🇰🇴 Built for Kenya • 2026

One Platform.
Every Institution.
Zero Compromise.

DigiAcademia is a multi-tenant cloud platform with 40+ integrated modules — CBC assessments, M-Pesa fee collection, parent portals, library, boarding, clubs, projects and AI — all on one secure subdomain-isolated architecture.

✓ CBC Aligned✓ M-Pesa Native ✓ Wildcard SSL✓ Multi-Tenant ✓ Per-Module Pricing✓ Mobile App
🔴 Sample Platform Dashboard
Today’s Collections
KES 842,500 +12.4%
M-Pesa Transactions
1,247 +8.1%
Pending Balances
KES 4.2M 3 terms
Form 194%
Form 288%
Form 376%
Form 491%
Today’s Rate
96.3%+1.2%
Present
2,841/ 2,950
SMS Alerts Sent
109to parents
Mon97%
Tue95%
Wed96%
Thu98%
Results Published
Term 1, 2026✓ Done
Mean Grade
C+ (62.4)+3.1 pts
Maths58%
English72%
Sciences65%
Kiswahili81%
SMS This Week
12,408via AT
Delivery Rate
98.7%
Attendance4,200
Fee reminders3,800
Exam results2,900
General1,508
Sample data for illustration. Live data appears after institution login.
11Institutions Live
40+Platform Modules
6Portal Types
3Payment Gateways
CBCCurriculum Aligned
2026Platform Year
Platform Analytics

Data-Driven Institution Management

Every metric visible in real time. Click any chart for 3-level interactive drill-downs.

📈 Monthly Fee Collection (KES M)
Rolling 6 months • Click to drill: channel → class → student
👤 Weekly Attendance Rate (%)
This week vs last week • Click to drill: class → SMS log → config
🎓 Term 1 2026 — Mean Score by Subject
All classes • Click to drill: teacher → stream → TPAD appraisal
⚙ Module Adoption Rate (%)
Platform-wide • Click to drill: by tier → activation guide
Role-Based Access

A Dedicated Portal for Every Stakeholder

Six distinct portals with tailored dashboards. Click any card for a 3-level nested feature breakdown.

👩‍💼
Staff Portal
Principal • Teachers • Admin

Full institution management for principals, HODs, teachers and support staff.

  • Attendance, timetables, exams & CBC strands
  • Fee collection, accounting & reconciliation
  • Library, boarding, events & clubs
  • Staff HR, leave, roster & payroll
15+ sub-modulesFull breakdown →
🎓
Student Portal
Secondary • College • University

Students access results, timetables, library and clubs from their secure portal.

  • Exam results, transcripts & ranking
  • Personal timetable & academic calendar
  • Library self-service & e-resources
  • Club membership & fee statements
8+ featuresFull breakdown →
👪
Parent Portal
All School Types

Parents monitor attendance, CBC reports and fees with real-time SMS alerts.

  • Real-time SMS on absence within 30 min
  • Fee balance & M-Pesa payment history
  • CBC strand assessment reports
  • Event calendar & school circulars
7+ featuresFull breakdown →
🏅
Alumni Portal
Past Students

Alumni access transcripts, network with classmates and support school projects.

  • Request official transcripts
  • Alumni directory & networking
  • Jobs board & career listings
  • Donate to school projects
6+ featuresFull breakdown →
🤝
Partners Portal
Corporate • NGOs

Corporate partners collaborate on sponsorships, events and bursaries transparently.

  • Submit & track partnership proposals
  • Sponsor student bursaries
  • Co-host events & career days
  • View project impact reports
5+ featuresFull breakdown →
🏪
Suppliers Portal
Vendors • Caterers

Approved vendors manage orders, e-shop listings and receive digital payments.

  • List products on the e-shop
  • Receive & fulfil institutional orders
  • Digital invoicing & payment tracking
  • Tender application management
5+ featuresFull breakdown →
Platform Modules

40+ Integrated Modules

Activate only what you need. Pay per module, per student. Click any module for 3-level nested technical details.

