Home/Products/Workplace Banking
Workplace Banking · Check-off origination

Check-off lending
you can stand behind.

Originate payroll-deduction loans from pre-sale calculator to disbursement — payslip-accurate affordability, a 13-stage role-based workflow, embedded IPRS, CRB, KRA and AML checks, and maker-checker booking. One platform for banks, microfinance banks and SACCOs.

Payslip-accurateMaker-checkerImmutable auditAzure or on-prem
wpb · pre-sale calculatorDSE
Affordability check
48 mo · 14.0%
Gross salaryKES 145,000
Statutory + other deductionsKES 54,700
Minimum take-home (policy)KES 50,000
Max eligible loan
KES 1,474,600
Affordable
Max instalment
KES 40,300
Take-home after
KES 50,000
13
Workflow stages
Role-based, with decision gates and SLA timers
8
External integrations
Finacle, IPRS, CRB, KRA, Comply Advantage, IPPD
10
RBAC roles
Scoped per stage; maker-checker enforced in the database
4–48 h
SLA limit per stage
Automatic breach detection and turnaround reporting, so nothing stalls silently
The problem

Simple from the outside. Anything but, behind the desk.

A salaried borrower, an employer that deducts the instalment at source, a predictable repayment — yet most lenders still run check-off origination across spreadsheets, email, a generic loan system and several manual hand-offs.

The cost is rarely one dramatic failure. It is the accumulation of small ones — and when an auditor asks what happened to a particular facility, reconstructing the answer means stitching together inboxes.

  • Affordability worked out by hand

    A figure is calculated from the payslip and re-keyed into the system — and one omitted deduction breaches the minimum take-home rule.

  • Checks pasted from four windows

    The national ID register, the credit bureau, the tax authority and a sanctions list are each checked in a separate system, then copied into the form.

  • Money moving before it should

    A buy-off disbursed before the other lender's clearance letter arrives; a loan booked without the break-period interest that keeps the check-off in step with the repayment schedule.

  • No single record of the journey

    A file passes from sales to sales management, compliance, credit analysis and approval with no record of who did what or how long each step took — and the officer who booked the loan may be the one who disbursed it.

What changes

What changes at the desk.

The same journey, guided for sales, structured for credit and operations, and evidential for compliance and audit.

A quote the customer can trust before the application exists

Forward, reverse and affordability calculators built from the payslip, with the minimum take-home rule enforced.

Compliance results beside the application, not in another window

IPRS, CRB, KRA and AML checks run inside the workflow and show on the reviewer's split screen, cached for 24 hours.

Money moves under two pairs of eyes

Booking and disbursement need an inputter and a verifier, and a database constraint guarantees they are never the same person.

Stalled files surface before they become complaints

Per-stage SLA limits of 4 to 48 hours with automatic breach detection and turnaround reporting.

The workspace

From a quote to a disbursed loan, in one console.

Every role works in the same portal — sales executives quote and capture, credit analysts assess, approvers sign off, and credit admin books and disburses. Click through the real surfaces the team uses each day.

portal.workplace-banking/dashboard
Home/Dashboard
Creo SACCO
Good to see you, Amani.
Ready to originate a new loan? Here's your pipeline across the workflow.
New applicationCalculator
Work queues
24
Pending
Awaiting initial review
41
In progress
Currently being processed
13
Awaiting documents
Requested from applicant
7
Ready for approval
Pending final sign-off
Recent activityDecisions across your applications
Audit log →
Recommended to credit approval
Credit Analyst
WPB-04471
Returned for missing payslip
SCCA
WPB-04468
Disbursed via RTGS
Credit Admin
WPB-04455
Application captured
Direct Sales Executive
WPB-04472
Shortcuts
Most-used tools for your role
New application
Pre-sale calculator
All applications
My queue
Capabilities

Eleven services, one origination platform.

Each capability is an independently deployable service — affordability, workflow and compliance are built in, not bolted on.

Loan calculators

Forward, reverse and affordability calculators with a minimum take-home rule — accurate quotes before an application exists.

Application lifecycle

Applicant, contact, employment and loan details, buy-off capture, OTP verification and reference-number generation — so every application is complete, verified and traceable from the first screen.

Workflow engine

The 13-stage engine with role-based stage transitions, decision recording, standard decline and return reasons, and queues — so nothing advances without the right role acting, and every decision carries a reason.

Compliance engine

IPRS, CRB, KRA and Comply Advantage checks plus a business-rules engine — PEP, take-home, retirement age and debt-income — so policy is applied the same way on every file, not from memory.

Disbursement & booking

Finacle booking, maker-checker dual approval, full/partial/final disbursement, RTGS and bankers cheque, fee recovery — so money moves only after two people have agreed, and books exactly as approved.

Documents

Checklist-driven upload and verification, stored in MinIO or Azure Blob, with check-off authorization forms generated — so the file is complete before credit sees it.

SLA monitoring

Per-stage time limits, breach detection and turnaround reporting — average, min and max by stage — so a stalled application is visible before it becomes a complaint.

Audit trail

Every action recorded immutably — a database trigger blocks any update or delete. Your defence and reconciliation in one.

Notifications

Template-driven email and SMS on workflow events — submitted, approved, declined, returned and disbursed — so sales, credit and the customer know where the loan is without asking.

