and access control hardware from major vendors. Integration is typically via SDK, database polling, or TCP/IP protocol.

We can use file-based integration (CSV/SFTP), screen scraping, or RPA bots as fallbacks when official APIs are not available. We always recommend the most stable, maintainable integration method available.

All deployments include a 30-day hypercare period with daily check-ins. After hypercare, support is governed by an SLA that specifies response times by issue severity (P1: 2h, P2: 8h, P3: 24h).

Via our support portal (accessible from your client dashboard), email, WhatsApp, or phone. Critical issues (system down) can be escalated directly via phone 24/7.

Yes. SaaS subscriptions include all platform updates and security patches automatically. Enterprise licence holders receive updates per the maintenance agreement terms.

Yes, with a system handover assessment. We review the codebase, documentation, and infrastructure before assuming maintenance responsibility and provide a risk assessment with our proposal.

All systems are built with OWASP best practices: prepared statements, CSRF protection, encrypted storage, HTTPS-only, role-based access control, audit logging, and regular security reviews. We conduct a security audit before every production go-live.

SaaS deployments are hosted on servers in data centres with ISO 27001 certification. We can accommodate data residency requirements including local Kenya-hosted environments.

Yes. Automated daily backups with 30-day retention as standard. Backups are stored in a separate region from the production environment. We test restore procedures monthly.

Yes. Our systems and practices are designed to comply with the Kenya Data Protection Act 2019, including data subject rights, retention policies, and breach notification requirements.