📚
CBC Assessments
PP1-Grade 9 strand grading
8-4-4 Exams
Marks, grades, ranking, slips
Attendance
QR, manual, parent SMS
📅
Timetable
Conflict-free auto-scheduling
📄
Report Cards
PDF with CBC radar charts
📆
Academic Calendar
Terms, exams, events, iCal
💰
Fee Management
Invoicing, statements, defaulters
📱
M-Pesa Daraja
STK Push, C2B, auto-ledger
🏭
KCB Buni 522522
Project-specific routing
🔗
PesaLink
Interbank auto-reconciliation
🎓
Bursaries
Sponsor tracking, auto-deductions
📋
Budget & Accounting
Voteheads, reconciliation, audit
📲
SMS Alerts
Bulk + targeted, AT API
💌
Email Notifications
Transactional, SMTP/SendGrid
📌
Notice Board
Targeted, with attachments
📰
Newsletter
Templates, images, tracking
🎭
Clubs & Societies
Patron, slideshow, remarks
💚
Fundraising Projects
M-Pesa donations, voteheads
Sports
Teams, fixtures, results
🎉
Events & Trips
Budget, consent, attendance
🏠
Dormitory Allocation
Rooms, beds, transfers
🍳
Catering & Meals
Meal plans, inventory, diet
💊
Medical / Sick Bay
Health records, dispensary log
👩
Visitor Management
Gate log, escort, SMS alert
📚
Catalogue
ISBN, barcode, DDC, shelf map
🔄
Borrowing & Returns
Checkout, fines, overdue SMS
💻
E-Resources
PDFs, past papers, videos
📍
Reservations
Online queue, 48h auto-expire
🛒
School E-Shop
M-Pesa, orders, delivery
🏪
Supplier Portal
Vendor portal, invoices, payments
📋
Procurement
Calendar, bids, awards
💳
POS / Canteen
Student wallets, M-Pesa top-up
📊
Executive Dashboard
KPIs for leadership
📈
Performance Analytics
Subject, teacher, stream trends
📉
Fee Analytics
Channel breakdown, aging
📄
Custom Reports
Builder, scheduled PDFs, CSV
👤
Staff Profiles
TSC no., quals, documents
🏜
Leave Management
Application, approval, balances
📋
Duty Roster
Gate, coverage, invigilation
🏅
TPAD Appraisal
TPAD-aligned, TSC reporting
🌐
Multi-Tenant
Row-level isolation, subdomains
🔌
REST API
JWT, OpenAPI, webhooks
🤖
AI Chatbot
Claude-powered, all portals
📷
Mobile App
iOS + Android, offline, push
📺
Live TV & Radio
School & national channels
📟
USSD Gateway
Fee checks, alerts, no smartphone
Getting Started

From Sign-Up to Live in 4 Steps

📋
Register
Submit institution details via the onboarding form. We provision your subdomain, wildcard SSL certificate and isolated database within the same business day.
Configure Modules
Select the modules you need from the 40+ catalogue. Activate or deactivate at any time. Only active modules count toward billing.
👤
Import Data
Import existing student, staff and class data via CSV or Excel templates. Fee ledgers, library catalogues and timetables can also be bulk-imported.
🚀
Go Live
Share login credentials with staff. Distribute parent and student portal credentials via SMS blast. Your institution is live on DigiAcademia.
Payment Gateways

Kenya-Native Payment Infrastructure

Three fully integrated Kenyan payment channels. Every transaction auto-posts to the fee or project ledger in real time. Click any card for setup details.

📱
M-Pesa Daraja
STK Push prompts the payer’s phone. C2B Paybill for walk-in payments. Both auto-reconcile to student fee ledgers. Configurable Paybill and Till per institution.
🏭
KCB Buni 522522
KCB Paybill 522522. Each fundraising project gets a unique reference. Payments route to project virtual accounts. Auto-reconciliation with disbursement controls.
🔗
PesaLink
Kenya Bankers Association interbank network. Used by institutions with NIC, Equity, NCBA, DTB and other partner banks. CSV bank-statement auto-reconciliation.
Security & Compliance

Enterprise-Grade Security

🔒
Row-Level Tenant Isolation
Every database query is scoped by tenant_id. Cross-institution data leakage is architecturally impossible, even if URLs are guessed.
🔐
Wildcard SSL / HTTPS
Let’s Encrypt wildcard certificate for *.digiacademia.cloud covers all subdomains. HSTS preload with 1-year max-age. HTTP 301 → HTTPS always.
👁
Audit Logging
Every financial transaction, data change and login is logged with timestamp, user and IP. Immutable audit trail for compliance and dispute resolution.
👥
Granular RBAC
A teacher sees only their classes. A bursar sees finance only. Principals see their institution only. Granular Role-Based Access Control on every endpoint.
🛡
bcrypt Passwords
All passwords are bcrypt-hashed with adaptive cost factor. Plaintext passwords are never stored or logged anywhere in the system.
🔄
Automated Backups
PostgreSQL WAL-based continuous archiving with point-in-time recovery. Daily snapshots retained for 30 days. Off-site storage on separate cloud region.
Common Questions

