Modelling KEBS S-Mark Permits in an ERP: Product-Brand-Site Scope, Expiry Alerts and Label Validation

By Isaac Muthui, CEO, Tamalaki Business Network Ltd. Originally published at factoraerp.com.

If you build or integrate an ERP for a food factory in Kenya, product certification is a data model problem hiding behind a certificate on the wall. The KEBS Standardization Mark (S-Mark) permit has a scope, a validity window and a label obligation, and most systems model none of them. Four design decisions matter:

1. Scope as a composite key. KEBS issues permits per product, brand and production site, and they are not transferable. Model a certification_permit with (permit_type, permit_number) as identity and (product, brand, site) as its scope, then a many-to-many permit_sku table linking every finished SKU that prints that permit number.
2. Validity as a date range with lead-time alerts. An S-Mark permit is valid for two years from issue. KEBS says acquisition can take about eight weeks when the manufacturer is ready. Store issued_on, expires_on and a renewal_due_on you compute with your own lead time, and surface the queue to the QA owner.
3. Label artwork as a validated reference. KEBS requires the S-Mark logo and the permit number on the label. Make permit_number on artwork a foreign key, and validate on approval that the artwork's SKU, brand and site sit inside that permit's scope.
4. Dependencies between permits. For wheat flour, dry milled maize products and edible fats and oils, the mandatory Fortification Mark requires an S-Mark or Diamond Mark first. That is a requires_permit_id relationship, not a note in a spreadsheet.

Everything below is the operational checklist those structures support.

Most food factories treat the KEBS Standardization Mark as a project. You apply, prepare for the inspection, pass, frame the permit and move on. Two years later someone notices the expiry date, or a new brand has been on the shelf for six months using a permit number that was never issued for it.

The S-Mark does not work like that. KEBS issues a permit per product, per brand and per production site. It is valid for two years. During that time KEBS carries out surveillance inspections in the factory and in the market. And the mark on your label is a statement that every batch carrying it complies with the relevant Kenya Standard, not only the batch that was sampled for the application.

It is also a live topic. In a public notice dated 16 October 2026, KEBS said it had revoked the certification permits of manufacturers found using permits issued for ordinary juices and drinks to market khat-infused beverages. On 12 November 2026, The Standard reported that KEBS is pushing for stronger regulation of imported and locally made products as Parliament reviews draft rules. KEBS consulted the public earlier this year on draft Standards (Product Certification) Regulations, 2026, which are intended to replace the 1977 permit regulations.

This KEBS Standardization Mark permit checklist is written for dairies, millers, juice and water bottlers, bakeries, edible oil refiners, snack makers and other Kenyan and East African food and agro processors. It is not a guide to filling in the KIMS application form. KEBS publishes a user manual for that. It is about the operational side: how to know at any moment which permits you hold, what each one covers, when it expires, and whether the batches leaving your gate today could stand up to a surveillance visit.

It does not replace KEBS guidance, your QA consultant or your legal adviser. Fees, categories and procedures below are as KEBS publishes them at the time of writing; confirm the current position with KEBS before you act.

What KEBS and the law actually say

The Standardization Mark scheme. KEBS describes the Standardization Mark as a mandatory product certification scheme for locally manufactured products under section 10 of the Standards Act (Cap. 496). A permit certifies that a particular product conforms to an approved Kenya Standard or specification. Applications are made on the KIMS portal. KEBS officers inspect the production process, draw samples for analysis at KEBS or accredited/designated laboratories, and agree a scheme of supervision and control with the manufacturer. Once all requirements are met, a permit is issued with a unique permit number. The manufacturer must display the S-Mark logo and the permit number on the product label. The permit is valid for two years, and KEBS carries out surveillance in the factory and the market during that time.

Per product, brand and site. KEBS's quality assurance FAQ states that all permits (Standardization Mark, Fortification Mark and Diamond Mark) are issued per product, brand and manufacturing site, and are not transferable to other sites, branches or firms.

Fees and categories. KEBS's published fee schedule (two years, exclusive of VAT) charges an inspection fee per production site (KSh 40,000 for large, KSh 20,000 for medium and KSh 10,000 for small manufacturing enterprises) plus permit fees. Large enterprises pay KSh 15,000 per product, brand and site; medium and small enterprises' permit fees cover up to three products per site, with KSh 10,000 for each additional product. KEBS places alcoholic beverage manufacturers, animal feed millers, fortified maize and wheat millers, milk pasteurisers and bottlers, and containerised drinking water bottlers in the large category. A change request on a permit costs KSh 1,000 once evaluated and granted. KEBS says all its payments are now made through eCitizen.

Fortification Mark. For wheat flour, dry milled maize products and edible fats and oils, KEBS runs a mandatory fortification logo scheme on behalf of the Ministry of Health. The FAQ says a manufacturer must already hold the S-Mark or Diamond Mark before applying, and lists the fee as KSh 20,000 plus VAT per product, brand and site.

