
Compliance & Regulatory
Compliance controls that follow the loan.
Build affordability, CRB checks, disclosure, complaint deadlines and recovery notices into the loan workflow, with the evidence behind each decision recorded and reports built from the same loan data.
- Affordability · Loan #1956
- DSR 31.8% · within threshold
- Repossession
- Locked until notice served
- Complaint CMP-1042
- Acknowledgement due today
Compliance is part of the workflow, not a spreadsheet beside it
When compliance lives in a parallel set of files, the hardest question a regulator can ask is simply: show me the evidence that this check happened before the decision was made. Ustawi answers that by making each control a step in the loan's own timeline — every action leaves evidence, every decision leaves an audit trail, and the figures feed the reports.
From a side spreadsheet to evidence on the loan
Drag the slider: the same checks, kept in a spreadsheet versus recorded on the loan in Ustawi.
| APP-1956 | CRB | done? | ask J. Mushi |
| APP-1956 | DSR | 31.8% | before approval? |
| CMP-1042 | Complaint | 14 Sep | acknowledged? |
| LN-1810 | Notice | #REF! | served when? |
A compliance timeline that follows the loan
Every loan passes through the same governed stages — and each stage carries its own control. The timeline is the spine this whole page hangs on: the check that belongs at each point, done there, and kept there. Follow loan #1956 through it.
Tap a stage to stop on it. Hover pauses the animation.
Affordability, recorded and linked to the decision
The affordability assessment captures the borrower's income, existing obligations and the proposed repayment, works out the debt-service ratio, and records the outcome — then links it to the credit decision so the reasoning is part of the loan's evidence.
Ustawi records this assessment and links it to the credit decision for Loan #1956. Whether the ratio also enforces an approval gate is an institution-configured option — the threshold is set by your institution, not a universally-compliant figure.
Amounts in TSh. Ratios and thresholds are configured per institution and product.
The CRB check, tied to the application that used it
The credit-bureau check is recorded against the application it belongs to — not run in a separate tool and forgotten. The result sits alongside the identity and screening work, and links across to the checks that share the same borrower record.
| Lender | Facility | Balance | Status |
|---|---|---|---|
| Commercial bank | Working-capital loan | TSh 6,200,000 | Performing |
| Leasing company | Asset finance | TSh 1,450,000 | Performing |
The specific bureau and the exact integration scope are confirmed per institution before go-live.
Every piece of evidence is linked to the decision it informed
A control is only worth as much as the evidence it leaves behind. Each check is stored as a record — what was done, when, by whom, the result, and the decision it was used in — so the answer to an auditor's question is one screen, not a hunt through email.
Pre-disbursement controls, confirmed before release
Before a loan is disbursed, Ustawi surfaces the compliance controls that belong at that point — each with the evidence that satisfies it. Which of these are hard gates on release is configured by your institution.
- Affordability assessment recordedLinked to the credit decision
- CRB check on fileRecorded against APP-1956
- Identity / KYC verifiedCaptured at application
- Approval within mandateApprover and role recorded
- Cost disclosure issuedKey facts statement generated
Which controls are enforced as blocking gates, versus recorded for review, is configured per institution and product.
A complaints register with the clocks tracked
A borrower complaint is logged as a case with its own reference, category and deadlines. Ustawi tracks the required acknowledgement and response windows so a case cannot quietly drift past a deadline — and every step is kept as evidence.
- Complaint received14 Sep 2026 · 09:40
- Logged in the register14 Sep 2026 · 09:52
- Acknowledged to the borrowerDue today
- Investigation & responseDeadline running
- Resolution recordedPending
A recovery notice, under the applicable framework
Where a loan goes into default and recovery is pursued, Ustawi records the notice, when and how it was served, and the notice period that must elapse before a downstream action becomes eligible. The notice requirement itself is not a single universal rule — it depends on your institution, the product and the collateral involved.
- DefaultRecorded
Delinquency recorded on the loan
- Notice draftedRecorded
Recovery notice prepared for the borrower
- ServedIn progress
Service recorded with date and method
- Notice period
Runs for the configured requirement per the applicable framework
- Eligibility
Downstream action becomes eligible once the period has elapsed
- Action
Handled per your institution's process and the applicable requirements
Every decision, with its evidence
Every control, and the evidence it leaves
A control is what you require before a decision; evidence is what remains afterwards. Ustawi pairs the two, so the record is not just that a decision was made, but that the check behind it was done.
| Control (before / at the decision) | Evidence (kept with the loan) |
|---|---|
| Affordability assessment run | Inputs, DSR and outcome linked to the decision |
| CRB check performed | Result, date, who performed it, used-in-decision flag |
| Approval within mandate | Approver, role and timestamp on the loan |
| Cost disclosure issued | Key facts statement recorded at origination |
| Complaint handled | Case timeline with acknowledgement & response deadlines |
| Recovery notice served | Notice, served date, method and configured period |
| Regulatory report generated | Report, period and figures traceable to the ledger |
An audit trail that keeps the evidence behind every decision
Every material compliance action is captured with a timestamp, the user, the action, the entity it touched, and what changed. When an examiner asks who did what and when, the trail is on one screen — recorded as the work happened.
| Timestamp | User | Action | Entity | Change |
|---|---|---|---|---|
| 12 Jan · 10:22 | J. Mushi | CRB check recorded | APP-1956 | — → Returned |
| 12 Jan · 15:40 | J. Mushi | Affordability recorded | APP-1956 | — → DSR 31.8% |
| 13 Jan · 11:02 | R. Kessy | Branch approval | Loan #1956 | Pending → Branch approved |
| 14 Jan · 10:20 | Credit Committee | Credit decision | Loan #1956 | Branch approved → Approved |
| 14 Jan · 10:45 | J. Mushi | Cost disclosure issued | Loan #1956 | — → KFS generated |
| 14 Sep · 09:52 | System | Complaint logged | CMP-1042 | — → Open |
The audit trail keeps the evidence behind each recorded action; access to it is governed by roles — see Staff Admin & Security.
