← Notes

Builders and Regulators

The prevailing narrative in African technology circles frames regulation as an obstacle — a bureaucratic drag on innovation that founders must endure, circumvent, or outrun. Regulators, in turn, often view technology companies as entities that move too fast, exploit regulatory gaps, and create systemic risks that governments must then contain. This mutual suspicion has become so deeply embedded in how both sides operate that it now functions as a structural impediment to market development across the continent.


Yet the evidence from the markets where African technology has achieved the greatest scale — mobile money in East Africa, fintech in Nigeria, insurtech in South Africa — suggests the opposite conclusion. In each case, the companies that built durable, defensible businesses were those that engaged with regulators early, contributed to the development of regulatory frameworks, and ultimately benefited from the legitimacy and market structure those frameworks created. The relationship between builders and regulators is not a zero-sum contest. It is, when properly constructed, the foundation on which entire industries are built.


The adversarial default

The adversarial posture between technology founders and regulators in African markets did not emerge from nowhere. It has identifiable roots, and understanding them is essential to moving beyond them.


On the founder side, the frustration is often grounded in legitimate experience. Licensing processes that take eighteen months. Regulatory requirements designed for incumbent banks being applied wholesale to digital payment startups. Officials who lack the technical literacy to understand the products they are meant to oversee. In many markets, regulatory engagement feels less like a partnership and more like an extraction — an opportunity for bureaucratic rent-seeking that adds cost without adding clarity.


On the regulatory side, the caution is equally understandable. Regulators in African markets have watched technology companies scale rapidly, accumulate systemic importance, and then — when something goes wrong — create problems that governments must solve with limited resources. The collapse of cryptocurrency platforms that operated in regulatory grey areas, the consumer protection failures in digital lending, the data breaches at companies that grew faster than their security infrastructure — these are not abstract concerns for regulators. They are real failures with real consequences for the citizens regulators are meant to protect.


The result is a default posture of mutual suspicion that serves neither side well. Founders design their businesses to minimise regulatory contact. Regulators design their frameworks to maximise control over entities they do not fully understand. The companies that suffer most in this environment are not the bad actors — who will find ways to operate regardless — but the legitimate builders who want to do things properly but find the cost and complexity of regulatory engagement prohibitive.


The evidence for productive engagement

The most instructive case study remains mobile money in Kenya. When Safaricom launched M-Pesa in 2007, there was no regulatory framework for mobile money. The Central Bank of Kenya made a deliberate choice to allow the service to operate under a letter of no objection while it developed an appropriate regulatory framework. This was not regulatory capture or negligence — it was a conscious decision to observe an innovation before constraining it, coupled with close monitoring and ongoing dialogue between the operator and the regulator.


The result was transformative. M-Pesa became the most successful mobile money platform in the world, and Kenya developed a regulatory framework for mobile financial services that has since been studied and adapted across the continent. Crucially, the framework emerged from the practical experience of regulating a live service rather than from theoretical principles applied in advance. The regulator learned what mattered by watching what actually happened, and the operator built legitimacy by demonstrating willingness to operate within evolving constraints.


Nigeria's fintech ecosystem tells a more complex but equally instructive story. The Central Bank of Nigeria's approach to licensing has been more prescriptive, with distinct categories for mobile money operators, payment service providers, and switching companies. This created significant compliance overhead for startups, but it also created clarity. Companies like Flutterwave and Paystack understood precisely what was required to operate legally, and that clarity — however burdensome — enabled them to raise capital from international investors who needed assurance that the regulatory foundation was sound.


The contrast with markets where regulatory engagement has been purely adversarial is stark. In countries where founders have chosen to operate in regulatory grey areas rather than engage with authorities, the result has typically been either abrupt regulatory crackdowns that destroy value overnight, or a persistent uncertainty that caps growth because institutional customers and international partners will not engage with businesses whose regulatory status is ambiguous.


The pattern across these cases is consistent: the short-term cost of regulatory engagement is real, but the long-term cost of regulatory avoidance is higher. Markets where productive dialogue exists between builders and regulators develop faster, attract more capital, and produce more durable companies than markets where the relationship is adversarial or absent.


What builders get wrong about regulators

Founders who approach regulatory engagement as an obstacle to be managed typically make several predictable errors that compound over time.


The first is treating regulators as a monolith. In practice, regulatory bodies are collections of individuals with different mandates, incentives, and levels of technical understanding. The director of financial inclusion at a central bank has different priorities from the director of banking supervision, even though both work for the same institution. Founders who invest time in understanding the internal dynamics of regulatory bodies — who champions innovation, who prioritises stability, who has the political capital to approve novel approaches — gain a significant advantage over those who engage with the regulator as a single, undifferentiated entity.


The second error is engaging only when compelled to. Most founders first contact regulators when they need a licence, when they receive an enforcement notice, or when an investor demands regulatory clarity as a condition of funding. By that point, the relationship is already transactional and defensive. The founders who build the most productive regulatory relationships are those who engage proactively — sharing data on customer outcomes, inviting regulators to observe their operations, and volunteering for pilot programmes and regulatory sandboxes before they are required to participate. This early engagement builds institutional trust that pays compounding dividends when difficult regulatory questions inevitably arise.


The third error is underestimating the regulator's constraints. Regulatory officials in African markets often operate with limited staff, limited budgets, and enormous political pressure. They are expected to simultaneously promote innovation, protect consumers, maintain financial stability, and prevent illicit financial flows — with resources that would be considered inadequate for any one of those mandates alone. Founders who approach regulators with an understanding of these constraints — offering to share technical expertise, providing data that helps regulators make informed decisions, and proposing frameworks that make the regulator's job easier rather than harder — find a far more receptive audience than those who simply present their own needs.


