Business Email and Collaboration in Kenya
Your email is your business lifeline. CloudSpinx sets up, migrates and manages Microsoft 365, Google Workspace and Zoho Mail for East African businesses, with the security hardening the default setup leaves off, and migrations that reconcile every mailbox against the source before cutover.
Who we build for
- 14organizations, from ISPs and payment platforms to a national regulator
- 6flagship engagements published in full, with the numbers counted
- 4thof all contributors to the open-source payment switch national systems run on
Everything in Our Email & Collaboration Service
Every engagement covers the full scope: no hidden extras, no upselling.
Microsoft 365
Exchange Online, Teams, SharePoint, OneDrive and the full M365 suite, licensed, configured and managed for your team.
Google Workspace
Gmail, Drive, Docs, Meet and Chat setup with admin console hardening, 2FA enforcement and Google Vault archiving.
Zoho Mail & Suite
Cost-effective business email and productivity for budget-conscious businesses: Zoho Mail, Zoho CRM and Zoho One.
Email Security
SPF, DKIM and DMARC configuration, anti-phishing policies, spam filtering and Microsoft Defender / Google Advanced Protection.
Email Migration
Staged migration from cPanel, Zimbra, on-premises Exchange or any IMAP source, carrying mail, calendars and contacts, with the old platform left receiving for two weeks.
Collaboration Tools
Microsoft Teams, Google Meet, SharePoint and shared Drive, configured for your workflows and rolled out with staff training.
Technologies we use
Email & Collaboration Platform Services
Your choice of email platform shapes how your entire team communicates and collaborates. CloudSpinx handles everything from initial setup and licensing to ongoing management, security hardening and staff onboarding, so your team gets a professional platform that works reliably from day one.
Microsoft 365 Setup & Management
The most widely deployed business productivity suite globally, and the most commonly misconfigured. We deploy and manage Microsoft 365 with proper security policies, not just out-of-the-box defaults.
- Tenant creation, domain verification and DNS record setup (MX, SPF, DKIM, autodiscover)
- License selection and assignment: Business Basic, Standard, Premium or E3/E5 based on your needs
- Exchange Online mailbox provisioning, shared mailboxes, distribution lists and resource calendars
- Microsoft Teams deployment: channels, permissions, meeting policies and telephony integration
- SharePoint and OneDrive configuration, folder structure and permission governance
- Conditional Access policies, MFA enforcement and Microsoft Entra ID integration
- Microsoft Intune MDM for mobile device and laptop management across the organization
Google Workspace Setup & Management
A clean, fast and reliable platform for businesses that prefer Google's ecosystem. We set up and manage Google Workspace with the security controls that the default setup leaves off.
- Domain verification, MX, SPF, DKIM and DMARC DNS record configuration
- User provisioning, Organizational Unit structure and group management
- Gmail, Drive, Docs, Sheets, Slides, Meet and Chat setup and permission policies
- Admin console security hardening: 2-Step Verification enforcement, session controls, third-party app restrictions
- Google Vault for email archiving, eDiscovery and compliance retention policies
- Shared Drive setup with team-based access controls and audit logging
Zoho Mail & Zoho One
For businesses that need professional business email and productivity tools at a lower per-user cost than M365 or Workspace, Zoho is a strong option, particularly when combined with Zoho CRM.
- Zoho Mail setup with custom domain, MX records, SPF and DKIM
- Zoho One suite deployment: Mail, CRM, Projects, Books and Cliq
- Team inboxes, department mailboxes and email aliases
- Zoho CRM integration for sales teams: email-to-CRM logging and pipeline management
- Migration from any existing email platform to Zoho Mail
Email Security & Deliverability
Most Kenyan business email is poorly secured: spoofed sender addresses, no spam filtering beyond basic defaults, and no visibility into phishing attempts. We fix that systematically.
- SPF record configuration to authorize sending servers and prevent spoofing
- DKIM signing for cryptographic proof that emails are authentic and untampered
- DMARC policy setup (monitor → quarantine → reject) with weekly aggregate reports
- Microsoft Defender for Office 365 or Google Advanced Protection anti-phishing policies
- Spam and malware filtering rule tuning: reduce noise without blocking legitimate mail
- Email backup and archiving with configurable retention periods and point-in-time restore
- Phishing simulation campaigns to test and train staff awareness
Email Migration
Migrating email is one of the most risk-prone IT tasks. Done wrong, you lose mail, contacts and calendars. We run every migration against a proven checklist with a tested rollback path.
- Source audit: mailbox sizes, folder structure, shared mailboxes, calendar data and contacts
- Pre-migration DNS TTL reduction to minimize cutover window
- Staged migration for large organizations: batches by department to reduce risk
- Full migration of email, calendar events, contacts and tasks
- Zero-downtime cutover with MX record swap and post-cutover monitoring
- Sources supported: cPanel/Webmail, Zimbra, on-premises Exchange, G Suite legacy, IMAP
- Post-migration validation: sent/received tests, mobile device reconfiguration, signature setup
Built for Kenyan Businesses
Email in the East African business context has specific requirements that generic setup guides overlook.
