SaccoSphere
The platform

One ledger. Three applications. Nothing to reconcile.

A member on a phone, a credit officer in a browser, and a platform administrator watching the whole network all read from the same source of truth. Here's what's actually running underneath that promise.

For the member

A member's whole cooperative life, in one app

Every SACCO a member belongs to, in one portfolio — not a login per institution.

  • Unified savings, loan and dividend view across every SACCO
  • M-Pesa STK Push deposits with instant ledger posting
  • Internal transfers between BOSA, FOSA, loan repayment and share capital
  • Paybill deposits without opening the app, for feature-phone reach
  • Biometric / PIN login, downloadable PDF statements
  • Digital guarantor requests, consent, and reconsent on restructures
For underwriting

Lending decisions explained, not just issued

A what-if calculator before a member ever applies, a plain-language appraisal summary after, and a cost-of-credit disclosure before disbursement — not a black-box approval.

  • Live Metropol CRB scoring with cached-vs-fresh checks
  • What-if eligibility calculator, no application created
  • Effective-annual-rate cost-of-credit disclosure before disbursement
  • Guarantor capacity enforced across every SACCO a member guarantees in
  • Restructure, reschedule, top-up, buy-off and penalty-waiver workflows
  • SASRA 5-band classification & provisioning, computed, not spreadsheet-tracked
For the back office

A real collections desk, not an arrears report

Overdue loans sorted worst-first, a contact log that can't be edited after the fact, and portfolio-at-risk reporting that updates as the queue is worked, not at month-end.

  • Worst-first overdue queue with per-member contact history
  • Promise-to-pay tracking, resolved automatically by a nightly sweep
  • Portfolio-at-risk reporting by days-past-due band
  • Guarantor recovery, always routed through maker-checker approval
  • Configurable reminder cadence, quiet hours, and daily caps per SACCO
  • A holiday-mode switch that tightens withdrawal limits sector-wide
For SACCO admins

Governance enforced by the system, not the policy folder

The officer who approves a loan cannot be the one who disburses it — not because the handbook says so, but because the software won't let them.

  • Step-up MFA and maker-checker on every money-moving action
  • Membership application and KYC review queue
  • Dividend declaration with four-eyes approval control
  • Bulk SMS, member import, and a full approvals audit trail
  • Auto-generated SASRA Forms 1, 2 and 3
  • Role-based access, down to a dedicated collections-officer role
For the whole membership

The parts of membership nobody builds for

A member leaving, naming a nominee, or passing away isn't an edge case in a SACCO's real operations — it has its own notice period, settlement logic, and document-verified claims process here.

  • Exit notice periods with automatic loan-offset against deposits
  • Share-capital transfer to another member on exit
  • A standing nominee registry with guardian fields for minors
  • Deceased-member claims: document checklist, verification, settlement
  • Every balance change on exit still posts through the same ledger
For employer partners

Payroll check-off, handled end to end

Deposits, shares and loan instalments deducted at source by an employer, matched against what was actually remitted — with a real variance queue for what doesn't match.

  • Employer and payroll-mandate management per member
  • Monthly deduction schedule generation, locking, and export
  • Remittance file import with automatic line-level matching
  • A variance queue for under/over-deductions and payroll mismatches
  • Remittance-timeliness and arrears-ageing dashboards per employer
Underneath all of it

Infrastructure, briefly

Immutable ledger

One audited entrypoint for every balance change — nothing is ever edited directly.

Multi-tenant isolation

Every query filters by SACCO. No shared state, no cross-tenant reads.

Async execution

Payments, notifications, and reports run on isolated queues with idempotent retries.

Integrations

M-Pesa Daraja, Metropol CRB, Africa’s Talking SMS, Firebase push — built in, not bolted on.

Audit chain

Every sensitive change is hashed to the one before it.

See it running against your own SACCO’s data

A demo isn't a slide deck here — we'll walk through your member count, loan book and current pain points on the call.