HR & Payroll Platform.
Payroll, leave and attendance for many businesses in one system, calculated the Kenyan way.
Kenyan employers run payroll, leave and attendance across spreadsheets and separate tools. Statutory deductions (PAYE, NSSF, SHIF and the Housing Levy) change often and are easy to get wrong.
Amsol needed one platform it could run for many client businesses, each with its own structure, modules and people.
One platform, many businesses, each shaped its own way.
A multi-company HR and payroll platform. Each client business gets its own modules, roles and reporting lines, and employees get a self-service portal.
- PayrollPAYE, NSSF, SHIF and Housing Levy, loans, advances and payslips.
- LeavePolicies, accruals, encashment and approval routing that follows the organogram.
- AttendanceRosters, shifts and clock-ins pushed from biometric devices.
- RecruitmentJob posts, applicants and interviews.
- PerformanceOKRs and 360 feedback.
- Self-serviceEmployees see payslips, leave, assets and learning in their own portal.
Every query is scoped to a business.
Business-scoping middleware and module gating keep each client's data and features separate. Biometric devices push clock-ins straight to the platform.
Choices that made it hold up.
Scope every query to a business
Middleware attaches the current business to every request, so one client can never see another's data.Why: many businesses share one platform
Build a custom role builder
Clients create their own roles instead of choosing from a fixed list.Why: every organisation's structure is different
Accept biometric pushes directly
Devices post attendance straight to an endpoint, instead of someone exporting files.Why: manual exports were late and error-prone
Let support impersonate safely
Admins can view the system as a client, with every action recorded.Why: faster support without sharing passwords
What each stage looked like on this project.
- 01IdeaReplace spreadsheets and separate tools for Amsol's client businesses.
- 02DesignMulti-company data model with modules switched on per business.
- 03BuildLaravel with services for payroll and entitlements, 210 migrations.
- 04Test100 feature test files on money, access and data scoping.
- 05DeployBehind Cloudflare, with environment-based configuration.
- 06SecureTwo-factor login, banned-IP checks, throttled logins and a full audit log.
- 07ScaleOne codebase serving many businesses.
- 08Maintain250 commits of ongoing work across the team.
Tested where mistakes cost the most.
| Check | What it does | Result |
|---|---|---|
| Tenant isolation | Each business only ever sees its own employees | Feature tests |
| Payroll rules | Entitlements and statutory formulas | Feature tests |
| Access | Custom roles, impersonation, portal access | Feature tests |
| Attendance | Biometric device clock-ins land on the right person | Feature tests |
More countries and currencies on the same payroll engine.
Have an idea or a system to build?
Tell me what you need. I'll reply within a day with questions, a rough approach, or a time to talk.