Secure Cloud DMS Software — Document Management System for SMEs

In an African SME, public body or bank, documents circulate in dozens of forms: scanned invoices, hand-signed HR contracts, stamped official letters, paper purchase orders, regulatory notices. Each department archives in its own way — a shared folder, a USB drive, a drawer. The result: finding a three-year-old contract or proving that a letter was delivered often feels like a miracle.

A DMS — Document Management System — structurally solves this problem. It centralises all documents in a single, secure, indexed repository that can be queried in seconds, regardless of format or originating department. KiboERP integrates this module natively into its ERP: no third-party connector, no double entry, data automatically linked to your invoices, HR contracts and incoming correspondence.

The 6 pillars of KiboERP's DMS module

1. Secure cloud storage (R2 / S3 compatible)

All uploaded files travel directly from the browser to object storage (Cloudflare R2 or S3-compatible), bypassing Vercel servers — eliminating file size limits and timeouts. Data is encrypted AES-256 at rest and TLS 1.3 in transit. Each tenant has an isolated storage space; no data can leak between organisations. For on-premise deployments, storage is hosted on your own infrastructure.

2. Approval workflows and e-signatures

Define configurable validation circuits by document type, amount or department. A commercial contract goes through the commercial manager, then the legal director, then the CEO. Each step triggers a notification, records the approval or rejection with comment, and timestamps the action. E-signature is built directly into the workflow: the signatory receives a secure link, signs in their browser, and the signed document is automatically archived with its certificate. The audit trail is immutable — no modification can be concealed.

3. Versioning and checkout / checkin

Every time a document is saved, a new numbered version is automatically created. All previous versions are retained and accessible. The checkout / checkin mechanism locks a document during editing: no one else can modify the file while it is checked out, eliminating version conflicts. At checkin, a mandatory version note documents the changes made.

4. Full-text search (with OCR)

The search engine indexes the text content of all documents: native PDFs, Word, Excel, presentations. An OCR layer analyses scanned PDFs and images (JPEG, PNG, TIFF) to extract their text. The search supports boolean operators, filters by document type, date range, author, validation status and custom metadata. Find a five-year-old contract in under three seconds.

5. Granular permissions (RBAC)

Access rights are managed by KiboERP's RBAC engine: each user, role or group can be granted or denied read, write, download, print, delete and external-share rights on each folder or document. Rights inheritance follows the folder tree. An HR officer can access contracts within their scope without ever seeing client invoices or financial documents.

6. Retention schedule

Configure retention rules by document type: invoices are kept for 10 years (OHADA legal requirement), bank statements for 7 years, unsuccessful CVs for 2 years. On expiry, the system proposes permanent archiving, anonymisation or deletion according to your policy. A dedicated dashboard lists documents approaching their deadline. This feature is essential for GDPR compliance and regulatory audits.

Document types, metadata and classification

KiboERP's DMS natively supports common formats: PDF, Word (docx), Excel (xlsx), images (JPEG, PNG, TIFF, WebP), emails (eml, msg), videos (mp4), archives (zip). Maximum file size is 5 GB in cloud mode; unlimited on-premise.

Each document type can be associated with a custom metadata schema: a client contract will have fields for "contract number", "signature date", "amount", "client" (linked to the CRM); a pharmaceutical notice will have "INN", "laboratory", "lot number", "expiry date". These metadata fields are indexed and filterable in search.

Automatic classification can analyse the content of a document at upload (header, keywords, structure) and suggest the appropriate document type and destination folder. An operator confirms or corrects the suggestion before final archiving.

Configurable workflow and e-signature

Validation workflows are fully configurable by document type, amount or department. Common examples:

• Commercial contract: draft → legal review → management approval → e-signature by both parties → archiving.
• Supplier invoice: receipt → accounts check → budget approval (if > 500,000 FCFA) → payment order → archiving.
• HR document: HR creation → employee signature → personal file archiving.
• Official outgoing letter: drafting → department head visa → director signature → dispatch note → mail registry archiving.

Each workflow step produces an immutable audit trail: who approved, when, from which IP address. This history is exportable as PDF for any external audit or legal proceedings.

Mail Registry Module — Digital correspondence bureau

The Mail Registry module is your organisation's digital correspondence bureau. It manages the entire flow of official correspondence — incoming and outgoing — with complete traceability.

Incoming correspondence

Each received letter is scanned (or uploaded directly if already digital), registered with a sequential arrival number, reception date, sender, subject and destination department. It is then routed electronically to the internal recipient, who acknowledges receipt. Real-time tracking shows whether the letter has been consulted, forwarded, processed or archived.

Outgoing correspondence

Outgoing letters are drafted in the interface, submitted through the visa and signature circuit, then registered with an official departure number. A dispatch note is automatically generated for the messenger or postal service. Each outgoing letter is archived with its attachments and validation history.

Tracking and reminders

The mail registry dashboard displays letters pending processing, overdue items and configurable automatic reminders. A monthly correspondence volume report is available for management.

Use cases by sector

Security and compliance

Document security is not optional — it is the foundation of any serious DMS. Here are the mechanisms implemented in KiboERP:

• AES-256 encryption at rest. Each file is individually encrypted; the encryption key is unique to each tenant.
• TLS 1.3 in transit. All communications between the browser, servers and object storage are encrypted.
• Complete tenant isolation. No data can be accessed from another client account, even in the event of a configuration error.
• Immutable audit trail. Every consultation, modification, download or deletion is recorded with timestamp, user and IP address. This history cannot be modified, even by an administrator.
• Daily encrypted backups. Minimum 30-day retention. Restoration available in under 4 hours.
• GDPR compliance. Right to erasure, anonymisation, personal data export, automatic processing register.
• Data sovereignty (on-premise). Full deployment in your data centre or national cloud. No data leaves your infrastructure.

DMS comparison: KiboERP vs Everteam, Open Bee, M-Files, SharePoint

The major DMS solutions were designed for medium to large European or North American companies. Here is a factual comparison on criteria relevant to African organisations.

DMS SaaS vs DMS On-premise

The SaaS vs on-premise choice depends on your organisational profile, regulatory constraints and technical infrastructure.

For a commercial or services SME, SaaS is the optimal solution: immediate deployment, controlled cost, maintenance handled by KiboERP. For a bank supervised by BCEAO or BEAC, a public administration, or a firm handling highly sensitive data, on-premise guarantees that data never leaves your perimeter. KiboERP offers both models with the same interface and the same feature set.

Learn more: contact the on-premise team · view SaaS plans · all KiboERP modules.