The workflow

Thirteen stages. Real decision gates. Every hand-off owned.

An application moves through a role-based workflow with SLA timers at each step. After credit approval, new loans and top-ups take the check-off booking path; buy-offs go through clearance first. Nothing advances without the right role acting.

Capture → decision · stages 1–7
1
Pre-sale calculation
DSE
2
Customer application
DSE
3
Document collection
DSE
4
Application review
Sales Manager
5
Document verification
SCCA
6
Credit analysis
Credit Analyst
7
Credit approval
Credit Approver
Credit approval splits the path
New loans & top-ups
Straight to check-off booking, then disbursement.
8
Check-off booking
SLAD
9
Loan booking
Credit Admin · maker-checker
11
Disbursement
Credit Admin · maker-checker
12
Post-disbursement
Credit Admin
99
Completed
Closed
Buy-offs
Cleared with the existing financier before booking.
9
Loan booking
Credit Admin · maker-checker
10
Buy-off clearance
SCCA
11
Disbursement
Credit Admin · maker-checker
99
Completed
Closed
Ten roles, scoped by RBAC
DSESales ManagerSCCACredit AnalystCredit ApproverSLADCredit Admin InputterCredit Admin VerifierSystem AdminAuditor
Integrations

Wired into the systems origination depends on.

Eight external integrations, each behind an adapter with retry, circuit-breaker and a 24-hour result cache — so a slow bureau never stalls the queue.

Finacle
Core banking — CIF, accounts, loan booking and disbursement.
IPRS
National ID verification against the population register.
CRB
Credit reference bureau checks and scoring.
KRA
Tax PIN verification for the applicant.
Comply Advantage
AML, PEP and sanctions screening.
IPPD
Government payroll deduction verification.
DMS
Document management workflow integration.
RTGS
Inter-bank fund transfers for disbursement.
Maker-checker dual control
Loan booking and disbursement need two people — an inputter and a verifier. A database constraint guarantees they are never the same user.
SLA monitoring & TAT
Per-stage time limits from 4 to 48 hours, automatic breach detection, and turnaround reporting by stage so nothing stalls silently.
Immutable audit trail
Every workflow event is logged automatically off the message bus, into a table where a trigger blocks any update or delete.
Deployment

One codebase. Three ways to run it.

Built on .NET 9 microservices with environment abstraction — the same binary runs on your own Kubernetes, directly on Azure, or one-click from the Azure Marketplace. Regulators, infrastructure and risk appetite differ; your software shouldn't force the choice.

On-prem Kubernetes
Run entirely in your own data centre with open-source infrastructure.
RabbitMQ messaging
MinIO object storage
Keycloak / LDAP identity
PostgreSQL 16 + Prometheus
Azure cloud
Deploy managed Azure services directly with Bicep.
Azure Function Apps
Service Bus + Blob Storage
Entra ID / MSAL
Application Insights
Azure Marketplace
A transactable managed application, deployed to your own subscription.
One-click deployment wizard
Configuration + networking steps
Publisher support access
Per-bank subscription
Who it's for

Built for lenders who run check-off books.

Banks, microfinance banks and SACCOs in Kenya and the wider East African market that lend to employees of approved employer schemes by check-off — and need to stand behind every facility they originate.

Retiring spreadsheets and hand-offs

A guided, controlled, measurable origination process in place of email threads and a generic loan system.

Affordability and checks that hold

Payslip-accurate affordability, embedded IPRS, CRB, KRA and AML checks, and core-banking booking under maker-checker control.

Proving how each facility was originated

An immutable record that satisfies an internal auditor or a regulator without stitching inboxes together.

FAQ

Frequently asked questions.

How is the Workplace Banking Application different from a generic loan management system?

It is purpose-built for workplace-banking (check-off) lending rather than lending in general. It models employer schemes and their parameters, runs payslip-driven affordability with the rules workplace lending requires — minimum take-home, retirement-age and contract-maturity caps, debt-income and one-third-of-basic tests — and books repayment by check-off, including the IPPD deduction-data flow for government payrolls. It also handles buy-offs and takeovers end to end. The broader, scheme-agnostic loan lifecycle is the domain of the Creodata Loan Origination System.

Can the platform run on our own infrastructure rather than in the cloud?

Yes. It runs on Microsoft Azure, including as a transactable Azure Marketplace managed application, or entirely on-premises on Kubernetes, with feature parity between the two. The on-premises stack uses PostgreSQL, RabbitMQ, MinIO and Keycloak in place of the equivalent Azure services, while the same eleven .NET 9 microservices and Next.js portal run in both.

Does the platform connect to our core banking and compliance systems?

Yes. It integrates with the systems workplace lending relies on — Finacle for core banking (CIF, accounts, loan booking, limit marking and disbursement), IPRS for identity verification, CRB for credit history, KRA for tax-PIN validation, Comply Advantage for AML, sanctions and PEP screening, IPPD for government-payroll deductions, and DMS and RTGS for document workflow and inter-bank transfers. These are reached through an adapter layer with retry and circuit-breaker resilience, and compliance results are cached to reduce repeated calls.

See check-off origination run on your own schemes.

Book a walkthrough of the calculators, the 13-stage workflow, the embedded compliance checks, and maker-checker disbursement.