Frequently Asked Questions

Each institution is provisioned with a dedicated subdomain (e.g. yourschool.digiacademia.cloud). All data is isolated by tenant_id at the database row level. DNS is configured on our end. Wildcard SSL via Let's Encrypt covers all subdomains automatically. New subdomains are covered immediately with no certificate re-issuance.
Yes. DigiAcademia has a full CBC module covering EE/ME/AE/BE strand grading from PP1 through Grade 9 and Senior Secondary. Legacy 8-4-4 grading runs in parallel for schools in transition. Both systems generate parent report cards and class performance summaries.
DigiAcademia integrates with M-Pesa Daraja (STK Push + C2B Paybill), KCB Buni Paybill 522522 and PesaLink interbank transfers. All three auto-reconcile to student fee ledgers or project virtual accounts in real time. Manual bank and cash payments can also be recorded.
Yes. Automated SMS alerts via Africa's Talking are sent when a student is marked absent (within 30 minutes of roll call), when a fee payment is received, when exam results are published and on school events. Bulk SMS and targeted messaging per class or group is also supported.
Absolutely. Row-level security enforced by tenant_id on every single database query means no institution can access another's records. Cross-tenant queries are structurally blocked. Wildcard SSL certificates ensure all subdomain traffic is encrypted end-to-end.
Admins create projects with funding targets and milestones. Each project gets a unique payment reference. Donors pay via M-Pesa, KCB Buni or PesaLink and the donation auto-posts to the project virtual account. Voteheads track Requested vs Allocated vs Received vs Spent with full disbursement controls and audit logging.
DigiAcademia uses a wildcard SSL certificate for *.digiacademia.cloud obtained via Certbot with a DNS-01 challenge. A single Nginx server block handles all subdomains. New institution subdomains are covered automatically with no re-issuance. Click the SSL Setup button above for the exact Certbot and Nginx commands.
Yes. The platform supports both SaaS (multi-tenant, shared cloud) and standalone (single-institution, self-hosted) modes. Standalone mode is activated via STANDALONE_MODE=true in the environment config. All 40+ modules and features are identical in both modes.
DigiAcademia charges per active student, per active module, per term. Primary schools pay a lower per-student rate than universities. Only activated modules count toward billing. Clubs and Projects modules are free for all tiers. Visit the pricing calculator for your institution type.
Yes. DigiAcademia has a React Native mobile app for iOS and Android supporting all six portal types (Staff, Student, Parent, Alumni, Partners, Suppliers). Features include JWT with Keychain storage, deep linking, Google/Apple OAuth, push notifications via FCM and offline caching of timetables and exam results.
Resources & Links

Useful External Resources

Ready to digitise your institution?

Join institutions across Kenya on a platform built specifically for the Kenyan education system.

Get Started Free → View Pricing
.pem; ssl_protocols TLSv1.2 TLSv1.3; ssl_ciphers HIGH:!aNULL:!MD5; ssl_session_cache shared:SSL:10m; ssl_session_timeout 10m; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; add_header X-Frame-Options DENY always; add_header X-Content-Type-Options nosniff always; add_header Referrer-Policy strict-origin-when-cross-origin always; location / { proxy_pass http://127.0.0.1:5000; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; proxy_read_timeout 90; } location /static/ { alias /home/production/kenya/digiacademia/backend/app/static/; expires 30d; add_header Cache-Control "public, immutable"; } } # Enable: # ln -s /etc/nginx/sites-available/digiacademia /etc/nginx/sites-enabled/ # nginx -t && nginx -s reload
🌐 Required DNS Records
# At your DNS provider (Cloudflare, Route53, etc.) # Main domain A record digiacademia.cloud. A YOUR_SERVER_IP # Wildcard — covers ALL institution subdomains *.digiacademia.cloud. A YOUR_SERVER_IP # Secondary domain digiacademia.poschapchap.co.ke. A YOUR_SERVER_IP *.digiacademia.poschapchap.co.ke. A YOUR_SERVER_IP # Canonical redirect handled by Flask middleware, not DNS
The *.digiacademia.cloud wildcard covers all current and future institution subdomains. No DNS change needed when adding a new institution.
Auto-Renewal via Cloudflare DNS Plugin

Wildcard certs require DNS-01 challenge and cannot auto-renew via HTTP-01. Use the Certbot Cloudflare DNS plugin for fully automatic renewal every 90 days:

# 1. Install Cloudflare DNS plugin pip install certbot-dns-cloudflare # 2. Create API token credentials file mkdir -p ~/.secrets cat > ~/.secrets/cloudflare.ini << 'EOF' dns_cloudflare_api_token = YOUR_CLOUDFLARE_API_TOKEN EOF chmod 600 ~/.secrets/cloudflare.ini # 3. First-time cert issuance with DNS plugin sudo certbot certonly --dns-cloudflare --dns-cloudflare-credentials ~/.secrets/cloudflare.ini -d digiacademia.cloud -d "*.digiacademia.cloud" -d digiacademia.poschapchap.co.ke -d "*.digiacademia.poschapchap.co.ke" --agree-tos --email devops@digiacademia.cloud # 4. Set up cron for automatic renewal (runs twice daily) echo "0 0,12 * * * root certbot renew --quiet && nginx -s reload" | sudo tee /etc/cron.d/certbot-renew # 5. Test renewal without actually renewing sudo certbot renew --dry-run
The wildcard *.digiacademia.cloud covers ALL current and future institution subdomains. Adding a new institution requires no certificate action whatsoever.