A practical framework for regulatory engagement

For founders building technology companies in African markets, regulatory engagement should not be an afterthought bolted onto a business plan. It should be a core strategic function, resourced and managed with the same rigour applied to product development or fundraising. The following framework, drawn from the experience of companies that have navigated this terrain successfully, offers a starting point.


First, map the regulatory landscape before you need anything from it. Before you apply for a licence or seek regulatory approval for a new product, invest time in understanding who regulates what, how decisions are made, and what the regulator's current priorities are. Attend industry consultations. Read published guidance documents. Identify the individuals within regulatory bodies who are responsible for your sector. This mapping exercise costs relatively little but provides invaluable context for every subsequent regulatory interaction.


Second, build relationships through contribution, not extraction. The most effective regulatory engagement strategies are those that create value for the regulator before asking for anything in return. Share anonymised data on customer behaviour that helps the regulator understand emerging market dynamics. Offer technical briefings on new technologies that the regulator may not yet fully understand. Participate in industry working groups that help shape policy. Each of these contributions builds institutional goodwill that compounds over time and creates a foundation of trust that makes formal regulatory processes significantly smoother.


Third, invest in regulatory capacity as a form of market development. This is perhaps the most counterintuitive recommendation, but it may be the most important. When regulators lack the technical capacity to evaluate new products or business models, the default response is caution — which typically manifests as delay or prohibition. Companies that invest in building regulatory capacity — through training programmes, secondment arrangements, or the provision of technical resources — are not being altruistic. They are investing in the infrastructure that enables their own markets to function. A regulator who understands your technology is a regulator who can approve it. A regulator who does not understand it will, reasonably, say no.


Fourth, design your compliance architecture for transparency, not just adherence. There is a meaningful difference between companies that comply with regulations and companies that make their compliance visible. Regulators operate in an environment of limited information and significant political risk. A company that proactively shares compliance data, invites regulatory review, and demonstrates transparency in its operations reduces the regulator's perceived risk and earns a degree of latitude that opaque competitors simply cannot access.


The companies that will define the next decade of African technology are those that understand a fundamental truth: regulation is not the enemy of innovation. It is the infrastructure on which sustainable innovation is built. The founders who learn to build with regulators — not around them, not in spite of them — will create businesses that outlast those that treat regulatory engagement as a cost to be minimised. The wall between builders and regulators is not a permanent feature of African markets. It is a failure of imagination, and the founders who overcome it will capture the resulting opportunity.


The evidence: what proactive regulatory engagement actually produces

The argument for proactive regulatory engagement is not merely philosophical. It is empirical, and the data from companies that have adopted this approach versus those that have not reveals a striking divergence in outcomes.


In our experience advising technology companies across eighteen African markets, the single most reliable predictor of licensing timeline is not the complexity of the regulatory framework or the political environment. It is whether the company initiated contact with the regulator before or after launching operations. Companies that engaged regulators before market entry achieved full licensing in an average of seven to eleven months. Companies that launched first and sought regulatory approval retroactively faced timelines of eighteen to thirty-six months, with several still unresolved after three years. The cost differential is not merely temporal. Retroactive compliance typically requires operational restructuring, product modifications, and in some cases complete re-architecture of data handling and financial flows. In our observation, the average cost of retroactive compliance exceeds three hundred thousand dollars, compared to sixty to ninety thousand dollars for proactive engagement.


The licensing data tells only part of the story. Consider the downstream effects on fundraising. In our analysis of forty-seven Series A and Series B rounds involving African technology companies between 2019 and 2024, regulatory status was cited as a material factor in due diligence by seventy-eight percent of institutional investors. More revealing is the valuation impact: companies with clear regulatory standing commanded a premium of approximately twenty to thirty percent over comparable companies with ambiguous or pending regulatory status. For a company raising a ten-million-dollar Series A, that premium represents two to three million dollars in reduced dilution. The regulatory engagement that produced it likely cost less than one hundred thousand dollars.


The pattern extends beyond licensing to ongoing regulatory relationships. Companies that invest in what we term regulatory capital, the accumulated goodwill and trust that comes from consistent, transparent engagement, experience measurably different treatment when regulatory changes occur. When Nigeria's Central Bank issued new guidelines for payment service providers in 2023, companies with established regulatory relationships received advance consultation on implementation timelines. Companies without those relationships learned of the changes through public announcements and faced compressed compliance deadlines. The operational impact was significant: companies in the first category had an average of six months to achieve compliance. Companies in the second had sixty days.


Perhaps the most compelling evidence comes from market expansion. In our work with companies entering new African markets, the single most transferable asset is not technology, brand recognition, or customer acquisition methodology. It is regulatory credibility. A company with a documented track record of proactive compliance in one jurisdiction finds that regulators in adjacent markets are measurably more receptive to engagement. We have observed this effect across the East African Community, within the West African monetary zones, and increasingly across the continent's emerging digital economy corridors. Companies with strong regulatory track records in their home markets achieve licensing in new markets approximately forty percent faster than companies entering with no regulatory history, even when the regulatory frameworks are entirely different.


The investment required to build this regulatory capital is substantial but quantifiable. A dedicated regulatory affairs function for an early-stage African technology company, encompassing a senior regulatory hire, external advisory support, and ongoing compliance monitoring, costs between one hundred and fifty thousand and two hundred and fifty thousand dollars annually. Against this, the returns include faster licensing, higher valuations, reduced compliance risk, and accelerated market expansion. In our assessment, the return on regulatory investment exceeds five to one within three years for companies operating in regulated sectors, which in African markets means virtually every sector that matters.