Test reports. KEBS accepts test reports from laboratories accredited to ISO/IEC 17025 (for example by KENAS), after evaluating them.

Renewal. The KIMS manufacturer user manual describes renewal from the "Awarded permits" view: open the permit, choose Renew, update the STA 10 details, submit and pay.

The law. Under section 10 of the Standards Act (Cap. 496), no person may apply a standardization mark to a commodity except under a permit issued by KEBS, and only if that commodity complies with the relevant Kenya Standard or approved specification. The Standardization Marks (Permits and Fees) Regulations say permits are not transferable, that the permit-holder must apply the mark to all commodities that comply, and that KEBS may carry out periodic tests and inspections and may suspend or revoke a permit, for example where the mark is used on commodities that do not comply or fees have not been paid.

What is changing. A summary of the draft Standards (Product Certification) Regulations, 2026 by AO Wanga Advocates describes proposals for a public register of certified products, permit-holder obligations to keep production and quality records, cooperate with inspections, provide samples and report production stoppages, and wider KEBS powers to stop sales, order recalls and suspend or cancel permits. These are drafts. Track the final text.

Why this is an operations problem, not a certificate problem

A permit is a promise about every batch. The places where that promise usually breaks are not the inspection day. They are the ordinary decisions in between:

• A new flavour or pack is launched under an existing brand and printed with the existing permit number.
• Production moves a product to a second site for a few weeks to meet demand.
• A contract packer runs your brand on their line.
• The label artwork is redrawn and the permit number is dropped or mistyped.
• The sample retention, lab results and release records that a surveillance officer might ask for exist only in a few notebooks.
• Nobody owns the expiry dates, so renewal starts late.

Each of these is a data question: which product, which brand, which site, which permit, which standard, which batch.

The 12-point KEBS Standardization Mark permit checklist

1. Keep one permit register, owned by one person

List every S-Mark, Fortification Mark and Diamond Mark permit in one register: permit number, product, brand, site, Kenya Standard, issue date, expiry date and status. Name one owner, usually the QA manager, with finance as backup. If the only copy of your permits is the framed certificates in reception, you do not have a register.

2. Map every finished SKU to a permit, or to "no permit needed"

Go through your finished-goods list and link each SKU to the permit that covers it. Where a product is not covered by a mandatory standard, record that decision and its basis. Any SKU with neither a permit nor a recorded decision is a gap. Our item master data checklist explains why that list must be clean first.

3. Treat product, brand and site as the permit's scope

Because permits are issued per product, brand and site and are not transferable, any change to one of the three triggers a question before production, not after: does this need a new permit or a change request? Put that question into your new product and new brand approval steps.

4. Put expiry dates on a calendar with lead time

Permits run for two years. KEBS says acquisition can take about eight weeks from application when the manufacturer is ready. Set reminders well ahead of each expiry, assign the renewal owner, and check the STA 10 details you will need to update in KIMS. Budget the inspection and permit fees in the year they fall due.

5. Control the label: mark and permit number

KEBS requires the S-Mark logo and the permit number on the product label. Make the permit number a controlled field in label artwork approval, checked against the register for that exact product, brand and site. Our label control checklist covers artwork approval and line checks.

6. Keep the standard you are certified against on file

Hold a current copy of each Kenya Standard and code of practice your permits refer to (KEBS sells them through its webstore). Note the edition. When a standard is revised, review your specification, tests and labels against it.

7. Run the tests the standard calls for, at a defined frequency

Write down which parameters you test in-house, which go to an external ISO/IEC 17025 accredited lab, and how often. Keep the reports linked to batch numbers. A permit is easier to defend when you can show results across many batches, not only the application sample. Our calibration checklist covers the instruments behind in-house results.

8. Follow the scheme of supervision and control you signed

The scheme agreed with KEBS sets out your obligations. Keep a copy with the register, list the controls it commits you to, and check them in your internal audits.

9. Be surveillance-ready on any working day

KEBS surveillance can happen in the factory and in the market. Keep batch production records, QA release decisions, test results and retained samples where they can be produced quickly. Our food safety records checklist sets out which records to keep and how.

10. Add the Fortification Mark where it applies

If you mill maize or wheat flour or refine edible fats and oils, the fortification logo is a separate mandatory scheme that requires an S-Mark or Diamond Mark first. Track it in the same register, with premix purchases, dosing records and fortificant test results linked to batches.

11. Connect complaints and failures to the permit

A failed test, a customer complaint about quality, or a market sample that fails should be logged against the product, brand, site and permit, with corrective action and evidence. KEBS expects manufacturers to correct nonconformities and confirm the action taken. See our customer complaint handling checklist.

12. Review the register every quarter and watch the new regulations

Once a quarter, check the register against live SKUs, labels, sites and brands, and close any gaps. Keep an eye on the draft Standards (Product Certification) Regulations, 2026: if they are finalised, update the register for any new fees, forms and record-keeping obligations.

