Website Development Contract Kenya: Checklist for NGOs Before Signing

Hiring a web design and development agency is a significant decision for a Kenyan NGO. Whether the project is funded from your organization’s own budget, through a donor, or as part of a larger development programme, the contract you sign with the agency can have a major impact on the success of the project.

A good website development contract in Kenya should do more than state the project price.

It should clearly establish:

  • What the agency will deliver
  • What your organization is responsible for
  • How much the project will cost
  • When payments will be made
  • When the website will be delivered
  • Who owns the website and source code
  • Who controls the domain and hosting
  • How changes to the project are handled
  • How personal data will be protected
  • What happens after launch
  • What happens if either party wants to terminate the agreement

This is particularly important for NGOs because website projects often involve multiple stakeholders, donor requirements, large amounts of existing content, personal data, procurement procedures and long-term organizational use.

This website development contract checklist for Kenyan NGOs covers 15 things you should review before signing.

Important: This article is intended as practical procurement guidance, not legal advice. For a substantial website development project, have the final agreement reviewed by a qualified Kenyan lawyer, particularly where intellectual property, personal data, donor conditions or significant financial commitments are involved.


Why a Website Development Contract Matters

A website development project can involve considerably more than designing a few pages.

A Kenyan NGO website might include:

  • Programme and project information
  • Staff and partner profiles
  • News and publications
  • Research reports
  • Resource libraries
  • Events
  • Donation functionality
  • Contact and registration forms
  • Newsletter subscriptions
  • Search functionality
  • Maps
  • Third-party integrations
  • CRM integrations
  • Analytics
  • Multilingual content
  • Custom databases or portals

Several people may also be involved in approving the project, including communications staff, programme teams, management, IT staff, procurement officers, directors and donors.

Without a clear contract, each stakeholder can have a different interpretation of what the agency has agreed to deliver.

The contract should therefore turn the RFP, proposal and agreed scope into clear contractual obligations.


Website Development Contract Checklist for Kenyan NGOs

1. Identify the Legal Parties Correctly

The contract should clearly identify both parties.

For the NGO, this could include the organization’s:

  • Registered legal name
  • Physical or registered address
  • Relevant registration details
  • Authorized representative

For the agency, identify:

  • Legal business name
  • Registered address
  • Company or business registration details where applicable
  • Authorized representative

This sounds basic, but it matters.

Your procurement documents may refer to your organization by one name while the contract uses another. Make sure the entity signing the agreement is actually the entity authorized to enter into the contract.

Also confirm who has authority within your organization to sign it.


2. Make the Scope of Work Specific

One of the most important parts of a website development contract is the scope of work.

Avoid vague descriptions such as:

“The agency will design and develop a modern NGO website.”

That statement does not tell you very much.

The contract should establish what the agency is actually being hired to do.

Depending on the project, this could include:

  • Discovery
  • User research
  • UX research
  • Information architecture
  • Wireframes
  • UI design
  • Website development
  • CMS configuration
  • Content migration
  • Search functionality
  • Resource library
  • Forms
  • Events
  • Donations
  • Integrations
  • SEO
  • Accessibility
  • Security testing
  • Analytics
  • Training
  • Hosting
  • Launch

You do not necessarily need to put every technical specification into the main contract. A detailed statement of work or technical specification can be attached to it.

The important thing is that the contractual documents collectively define the project clearly.

If you are still preparing the procurement documents, start with our guide on how to write an RFP for website development services.


3. Clearly Define the Deliverables

The contract should distinguish between the services the agency provides and the actual deliverables your NGO will receive.

For example, deliverables could include:

  • Discovery report
  • User research findings
  • Information architecture
  • Wireframes
  • UI designs
  • Design system
  • Developed website
  • CMS
  • Content migration
  • SEO configuration
  • Analytics setup
  • Testing report
  • Training
  • Documentation
  • Production website

This is particularly important if your procurement process asked the agency to perform research before designing the website.

