Zamacore Blog

Workflow Automation in Kenya: Define Approval Rules Before Building

October 8, 2026 2 min read Business Systems

Workflow automation in Kenya is most useful when a business can explain who makes each decision and what happens when information is incomplete. Moving an unclear approval process onto a screen can preserve the confusion. Before commissioning an enterprise workflow, describe one repeatable process in enough detail to test it.

Choose a process with a clear beginning and end

A purchase request is a useful example: a member of staff submits a need, a reviewer checks it and an authorised person approves or rejects it. Define what starts the process and what counts as completion. Keep ordering, receiving goods and paying a supplier distinct if different teams own those actions. This creates a manageable first scope.

Write the rules as examples

Document the information required from the requester, the reviewer for each case and the circumstances that need escalation. Include an incomplete request, a rejected request, a change after approval and an unavailable approver. Record the expected result for each example. These cases become acceptance criteria for configuration or custom development, rather than remaining assumptions in a meeting.

Keep approval attached to the approved information

Ask the development team how the system handles edits after a decision. A changed amount or supplier may need a new review under your organisation's policy. The system should make the approved version identifiable. OWASP's transaction-authorisation guidance is a useful technical reference when designing checks around sensitive actions; implementation still needs review for the actual application.

Separate an integration from a successful handover

If an ERP or accounting connection is required, define the record sent, the receiving system and the response that confirms success. Decide what staff should see when a request fails or times out. Repeated submissions should be considered during design so the business can investigate duplicates. Agree the supported API and test environment before treating the integration as delivered.

Plan the pilot around evidence

Pick one department and keep the initial scope small. Compare the time spent finding the next approver and the number of requests returned for missing information. Review exceptions with the staff who use the workflow. When contacting ZamaCore, bring a process sketch and five anonymised examples. Request a scoped proposal covering rules, access, integrations, migration and support; confirm current capabilities separately from proposed development.

Visit ZamaCore to discuss your requirements.

Technical reference: OWASP transaction authorisation guidance.

Leave a Reply

Your email address will not be published. Required fields are marked *