One borrower, one compliance history
Because each control lives on the loan, a borrower's whole compliance history reads as one story — KYC, CRB, affordability, approval, disclosure, complaints and recovery, in order, each with its evidence.
- KYC / identity12 Jan 2026Captured and verified at application
- CRB check12 Jan 2026Recorded against APP-1956 · 2 open facilities
- Affordability12 Jan 2026DSR 31.8% · within configured threshold
- Approval14 Jan 2026Approved · approvers and roles recorded
- Disclosure14 Jan 2026Key facts statement issued at origination
- Complaint14 Sep 2026CMP-1042 open · acknowledgement due
Make compliance part of every lending decision.
The compliance workload at a glance
One control center for compliance across the book
Above every loan sits a single view of the compliance work that is open, due, or overdue — the required actions, the deadlines that are running, and the decisions still missing their evidence. Compliance stops being a separate set of files and becomes a worklist tied to the loans themselves.
| Control | Reference | Borrower | State | Action |
|---|---|---|---|---|
| Affordability assessment | APP-2207 | Upendo Salon | Due today | Review → |
| CRB check | APP-1972 | Baraka Mushi | Pending | Review → |
| Complaint acknowledgement | CMP-1042 | Amina Trading Co. | Due today | Review → |
| Recovery notice review | LN-1810 | Juma Salehe | Overdue | Review → |
| Missing evidence — approval | APP-1901 | Neema Paul | Attach record | Review → |
Which controls appear, and their deadlines, depend on your institution type and configuration.
Compliance at a glance — institution and branch
Above the individual controls sits a management view: completion of affordability and CRB checks, open complaints, overdue controls, missing evidence and pending recovery — for the institution as a whole, and broken down by branch.
| Branch | Affordability | CRB | Complaints | Overdue | Missing evidence |
|---|---|---|---|---|---|
| Kariakoo | 98% | 97% | 1 | 0 | 2 |
| Mwanza | 95% | 93% | 2 | 1 | 3 |
| Arusha | 96% | 94% | 1 | 0 | 1 |
| Mbeya | 93% | 90% | 0 | 0 | 1 |
Reporting, scoped to your framework
Regulatory reporting from the same loan data
The figures on a supported regulatory report are built from the loans, repayments and classification the platform already holds — aggregated, reviewed, and exported. Because the numbers come from the ledger, a report is traceable back to the events behind it rather than reassembled by hand.
| Report | Period | Status | Action |
|---|---|---|---|
| Portfolio classification summary | Aug 2026 | Exported | Open → |
| Provisioning summary | Aug 2026 | Exported | Open → |
| Portfolio classification summary | Sep 2026 | In review | Open → |
| Complaints summary | Q3 2026 | Draft | Open → |
Which reports are supported, and whether a filing is submitted directly or exported for submission, depends on your institution type and the applicable channel.
Controls depend on your institution type and framework
There is no single generic configuration that fits every lender. Tanzania regulates non-deposit-taking MFIs, SACCOS and community microfinance groups under separate instruments, and Zanzibar has its own. Which controls apply, which reports are supported and which deadlines are tracked follow from your institution type and the applicable framework — the cards below show the concept; they are not a compliance determination.
- Non-deposit-taking MFI
- SACCOS
- Community microfinance group
- Mainland Tanzania
- Zanzibar (separate instruments)
- Controls that apply
- Reports that are supported
- Deadlines that are tracked
Connected across the Ustawi platform
Compliance & Regulatory is not a bolt-on. It is the control and evidence layer over the apps around it — reading and writing against the same loan record they do.
The application and credit decision each control attaches to.
Explore app →Sanctions / PEP screening on the same borrower record.
Explore app →Repossession is gated on a served recovery notice.
Explore app →Where a default becomes recovery, follow-up runs here.
Explore app →Classification and provisioning feed the supported reports.
Explore app →Controls exist to protect the borrower and the lender
Affordability, clear disclosure, a complaint that is answered on time, a recovery step taken properly — these are not box-ticking. They keep the lending relationship fair, and they keep the institution able to show its work. Ustawi's job is to make the right control the easy one to do at the right moment.

Getting live
How we get you live
A structured rollout, from mapping your applicable framework to running controls on live lending.

- 01Discover
Map your institution type, applicable framework and current controls.
- 02Configure
Set the controls, thresholds, deadlines and reports that apply to you.
- 03Migrate
Bring existing loans and their compliance records onto the platform.
- 04Test
Validate controls, deadlines and reports against known cases.
- 05Train
Bring compliance, credit and branch staff up to speed on the workflow.
- 06Go live
Run controls on live lending, with support on hand.
See Compliance & Regulatory in a live demo
Request a DemoFrequently asked questions
Rather than a separate compliance module, Compliance & Regulatory makes each required check — affordability, CRB, complaints, recovery notices — a step on the loan's own timeline, and keeps the resulting record linked to the decision it informed. The idea is that the evidence a check happened before a decision was made is part of the loan, not a separate file.