- KRA e-invoice email delivery - correct SPF/DKIM/DMARC ensures your VAT invoices land in inboxes, not spam folders
- Mobile-first workforce - over 70% of business email in Kenya is read on mobile; we configure Outlook/Gmail mobile with correct sync, signatures and MDM policies
- Multi-domain group companies - many Kenyan businesses operate multiple entities; we manage multi-domain tenants cleanly under one admin console
- Low-bandwidth resilience - offline access, attachment size policies and sync settings tuned for variable connectivity
- Staff turnover - offboarding workflows that preserve email data, revoke access immediately and reassign mailboxes without data loss
- Kenya DPA 2019 compliance - data residency, retention policies and access logging aligned with local data protection requirements
Microsoft 365 vs Google Workspace vs Zoho
The most common question we get. Here's the honest comparison for East African businesses. And if none of the three fit, because the mail has to stay in the country or the per-user bill has stopped adding up at your headcount, the answer is a Zimbra mail server you own outright instead.
- Microsoft 365 - best for businesses with Windows PCs, existing Active Directory, compliance requirements or teams that rely heavily on Word/Excel. Highest per-user cost but deepest feature set.
- Google Workspace - best for remote-first or mobile-first teams, collaborative document editing and businesses that prefer browser-based working. Faster to adopt, lower admin overhead.
- Zoho Mail / Zoho One - best for budget-conscious businesses or those already using Zoho CRM. Lower per-user cost, good enough for most SME needs, limited ecosystem compared to M365/Workspace.
- Our advice - we give you an unbiased recommendation based on your team size, devices, existing tools and budget during the free consultation. We implement all three and have no sales incentive to push any particular platform.
What business email costs, and the line where it changes
The suites publish their per-user prices, so the arithmetic is yours to do. What is worth knowing is that a per-user subscription is a cost that grows with headcount forever, and there is a point where owning the mail platform becomes cheaper than renting seats on it. For most organizations that point sits somewhere north of a hundred mailboxes, and it arrives sooner if a lot of your users need only basic mail rather than the full productivity suite.
What we charge for, separately from the licenses
Licenses are bought in your own tenant, at the vendor price, in your name. We charge for the work: the migration, the DNS and authentication setup, the policy and security configuration, and ongoing administration if you want it. Migration price scales with mailbox count, total data volume, how many platforms you are coming from, and whether shared mailboxes, public folders and calendar delegation need to survive the move. Those last three are where migrations overrun.
License right-sizing usually pays for the review
Almost every tenant we audit is paying for something it does not use: licenses still assigned to people who left, a premium tier bought organization-wide when a third of staff needed it, or two overlapping products doing the same job because different departments bought separately. Mixing tiers deliberately, so frontline staff get a mail-only license and knowledge workers get the full suite, is the single largest saving available and it takes an afternoon.
Getting authentication right, which almost nobody does
SPF, DKIM and DMARC decide whether your invoices reach the inbox and whether a criminal can send mail that appears to come from your domain. The common failure here is subtle: DMARC gets published on a monitoring policy and left there, because moving it to quarantine or reject feels risky. A monitoring policy tells attackers nothing and stops nothing. The work is to enumerate every legitimate sender first, your mail platform, your ERP, the invoicing system, the marketing tool, the payment gateway, get each one aligned, and only then tighten the policy. Done in that order it is uneventful. Done by flipping the policy first, it bounces your own invoices, which is why so many Kenyan domains are still sitting on a policy that protects nobody.
When a hosted suite is the wrong answer
We sell and run all three suites, so it is worth saying where they stop being right.
- When the mail legally cannot leave the country. None of the major suites has a Kenyan region. If a regulator or a contract requires local residency, the honest answer is a mail server you own, hosted here.
- When the per-user bill has outgrown the value. At a few hundred mailboxes, particularly where most users need only mail, self-hosting starts winning on cost even after you account for the engineering to run it.
- When you need one thing, not a suite. If all you want is mail on your domain, you do not need the full productivity bundle, and mixing tiers or choosing a cheaper provider is the right call.
- Not for the reason people usually give. Wanting to self-host because you distrust the cloud is a bad reason on its own. A well-run tenant is more secure than most self-hosted mail servers we inherit, because patching mail infrastructure is relentless and unglamorous work.
What you own
The tenant, the domain and the data. Licenses are purchased under your own account with your billing relationship, never resold through us, so you keep the direct vendor support entitlement and can remove our administrative access whenever you choose. Configuration, DNS records and policy documentation are handed over as we produce them. There is no lock-in mechanism available to us here, which is exactly how it should be.
Tell us what your mail runs on today
Enough for us to recommend a platform and price the move. The questions about shared mailboxes and delegation matter more than they look: that is where migrations overrun.
Ready to discuss Email & Collaboration?
A 30-minute scoping call, free, and it commits you to nothing.
How Every Email & Collaboration Engagement Starts
Audit and choose
Mailbox inventory, data volumes, current platform, shared mailboxes and delegation, and a straight recommendation on which suite fits, or on whether self-hosting fits better.
Prepare
Tenant setup, DNS and authentication staged, every legitimate sender enumerated for DMARC, and a test migration on a sample of real mailboxes.
Migrate and cut over
Staged syncs, per-mailbox reconciliation against the source, MX cutover in a quiet window, and the old platform left live and receiving for two weeks.
Secure and hand over
MFA and Conditional Access, DMARC tightened once senders are aligned, retention and sharing policy, user training, and administration handed to your team or kept by us.