If the agency’s proposal promised user research, usability testing or content strategy, those activities should not disappear when the contract is prepared.


4. Put the Project Timeline and Milestones in Writing

Your contract should explain when the website is expected to be completed and how the project will progress.

A typical NGO website project might have milestones such as:

  1. Discovery
  2. Research
  3. Information architecture
  4. Wireframes
  5. UI design
  6. Development
  7. Content migration
  8. Testing
  9. Client acceptance
  10. Training
  11. Launch

The contract should establish the expected duration of each stage where appropriate.

It should also explain what happens when the project is delayed.

For example, suppose the agency submits designs for approval and your organization takes three weeks to provide feedback when the agreed approval period was five working days.

The contract can establish how such delays affect the project schedule.

It should also distinguish between:

  • Delays caused by the agency
  • Delays caused by the client
  • Delays caused by third parties
  • Changes requested by the client

For more detail, see our guide on how long an NGO website redesign takes.


5. Understand Exactly What You Are Paying

Do not look only at the headline project price.

Your contract should clearly state:

  • Total project fee
  • Currency
  • Applicable taxes
  • Payment milestones
  • Payment deadlines
  • Invoicing requirements
  • Third-party costs
  • Hosting costs
  • Domain costs
  • Licensing costs
  • Ongoing maintenance costs
  • Charges for additional work

If the agency is VAT-registered and the services are taxable, clarify whether the quoted price is VAT-inclusive or VAT-exclusive.

The general VAT rate in Kenya is currently 16%, according to the Kenya Revenue Authority.

Do not assume that “KES 300,000” automatically tells you what your organization will actually pay.

The contract should make the treatment of taxes explicit.

What about withholding tax?

Depending on the nature of the payment and the parties involved, withholding tax may also need to be considered.

Your finance or procurement team should establish the applicable tax treatment rather than assuming that every website project is handled identically.

KRA notes that withholding tax rates vary depending on the nature of the income and whether the recipient is resident or non-resident.


6. Establish a Process for Changes to the Project

Website projects change.

During development, an NGO might decide that it needs:

  • Another page type
  • A new integration
  • Additional functionality
  • More languages
  • Additional content migration
  • More design revisions
  • A new reporting feature

The contract should explain how these changes are handled.

A sensible change-control process might require:

  1. The NGO submits a change request.
  2. The agency assesses the change.
  3. The agency explains the additional cost, if any.
  4. The agency explains the impact on the timeline.
  5. An authorized representative approves the change.
  6. The additional work begins.

This prevents the classic disagreement:

“We thought that was included.”

The contract should establish what is included in the original scope and what constitutes additional work.


7. Establish Who Owns the Website

This is one of the most important sections of the contract.

Do not simply assume that because your NGO paid for the website, it automatically owns everything associated with it.

The agreement should address ownership of:

  • Website source code
  • Custom functionality
  • UI designs
  • UX deliverables
  • Graphics
  • Written content
  • Website database
  • Custom theme
  • Website configuration
  • Documentation

It should also distinguish between materials created specifically for your organization and third-party materials.

An agency may use:

  • Open-source software
  • Commercial plugins
  • Third-party libraries
  • Stock photography
  • Licensed fonts
  • Existing frameworks
  • Third-party APIs

Your NGO needs to understand which assets it owns and which are subject to third-party licences.

Ask specifically about source code

If the website is custom-developed, confirm whether your organization receives the source code and under what terms.

This becomes particularly important if you ever need to change agencies.

A website should not become effectively unusable because your organization cannot access the underlying code or data.


8. Make Sure Your NGO Controls Its Domain and Accounts

Your NGO should ideally maintain control of its critical digital assets.

This includes:

  • Domain name
  • Hosting
  • CMS administrator accounts
  • Google Analytics
  • Google Search Console
  • Google Tag Manager
  • Email accounts associated with the website
  • Payment accounts
  • CDN accounts
  • Third-party integrations

For a Kenyan organization, this may include a .co.ke, .or.ke or another relevant domain.

