Cash changes hands multiple times between the moment a member contributes and the moment it reaches the bank. Member to manager. Manager to cashbox. Cashbox to bank. Each handoff is a trust gap. SACCO managers told us fraud and trust are their biggest concern. The specific problem: cash handling with no audit trail. The manager handles every shilling. The members trust the manager. The manager has no way to prove that trust is warranted. Circle closes every gap in that chain.
Every action in Circle requires the manager's PIN. Opening a reconciliation session. Closing it. Recording a cash contribution. The system will not write a single entry without the manager confirming their identity first. No action happens anonymously.
Every entry is linked to a specific member and a specific session. There is no batch entry, no lump sum, no ambiguity about whose money went where. The manager records UGX 50,000 against Grace Nalubega in the Tuesday session. That is exactly what the system stores.
The moment the manager records a cash entry on the field app, the system seals it with a digital signature. The signature locks the manager's identity, the member's identity, the amount, the time, and the session together. Any change after that moment is detected automatically and flagged to operations. The manager cannot disable this. It runs every time, on every entry, without exception.
When the manager closes a session, every member in that session receives an SMS confirming their contribution was received and reconciled. The manager receives a summary. This happens automatically and does not delay the session close. Members know their money arrived without needing to call or visit.
The field app and the dashboard both display the total unbanked cash in real time. This is the sum of all cash entries in open sessions that have not yet reached the bank. When that balance exceeds a threshold set by the SACCO, the system sends the manager an SMS prompting a bank deposit. No manual tracking required. The SACCO board can see the same figure.
When the manager deposits cash at the bank, the system requires the deposit amount, bank account reference, deposit slip number, date, and manager identity. Every field is mandatory. The deposit is linked to the session it came from. No deposit goes unrecorded.
Every action from session open to settlement is written to a permanent log. The system can add entries to this log. It cannot edit or delete them. The most important events are also written to a separate storage layer that is retained permanently. Every entry is timestamped and attributed to the person who performed it.
Visible money is safe money. Circle does not ask managers to change how they run their SACCOs. It gives them tools that make every shilling traceable from the moment it enters the system to the moment it settles. The manager's reputation is protected by the same infrastructure that protects the member's balance.