WhatsApp CRM for insurance brokers: Rwanda

Zone

East African Community (EAC) · COMESA

Regulator

National Bank of Rwanda (BNR)

Insurance framework

Law No. 030/2021 of 30 June 2021 governing the organisation of insurance business

Data protection

Law No. 058/2021 of 13 October 2021 relating to the protection of personal data and privacy — National Cyber Security Authority (NCSA) — Data Protection and Privacy Office

Currency

Rwandan franc (RWF)

Languages

Kinyarwanda, English, French, Kiswahili

Premium payments

MTN MoMo, Airtel Money, bank transfer, card, bancassurance

Dialling code

+250

Key lines

motor (compulsory third party), medical (above community health insurance), life and last expense, credit life, agriculture (NAIS), property and engineering, microinsurance

Insurance broking in Rwanda

Rwanda is a small but rapidly organising market, supervised by the National Bank of Rwanda (BNR), which licenses insurers, brokers, agents, bancassurance providers and loss adjusters. In 2026 the BNR Governor cited penetration of about 1.9% of GDP, high for the region thanks to community-based health insurance, and a narrow intermediary base: fourteen insurance brokers, two reinsurance brokers and eleven bancassurance providers.

Distribution therefore relies on agents, banks and direct insurers for individuals, and on brokers for companies, fleets, construction risks from Kigali's large projects and group medical above the community scheme. Key lines: motor with compulsory third-party cover, medical, life and last expense, credit life, agriculture supported by the national NAIS programme, property and engineering, and microinsurance.

The Rwanda Insurers Association (ASSAR), founded in 1992, represents the companies; no separate brokers' association was identified. Kinyarwanda, English, French and Kiswahili are official: English dominates regulation and finance, Kinyarwanda the client relationship, and French survives in older legal texts.

Compliance: what a brokerage must respect

Law No. 030/2021 of 30 June 2021 governing the organisation of insurance business devotes a chapter to intermediaries: article 70 distinguishes brokers, agents, bancassurance and loss adjusters; the following articles require a licence from the supervisory authority, prohibit unlicensed operation and set fair-treatment and financial-reporting duties. In practice the BNR licenses intermediaries and publishes the list of licensed brokers. One important rule: neither brokers nor agents may hold premiums on behalf of insurers; premiums are paid directly to the insurer.

Law No. 058/2021 of 13 October 2021 relating to the protection of personal data and privacy is enforced by the National Cyber Security Authority (NCSA) through its Data Protection and Privacy Office. It requires registration of controllers and processors, consent, limits on transfers outside Rwanda, and provides for administrative fines that can reach a percentage of turnover.

For WhatsApp: recorded consent for marketing messages, contract-based service messages, immediate withdrawal, documented hosting and transfers, and conversations archived in a brokerage system. The BNR's market-conduct code for intermediaries completes these requirements; check the version currently in force. Our compliance guides cover the shared principles.

WhatsApp in brokers' daily practice

In Kigali WhatsApp accompanies every step of a broker's service: photos and the yellow card for a motor quote, coordination with the claims handler, employee questions about the medical card, fleet renewal reminders. Exchanges run in Kinyarwanda with individuals, English with companies and insurers, and sometimes French with older clients.

Retail premiums are paid by MTN MoMo or Airtel Money directly to the insurer, since intermediaries may not hold them; companies pay by bank transfer and bancassurance clients through their accounts. The reminder must give the insurer's payment code, the amount in Rwandan francs and ask for the confirmation screenshot, because cover is only effective once the insurer has received payment.

Local traps: confusion between the broker's and the insurer's payment numbers, motor renewals timed with the vehicle inspection, good coverage in town but uneven in the districts, and advisers' personal numbers. In a small market a brokerage's reputation rests on responsiveness: an acknowledgement within minutes, then a complete answer, counts as much as price. Our use cases detail the sequences.

What ORIS changes for a brokerage in Rwanda

A Kigali brokerage uses ORIS to keep its WhatsApp conversations on a shared business number, each thread linked to the client and their policies. Customers & Segments imports motor, medical or fleet due dates as CSV, and a Quick Campaign sends the reminder on a Meta-approved template in Kinyarwanda or English with the insurer's payment code and a reply button; lifecycle triggers prepare reminders as drafts.

AI classifies replies: a client mentioning a bank offer or a sold vehicle appears in Opportunities & Risks with an updated risk score, and the adviser approves the suggested drafts. Consents and opt-outs are kept for the NCSA; CSV export feeds your tool. ORIS receives no premiums and is not linked to MTN MoMo or Airtel Money.

Frequently asked questions

Must a Rwandan broker register with the NCSA?

Law 058/2021 requires controllers and processors to register with the authority. A brokerage holding client data and WhatsApp conversations should file its application and document its processing and transfers.

Can a broker collect a premium by MoMo on a client's behalf?

No. The BNR states that neither brokers nor agents may hold premiums; they are paid directly to the insurer. The WhatsApp reminder must therefore give the insurer's payment code, never the brokerage's.

Do we need Kinyarwanda templates?

For individuals, yes: Meta accepts Kinyarwanda, and an English version serves companies. The language per client is chosen when the campaign is set up.

Can data be hosted outside Rwanda?

Law 058/2021 regulates transfers of personal data out of the country and may require authorisation or safeguards. Document where your CRM is hosted and consult the NCSA before deployment.