The important issue is not the domain extension. It is who controls the account.

Your organization should know:

  • Where the domain is registered
  • Who owns the registrar account
  • Who has administrator access
  • Where the website is hosted
  • Who owns the hosting account
  • How credentials will be transferred

Avoid a situation where the agency registers your organization’s domain using its own account and your NGO has no independent access.


9. Define Content and Content Migration Responsibilities

Content is one of the most common sources of confusion in website projects.

Your contract should establish who is responsible for:

  • Writing content
  • Editing content
  • Approving content
  • Providing images
  • Obtaining image licences
  • Translation
  • Uploading content
  • Content migration
  • Formatting old content
  • Redirecting old URLs

This becomes especially important for NGOs with large resource libraries.

For example, “content migration included” is not sufficiently precise if your website contains thousands of publications.

The contract should specify something more measurable.

For example:

“The agency will migrate up to 500 existing resource records.”

Or:

“The agency will migrate the existing publication database according to the agreed migration specification.”

The actual wording should reflect the project.


10. Include SEO and Website Migration Requirements

If you are replacing an existing NGO website, SEO should be addressed before signing the contract.

A website redesign can unintentionally damage existing search visibility if URLs, content and redirects are handled poorly.

The contract should establish whether the project includes:

  • URL mapping
  • 301 redirects
  • Metadata migration
  • XML sitemap
  • Robots.txt
  • Canonical URLs
  • Google Search Console
  • Analytics
  • Structured data where appropriate
  • Preservation of important existing URLs
  • Technical SEO
  • Page speed optimization

Your SEO requirements should be specific enough to determine what the agency is actually responsible for.


11. Specify Accessibility Requirements

If accessibility is important to your NGO, include it in the contract.

Do not simply write:

“The website will be accessible.”

That can mean very different things to different people.

Instead, establish the accessibility requirements against an appropriate standard, such as the Web Content Accessibility Guidelines (WCAG), where applicable.

The contract might address:

  • Keyboard navigation
  • Alternative text
  • Colour contrast
  • Form accessibility
  • Heading structure
  • Focus states
  • Accessible navigation
  • Screen-reader compatibility
  • Accessible multimedia

If a particular level of WCAG conformance is required, state that clearly.


12. Address Data Protection Under Kenyan Law

This deserves particular attention for Kenyan NGOs.

Your website may collect personal data through:

  • Contact forms
  • Newsletter subscriptions
  • Event registrations
  • Job applications
  • Volunteer applications
  • Donation forms
  • Membership forms
  • Surveys
  • Programme registrations

Kenya’s Data Protection Act, 2019 establishes the framework for regulating the processing of personal data and provides rights and safeguards for data subjects. The Office of the Data Protection Commissioner (ODPC) is responsible for regulating and overseeing data protection in Kenya.

Your website contract should therefore clarify responsibilities for:

  • Collection of personal data
  • Storage
  • Access control
  • Data security
  • Data retention
  • Data deletion
  • Third-party processors
  • Data breaches
  • International transfers where relevant
  • Privacy notices
  • Cookies and analytics
  • Data subject requests

The contract should also establish whether the agency will have access to personal data and, if so, in what capacity.

The ODPC distinguishes between data controllers and data processors, with processors handling personal data on behalf of controllers.

Depending on the circumstances, your NGO and its technology providers may therefore have different responsibilities under Kenya’s data protection framework.

The ODPC also provides registration and compliance guidance for data controllers and processors.

Do not assume the web developer handles compliance for you

A web development agency can implement technical measures, but that does not automatically transfer the NGO’s legal responsibilities to the agency.

Your organization should establish its own data protection responsibilities and make sure the website implementation supports them.

For significant projects, involve your organization’s legal or data protection adviser.


13. Establish Security Responsibilities

Security should be part of the contractual scope rather than an assumption.

