AI agent training for financial controllers at accounting practices in Kenya

Financial controllers at Kenyan accounting practices need to learn how AI agents match electronic tax invoices, reconcile mobile money receipts and draft returns, and how to review, release or correct what agents hold. Tax positions, filings and payments stay with them. The Data Protection Act 2019 and the Office of the Data Protection Commissioner shape how client data is used.

What does a controller at a Kenyan accounting practice do all month?

Most Kenyan practices serve small and mid-sized businesses, NGOs and the local arms of international groups. The controller often runs outsourced finance for several clients: monthly books, VAT and withholding tax returns, payroll statutory deductions, and management accounts for owners and boards. For NGOs and donor-funded projects, there is also grant reporting in the donor's format and currency.

Two features make the work distinctive. Electronic tax invoicing is now required for businesses, so sales and purchase invoices must be validated through the tax authority's system before expenses count for tax. And a large share of receipts and payments run through mobile money, often from customers who do not quote an invoice number. Matching them to the right client account eats hours each week.

Where do AI agents take on part of the work?

• Electronic invoice validation checks (depth 3). The agent compares purchase invoices in the books with the validated invoices in the tax system and flags any expense that lacks a valid invoice. It posts matched items.
• Mobile money reconciliation (depth 3). The agent matches incoming mobile money payments to open invoices using the payer's number, name and amount, and lists the unmatched ones.
• VAT and withholding tax drafts (depth 2). The agent prepares the returns with the workings for each line. The controller reviews and files.
• Donor report drafts (depth 2). The agent maps project spending to the donor's budget lines and drafts the report, with any overspend highlighted.
• Supplier payments (depth 4, held). Where a client mandates the practice to prepare payments, the agent prepares them and a named person releases each one.

The controller becomes a reviewer of exceptions. The broader shift across firm roles is covered in which roles in accounting practices need AI agent training, and the full role map in AI agent skills by role.

What must controllers learn, and what stays with them?

Evidence classes. An invoice validated through the tax authority is sealed; a supplier's PDF is external. Mobile money statements from the provider are sealed; a customer's screenshot of a payment is declared, and screenshots are easy to fake. Controllers must teach reviewers that only sealed or signed evidence should settle a reconciliation.

Depth and verdicts. The agent may post matched invoices at depth 3 but only draft returns at depth 2. A supplier payment arrives held. A refused action names the bound that stopped it. Controllers should know that a certificate lapses after 90 days and that a run that clears no depth drops the agent to depth 1 the same day, sending work back to people.

Exception judgement. Unmatched mobile money receipts often turn out to be part payments, payments for several invoices, or payments from a director's personal line. Those calls need knowledge of the client.

Corrections. Every wrong match should be corrected with a reason. Our guide on teaching controllers to bank corrections shows how corrections improve the agent's brief.

What stays with the controller: filing returns, tax positions and objections, release of payments, donor certifications, and decisions on suspicious activity. Agents do not remove the role; our piece on whether AI agents will replace financial controllers explains why. The controller remains the person a client, donor or tax officer will hold to account, which is why financial controllers are the real control.

Which Kenyan rules shape oversight and competence?

The Data Protection Act 2019 governs personal data in client books, payroll and customer records. It requires lawful processing, purpose limitation, data minimisation and security safeguards, and gives individuals rights including a right not to be subject to decisions based solely on automated processing that significantly affect them. The Office of the Data Protection Commissioner registers data controllers and processors above certain thresholds and enforces the Act. A practice processing client data with an agent should check its registration and its contracts with clients.

The Central Bank of Kenya regulates mobile money and payment service providers, which is why mobile money statements from a licensed provider are sound evidence. The national institute of certified public accountants regulates the profession and sets ethical standards on confidentiality and competence. Accountants also carry anti-money-laundering duties consistent with the FATF Recommendations, and suspicious activity reports stay with people.

Kenya has no AI-specific law in force. A practice can use the NIST AI Risk Management Framework or ISO/IEC 42001 to structure governance, and GDPR may apply to clients with EU operations.

This is an explanation of the rules, not legal advice; confirm how they apply to you with counsel.

What does a 90-day training plan look like?

Month one. Controllers and senior accountants cover the foundations: governed agents, the decision chain, provenance, the record. The agent runs in shadow on electronic invoice checks for a group of clients.

Month two. Certify invoice checks at depth 3. Start mobile money reconciliation in shadow, with reviewers comparing the agent's matches against their own and recording each difference.

Month three. Certify mobile money matching for clients where shadow results were consistently right. Controllers work toward operator certification and use the AI agent training plan template for financial controllers to track progress. Lessons in Pryme Intelligence Academy can be read or played as audio, which helps staff who study between client visits.