PHCF
Primary Healthcare Fund — primary care services delivered at community and primary-level facilities.
SERVICE PORTFOLIO · 2026
SHA Empanelment & E-Contracting
Compliance Support Service
End-to-end support for health facilities in Kenya and beyond seeking empanelment and contracting under the Social Health Authority — from readiness assessment through contracting and data protection compliance.
2026 cycleLive
17 SEP 2026E-Contracting Portal went live
4 FUNDSPHCF · SHIF · ECCIF · POMSF
30 JUN 2029Cycle term — generally three-year agreements
All providers must re-apply; pre-launch entries are archived.
WHY NOW
The SHA contracting window is open.
The current cycle invites eligible healthcare providers to apply through the centralized SHA E-Contracting Portal under SPPP/SHA/002/2026-2027.
SHIF
Social Health Insurance Fund — outpatient and inpatient services under the general social health insurance benefit package.
ECCIF
Emergency, Chronic & Critical Illness Fund — emergency treatment, chronic disease management and critical interventions.
POMSF
Public Officers Medical Scheme Fund — with its own access matrix, tariffs and benefit schedules.
UNDERSTANDING THE PROCESS
Empanelment and contracting are two distinct steps.
01
Empanelment
SHA lists licensed and certified providers submitted by the relevant accreditation bodies responsible for quality assurance. It is a continuous exercise.
02
Contracting
Once the empanelled list is published in the Kenya Gazette, SHA initiates contracting within thirty days. Providers then access the E-Contracting Portal and execute the contract electronically.
Key point: A facility must be both empanelled and contracted before it can formally serve SHA beneficiaries.
REQUIREMENTS
What providers must demonstrate.
The profile reflects SHA’s published position as at September 2026; the final checklist is confirmed within the E-Contracting Portal.
Licensing & registration
Valid facility license, HFR ID and professional registrations for practising staff.
Entity & ownership
Incorporation / Business Name / Trust Deed, county permit and beneficial ownership declaration.
Tax & compliance
Valid KRA Tax Compliance Certificate, SHA KYC report and SHA Compliance Certificate.
Banking
Account in the official facility name, supported by a bank confirmation letter.
Digital readiness
Functional EMR/claims system, connected devices at points of care and a portal administrator.
Integrity undertakings
Anti-fraud, anti-bribery and conflict-of-interest undertaking, plus SHA due diligence.
OUR APPROACH
Seven coordinated phases. One connected compliance exercise.
Medsoft assesses, prepares, lodges, follows up, contracts and builds your data protection layer so your clinical team stays focused on care.
01
Readiness
Map your structure, services, ownership, licenses, branches and current SHA/data-protection posture.
02
Documentation
Prepare, review, organise and update company, facility, licensing, tax, ownership, banking and quality records.
03
Application
Set up the portal account, compile the application and run a final pre-submission quality check.
04
Lodging
Finalise and lodge the submission, upload supporting documents and coordinate OTPs, signatures and authorisations.
05
Follow-Up
Monitor progress, identify SHA queries, prepare responses and maintain a query-resolution tracker.
06
Contracting
Review contracting requirements, coordinate electronic contracting and co-signing, and provide a post-contract checklist.
07
Privacy
Support ODPC compliance, privacy documentation, governance, DPIA screening, security and breach readiness.
ENGAGEMENT OPTIONS
Compliance packages.
Professional fees are confirmed on engagement following the readiness assessment.
Package 1
Application Support
For providers already substantially compliant and needing a clean application.
- Basic readiness & gap assessment
- Documentation checklist & review
- Application preparation & portal setup
- Lodging & submission tracking
- Basic SHA query management
Package 2
Empanelment & Compliance
Adds regulatory remediation and core data protection work.
- Everything in Package 1, enhanced
- Documentation remediation support
- Contract compliance review
- ODPC review & privacy documents
- DPIA screening & ROPA
Package 3
End-to-End Partnership
A complete, ongoing SHA and data protection partnership.
- Everything in Package 2
- Full data protection programme
- Breach framework & staff training
- Post-contract monitoring
- Ongoing advisory support
SELF-ASSESS BEFORE YOU APPLY
Facility readiness checklist.
Mark what you have in place. Your progress is saved only in this browser and is not sent anywhere.
WHY MEDSOFT SYSTEMS
Connected healthcare compliance capabilities.
Regulatory knowledge
Working knowledge of Kenya’s healthcare regulatory environment, including the SHA framework, Health Act 2017 and Digital Health Act 2023.
Data protection expertise
Support for ODPC compliance, health-information data, DPIAs and privacy governance for healthcare providers and platforms.
Technology understanding
Fluency in HMIS, EMR, claims systems, data flows, integrations and information security.
End-to-end execution
A single coordinated team across documentation, application, compliance, data protection and follow-up.
GET IN TOUCH
Let’s get your facility SHA-ready.
Talk to the Medsoft Systems healthcare technology and compliance team.
Important regulatory disclaimer
Medsoft Systems does not guarantee SHA empanelment or contracting — final approval rests exclusively with SHA and, where applicable, other regulatory authorities. Requirements may change during an engagement and timelines depend on SHA review processes. The client remains responsible for the truthfulness, accuracy and authenticity of supplied information and documents. Contract review is regulatory/compliance support and does not replace independent legal advice.