Depending on the project, establish responsibilities for:

  • Secure development
  • Administrator access
  • Password management
  • Software updates
  • Backups
  • SSL/TLS
  • Vulnerability testing
  • Security testing
  • Malware monitoring
  • Access logging
  • Incident response
  • Security patches

If penetration testing is required, state whether it is included.

Also establish what happens if a security vulnerability is discovered after launch.

For example:

  • Is fixing a development defect included?
  • How long does the agency provide security-related support?
  • Who is responsible for ongoing plugin or CMS updates?
  • Who manages hosting security?

These questions should be answered before the website goes live.


14. Define Testing, Approval and Acceptance

The contract should establish how your NGO determines that the website is complete.

A typical process might be:

  1. Agency completes a milestone.
  2. Agency submits the work for review.
  3. NGO reviews it against the agreed specification.
  4. NGO identifies qualifying defects or required corrections.
  5. Agency resolves those issues.
  6. NGO approves the milestone.
  7. Project proceeds.

The contract should distinguish between a defect and a new requirement.

For example:

If the agreed search function does not work, that is a defect.

If the NGO later decides that it wants an entirely new filtering system that was never specified, that may be a change request.

This distinction can prevent significant disputes.


15. Define Post-Launch Support, Maintenance and Exit

The relationship with the agency does not necessarily end when the website launches.

Your contract should establish what happens after launch.

Clarify:

  • Warranty period
  • Bug fixes
  • Hosting
  • Software updates
  • Security updates
  • Backups
  • Technical support
  • Support response times
  • Maintenance fees
  • Content updates
  • New functionality
  • Training

Also establish what happens if your NGO decides to terminate the relationship.

Your organization should be able to obtain the assets and access necessary to operate the website independently or transfer it to another provider.

The contract should therefore address:

  • Termination rights
  • Notice periods
  • Outstanding payments
  • Transfer of completed work
  • Source code
  • Database
  • Website files
  • Domain
  • Hosting
  • Credentials
  • Documentation
  • Transition assistance

This is particularly important when choosing a long-term technology partner.


Kenyan NGO Website Contract Checklist

Before signing, your procurement or project team should be able to answer yes to the following.

Parties and scope

  • Are both legal parties correctly identified?
  • Is the scope of work specific?
  • Are deliverables clearly defined?
  • Are exclusions clearly stated?
  • Are the NGO’s responsibilities documented?

Timeline and payment

  • Are milestones defined?
  • Are approval periods defined?
  • Is the payment schedule clear?
  • Is VAT treatment clear?
  • Are third-party costs identified?
  • Is there a process for scope changes?

Ownership and access

  • Is intellectual property ownership clear?
  • Is source-code access clear?
  • Does the NGO control its domain?
  • Does the NGO control its hosting account?
  • Will administrator credentials be handed over?
  • Is the database accessible to the NGO?

Quality and compliance

  • Are SEO requirements documented?
  • Are accessibility requirements documented?
  • Are security requirements documented?
  • Are data protection responsibilities documented?
  • Is content migration clearly scoped?
  • Are testing and acceptance criteria defined?

After launch

  • Is the warranty period clear?
  • Are maintenance responsibilities clear?
  • Are support response times defined?
  • Is hosting responsibility clear?
  • Are termination provisions clear?
  • Is website handover addressed?

Five Things Kenyan NGOs Should Never Leave Ambiguous

If your procurement team has limited time to review the agreement, pay particular attention to these five areas.

1. What exactly are we getting?

The scope and deliverables should be specific enough that both parties understand what “complete” means.

2. What exactly will we pay?

Understand the project fee, taxes, payment schedule, third-party costs and charges for additional work.

3. Who owns the website?

Establish ownership and access to the code, designs, content, database, domain and accounts.

4. What happens when the project changes?

There should be a documented change-control process.

5. What happens if we stop working together?

Your organization should be able to retain control of the assets it has paid for and transfer the website to another provider if necessary.


What About Donor-Funded Website Projects?