A simple permit register template

If you cannot say in one minute which permit covers the product on the pallet in front of you, a surveillance officer cannot either.

An illustration

This is an illustrative example, not a real case. A juice and water bottler holds S-Mark permits for its mango juice and its bottled water, both made at its main site. Over a year it adds a passion-fruit variant under the same juice brand, launches a second water brand for a supermarket, and moves part of the water production to a newer site to cope with demand. The labels for all three new lines are copied from existing artwork, so each carries an existing permit number.

On paper the business is "certified". In practice, three lines are carrying a permit number issued for a different product, brand or site. Nobody has broken a rule on purpose. The problem is that the permit register, the SKU list and the label artwork were never linked. Checks 2, 3, 5 and 12 would have raised the question before the first bottle was printed.

A minimal schema sketch

CREATE TABLE certification_permit ( id BIGSERIAL PRIMARY KEY, permit_type TEXT NOT NULL CHECK (permit_type IN ('S_MARK','FORTIFICATION','DIAMOND')), permit_number TEXT NOT NULL, product_desc TEXT NOT NULL, brand_id BIGINT NOT NULL REFERENCES brand(id), site_id BIGINT NOT NULL REFERENCES site(id), standard_ref TEXT NOT NULL, -- Kenya Standard number + edition issued_on DATE NOT NULL, expires_on DATE NOT NULL, requires_permit_id BIGINT REFERENCES certification_permit(id), -- e.g. fortification needs S-Mark/D-Mark status TEXT NOT NULL DEFAULT 'ACTIVE', UNIQUE (permit_type, permit_number) ); CREATE TABLE permit_sku ( permit_id BIGINT REFERENCES certification_permit(id), sku_id BIGINT REFERENCES item(id), PRIMARY KEY (permit_id, sku_id) ); -- Gap report: finished SKUs with no permit and no recorded exemption decision SELECT i.code, i.name FROM item i LEFT JOIN permit_sku ps ON ps.sku_id = i.id WHERE i.item_type = 'FINISHED' AND ps.sku_id IS NULL AND i.certification_decision IS NULL; 

The gap query is the one worth scheduling. It catches the new flavour printed with an old permit number before a surveillance officer does. Pair it with a check that every batch released under a permit was produced at the permit's site.

How FactoraERP helps

FactoraERP keeps one item master for purchasing, stores, production, QA and sales, with lot and expiry control on each item. Quality checks, non-conformances and batches sit in the same system, so a test result is recorded against the batch it belongs to and a deviation can be followed from the record to the product. Because production, stock and dispatch are in the same system, tracing a lot backwards and forwards does not mean pulling files from different shelves when a surveillance officer or a renewal asks for evidence. See factoraerp.com.

Free download: eTIMS readiness checklist for factories

Kenyan manufacturers increasingly need their records to tell one consistent story, for KEBS and for KRA. If you want a free eTIMS readiness checklist for factories, sign up for the FactoraERP Insights newsletter at https://isaacmuthui.substack.com. You will get practical operations notes for food and agro manufacturers. No spam; unsubscribe anytime. For background, see our HACCP CCP monitoring checklist and our guide to eTIMS for food and agro manufacturers.

FAQ

What is the KEBS Standardization Mark?

It is a product certification mark issued by KEBS under the Standards Act for products made in Kenya that conform to the relevant Kenya Standard or approved specification. KEBS describes it as mandatory for locally manufactured products covered by the scheme. It is also called the S-Mark or SM.

How long is a KEBS S-Mark permit valid?

Two years from the date of issue, and it is renewable. KEBS carries out surveillance in the factory and the market during that period.

Does one permit cover all my products?

No. KEBS issues permits per product, brand and manufacturing site, and they are not transferable to other sites, branches or firms. For medium and small enterprises, one permit fee covers up to three products per site, with a fee for each additional product.

How much does the S-Mark cost?

KEBS publishes a two-year fee schedule, exclusive of VAT: an inspection fee per production site of KSh 40,000, KSh 20,000 or KSh 10,000 depending on firm category, plus permit fees (KSh 15,000 per product, brand and site for large enterprises). Check KEBS's current schedule before budgeting.

What must appear on the label?

KEBS requires the Standardization Mark logo and the permit number on the product label.

Can KEBS withdraw a permit?

Yes. The 1977 regulations allow KEBS to suspend or revoke a permit, for example where the mark is used on products that do not comply or fees are unpaid. In October 2026 KEBS publicly said it had revoked permits it found being misused.

Do fortified flour and oil need a separate mark?

Yes. KEBS runs a mandatory fortification logo scheme for wheat flour, dry milled maize products and edible fats and oils, and requires an S-Mark or Diamond Mark first.

How can a buyer check a permit?

KEBS lists several ways: its website, the KEBS mobile app, an SMS of SM#permit number to 20023, or the toll-free number 1545.

Isaac Muthui, CEO, Tamalaki Business Network Ltd