Your Security Responsibilities

Even the most advanced software defenses cannot safeguard your practice if an individual user accidentally reveals their password, falls for a fraudulent email, or leaves a computer logged in unattended.

As an advocate, legal assistant, or staff member, you are the first line of defense in maintaining client confidentiality.

---

1. Protect Your Password

Your password is the primary digital key to your law firm's files.

• Use a Unique Password: Do not use the same password you use for your personal email, social media, or banking.
• Make It Long and Memorable: Combine three or four random words (e.g., Nairobi*River*Advocate*2026) rather than short, predictable words.
• Never Share Your Password: Do not give your password to colleagues, pupils, secretarial staff, or family members.
• Never Send Credentials Over Messaging Apps: Never text passwords over WhatsApp, Telegram, SMS, or email. These messaging platforms can be intercepted or read by unauthorized third parties.
• Do Not Write Passwords on Sticky Notes: Never leave written passwords under keyboards, on desk monitors, or in office notebooks.

---

2. Keep Your Account Private (No Shared Logins)

Every practitioner in your firm must have their own individual MtaaLex account.

• Never Share One Account: It is common in busy law chambers for two associates to share a login to "save time." Do not do this.
• Why Individual Accounts Matter:
  • Individual accounts create an accurate, undeniable record of who filed a document, who drafted a note, and who sent an invoice.
  • If two people share one account, it is impossible to determine who performed an action if a mistake or dispute occurs.
  • When an associate departs the firm, their account can be closed immediately without disrupting other colleagues.

---

3. Be Extremely Careful on Shared & Public Computers

Lawyers frequently move between court registries, chambers, and business centers. Working on untrusted computers poses severe security risks.

High-Risk Environments

• Court Registry & Cybercafé Terminals: Public computers often contain spyware, keystroke loggers, or browser caches that record your keystrokes and passwords.
• Shared Reception Desks & Printing Terminals: Reception computers are frequently accessed by visitors, messengers, and outside service providers.

Golden Rules for Shared Computers:

1. Never Save Your Password: When the browser asks "Do you want to save this password?", always click Never / Not Now.
2. Use Private / Incognito Browsing: If you must urgently access MtaaLex from an external computer, open an Incognito or Private Browsing window so cookies and history are wiped upon closing.
3. Always Explicitly Sign Out: Do not just close the browser tab. Click Sign out at the bottom of the navigation sidebar.
4. Clear Browser Cache & Downloads: If you downloaded a draft pleading or client affidavit to print it, delete the downloaded file from the computer's Downloads folder and empty the computer's Recycle Bin before walking away.

---

4. Beware of Phishing Scams

Phishing is a deceptive tactic where criminals send fake emails or messages pretending to be MtaaLex, Google, or a court authority to trick you into revealing your password or payment details.

What Phishing Looks Like (Real-World Examples)

• "URGENT: Your MtaaLex law firm account will be deactivated in 24 hours. Click here to verify your identity."
• "MtaaLex Billing: Your recent payment failed. Log in here to enter your M-Pesa PIN or credit card."
• "e-Filing Court Notice: A new decree has been issued against your client. Click this link to download the file."

Warning Signs to Watch For:

• Urgent Threats & Artificial Panic: Messages demanding immediate action or threatening account suspension.
• Mismatched Web Addresses: The link points to something like mtaalex-portal.com or login-safaricom-support.net instead of https://mtaalexsolutions.co.ke.
• Requests for Your Password:

CRITICAL SECURITY RULE

MtaaLex Support will NEVER ask you for your password. If anyone claiming to be from MtaaLex asks for your password or verification code, it is a fraud attempt. Never disclose it.

---

5. Protect Your Physical Devices

Your laptop, tablet, and smartphone are physical gateways to your legal practice.

• Set a Screen Lock / PIN: Protect your computer with a password, PIN, or biometric lock (fingerprint / Face ID).
• Lock Your Screen When Away: Whenever you stand up from your desk—even for 2 minutes to grab a file—press Windows + L (on Windows) or Cmd + Ctrl + Q (on Mac) to lock your screen.
• Keep Software Updated: Install updates for your operating system (Windows, macOS) and web browser (Chrome, Firefox, Safari) promptly. Updates patch known security vulnerabilities.
• Never Leave Laptops Unattended: Do not leave laptops in courtrooms, vehicles, or coffee shops unattended.

---

6. Uphold Legal Confidentiality Practices

MtaaLex provides a secure digital vault, but it is not a substitute for professional vigilance:

• Double-Check Recipient Emails: Before emailing a client fee note or sharing a case link, verify that you have entered the correct email address.
• Verify Case Context: Ensure you are uploading witness statements into the correct client's matter file to prevent cross-contamination of confidential case files.
• Sanitize Sensitive Personal Data: When sharing draft documents with external consultants or experts, consider redacting sensitive identity numbers or bank accounts if they are not strictly required.

---

7. How to Report Suspicious Activity

If you suspect that your account has been compromised, or if you noticed unauthorized changes:

1. Change Your Password Immediately via the login portal or account settings.
2. Notify Your Managing Partner or Firm Administrator.
3. Contact MtaaLex Support Immediately:
   • Official Email: info@mtaalexsolutions.co.ke
   • Direct Support Helpline: +254 704 020 449
   • Office Location: Nairobi, Kenya