For donor-funded projects, the contract may need to address additional requirements.

Before signing, check whether the donor or funding agreement imposes requirements relating to:

  • Procurement
  • Competitive quotations
  • Approval of vendors
  • Intellectual property
  • Branding
  • Reporting
  • Data protection
  • Security
  • Accessibility
  • Documentation
  • Audit trails
  • Records retention

Do not assume that the agency’s standard contract automatically satisfies your donor’s requirements.

Your organization’s procurement rules and the funding agreement may impose additional obligations.

This is another reason to make sure the RFP, proposal and final contract are consistent with one another.


Should a Kenyan NGO Use a Website Development Contract Template?

A template can be useful for identifying issues that should be discussed.

However, a generic website development contract should not automatically be treated as the final agreement.

Every project is different.

A Kenyan NGO website might involve:

  • Donor funding
  • Multiple implementing partners
  • A large resource library
  • Personal data
  • Donation functionality
  • Custom software
  • CRM integration
  • International stakeholders
  • Multilingual content
  • Existing SEO traffic
  • Complex content migration

A generic contract may not address all of these.

Use a template as a starting point, then adapt it to the actual project.

For a significant project, have the final agreement reviewed by a qualified Kenyan legal professional.


Make Sure Your Contract Matches Your RFP

Your website contract should be the culmination of your procurement process, not a completely new description of the project.

Ideally, these documents should tell the same story:

RFP → Agency Proposal → Negotiation → Contract → Statement of Work

For example, if your RFP requested:

  • UX research
  • Accessibility
  • Content migration
  • SEO migration
  • Training

but the final contract simply says:

“Design and develop a website.”

you have introduced unnecessary ambiguity.

The contract should incorporate or clearly reference the detailed specification that defines the agreed deliverables.

If you are at the beginning of the procurement process, read our guide on how to write an RFP for website development services before approaching agencies.


How Much Should the Contract Be Worth?

The contract should reflect the actual complexity of the website rather than simply being based on the number of pages.

A website containing 20 simple pages can be considerably easier to develop than a website containing 100 pages, thousands of publications, complex search functionality and multiple integrations.

Factors that can affect the cost include:

  • UX research
  • Custom UI design
  • Development complexity
  • CMS requirements
  • Content migration
  • Integrations
  • Search functionality
  • Accessibility
  • SEO migration
  • Security testing
  • Hosting
  • Training
  • Maintenance

For planning purposes, see our guide to NGO website development costs in Kenya.


What If You Are Still Choosing Your Agency?

The contract comes after an even more important decision: choosing the right agency.

Before signing anything, evaluate:

  • Relevant NGO experience
  • UX capability
  • Technical expertise
  • Research capability
  • SEO knowledge
  • Accessibility experience
  • Security practices
  • Project management
  • Portfolio
  • References
  • Pricing
  • Ownership arrangements
  • Post-launch support

Our guide on what to look for in a web design agency for your NGO covers these considerations in detail.

You should also prepare a list of questions before evaluating proposals. Our guide to questions to ask a web design agency before you sign can help.


Final Thoughts

A website development contract should not be treated as paperwork that gets signed after the important decisions have already been made.

For a Kenyan NGO, the contract is an important part of the procurement process.

It should establish exactly what is being purchased, what the agency is responsible for, what the NGO must provide, how much the project will cost, who owns the resulting website and how the relationship will work after launch.

It should also address issues that are particularly important when operating in Kenya, including applicable tax considerations and responsibilities relating to personal data under Kenya’s data protection framework.

The best time to resolve ambiguity is before development starts.

Do not wait until the website is halfway through development to discover that your organization and the agency have different interpretations of the scope, ownership, content migration, support or payment terms.

A clear contract protects both sides and gives the project a much better chance of being delivered successfully.


More NGO Website Procurement Guides

If you are planning a new website or website redesign for your organization, these guides cover the major stages of the procurement and decision-making process:

Zedafrica