OrangeHRM
Open-source HR suite for employee records, leave, time and recruitment, written in PHP with MySQL or MariaDB. The open-source edition has no Kenyan payroll built in, so many firms pair it with a separate payroll tool.
Host OrangeHRM, Frappe HR or your in-house payroll on a VPS with full root access. Salaries, bank details and statutory deductions stay on a server you control, and staff collect payslips from a self-service portal instead of an email thread.
Four cores let PHP-based HR and payroll generate payslip PDFs in parallel at month end. Its 16 GB of RAM also leaves room for Frappe HR or Odoo.
Order VPS V3An HR system spends most of the month handling leave requests and attendance. Then payroll closes: overtime is approved, deductions are recalculated, hundreds of PDF payslips are generated and emailed, and bank and statutory files are exported, often on the same afternoon. That is the moment a cheap shared hosting account times out or a desktop install freezes, and the finance team ends up working late.
Kenyan payroll also changes more often than people expect. PAYE bands, NSSF tiers, SHIF and the Affordable Housing Levy have all been revised in recent years, and each change means updating software, re-running calculations and checking them. Having your own server lets your developer or vendor apply updates on your schedule, test them on a staging copy and keep last month's figures for comparison.
Payroll data is about as personal as it gets: ID numbers, KRA PINs, bank accounts, salaries and disciplinary notes. A VPS keeps that information off shared office machines and personal laptops. You decide who holds root access, which ports are open and where encrypted backups go, and HostingKE support can advise on sizing and server security when you plan the move.
Generating several hundred payslips and emailing them in one request is the classic way to hit a PHP time limit. On a VPS you run that work through a queue with enough workers, so the run finishes and nobody refreshes the page in hope.
When deduction rules change, you need to update the calculation, test it against known figures and roll it out before the next run. A staging copy on the same server lets you prove the numbers before staff see them.
Payroll spreadsheets on shared drives get forwarded and copied. A hosted HR system with role-based access means line managers approve leave, HR sees contracts and only payroll officers see pay and bank details.
Bulk payslip emails from a busy shared server often land in spam or bounce. Sending through an authenticated mail service from your VPS, with SPF and DKIM set on your domain, gets them to staff inboxes.
Kenyan employers use a mix of open-source HR suites and locally written payroll engines. Here is what each expects from the server.
Open-source HR suite for employee records, leave, time and recruitment, written in PHP with MySQL or MariaDB. The open-source edition has no Kenyan payroll built in, so many firms pair it with a separate payroll tool.
Open-source HR and payroll app on the Frappe Framework, with salary structures, salary slips and leave management. It needs Python, MariaDB, Redis and Node.js, and is happiest with several gigabytes of RAM.
Odoo Community includes employee records and time off, while the Payroll app is part of the paid Enterprise edition. It runs on Python with PostgreSQL and benefits from multiple worker processes on a multi-core VPS.
Many Kenyan companies run payroll written in Laravel, Django or .NET that encodes their own allowances and statutory rules. It typically needs a queue worker, a PDF library for payslips and a scheduler for month-end jobs.
Use the number of employees on the payroll, including casuals paid through the system. Month-end is the load that matters.
Use this as a starting point: real load depends on your software, how many payslips you generate in one run and how much attendance data you import.
0 of 8 done. Tick them off as you go.
Employers deduct PAYE, NSSF, SHIF and the Affordable Housing Levy, and the rules for each have changed in recent years. Your software must be easy to update, and a self-hosted system lets you test changes before the next run.
The Data Protection Act 2019 applies to the personal data you hold on staff, including ID numbers, KRA PINs and bank details. Limit access by role, log who views records and keep backups encrypted. Get specific advice on your obligations as a data controller.
Many employees, especially in the field or on shifts, never sit at a desk. A self-service portal reachable over HTTPS from a phone lets them download payslips, P9 forms and leave balances without queueing at the HR office.
Plans from KES 2,000 a month, paid by M-Pesa or card.
Size your server