Document Management for Law Firms in Kenya: EDMS Guide

Short answer: A law firm's electronic document management system (EDMS) should file every document against a client and matter, keep every version of every draft, restrict access so only the right people see each matter, apply retention and legal holds automatically, and record who did what to each document. For a Kenyan firm already on Microsoft 365, a SharePoint-based EDMS can do this inside the firm's own tenant, provided the matter structure, permissions and retention are designed deliberately rather than left as shared folders.

This guide is for managing partners, practice managers, heads of IT and records staff at Kenyan law firms and in-house legal departments. It covers what to require from any document management system, then where Creodata fits. It is not legal advice on your professional obligations: confirm those against the Advocates Act, the Law Society of Kenya's guidance and your own advisers.

Why law firms in Kenya outgrow shared drives and email

Most firms start with a shared drive, email attachments and personal folders. It works until:

Two advocates edit different copies of the same agreement and nobody is sure which went to the client.
A matter is closed but its documents are scattered across mailboxes, laptops and a server share.
A client, a court or an auditor asks for the history of a document and the firm cannot show it.
A departing associate still has copies of client files, or a new one sees matters they should not.
Nobody can say which files can be destroyed and which must be kept.

Each of these is a confidentiality, professional or commercial risk. An EDMS addresses them by making the document system, not individual habit, enforce the rules.

What should document management for law firms in Kenya do?

Need	What good looks like	Why it matters for a law firm
Matter-centric filing	Every document belongs to a client and matter, with consistent metadata (client, matter number, practice area, responsible advocate, document type)	Documents are found by matter, not by who saved them
Version control	Every draft kept and recoverable, with who changed what and when	Negotiated drafts, court filings and opinions can be reconstructed
Access control	Role-based permissions per matter, practice area or client	Client confidentiality; staff see only what they should
Ethical walls	The ability to exclude named people from a matter and show that the exclusion held	Conflicts managed and evidenced
Retention and legal hold	Retention schedules applied by document category; holds that stop deletion during disputes	Files kept as long as required and no longer
Audit trail	Every view, edit, approval and deletion recorded with actor and timestamp	Evidence for clients, insurers, regulators and internal review
Search	Search by content and metadata across matters, within permissions	Precedents and past advice found quickly
Workflow	Routing for review, approval and sign-off	Partner review of opinions and outgoing documents is recorded

Matter-centric filing: the foundation

The single most useful design decision is to organise documents by client and matter, with metadata, instead of deep folder trees. Agree early:

Matter numbering and where the authoritative matter list comes from (often the practice-management or accounts system).
Document types such as pleadings, correspondence, agreements, opinions, court orders, KYC and engagement letters, each with its own metadata and retention.
What happens when a matter opens and closes: who creates the workspace, who is given access, and what changes on closure.

Consistent metadata is what lets you search, report and apply retention later. Folders alone cannot do that reliably.

Version control and document history

Legal documents go through many drafts and many hands. The system should keep every version, show who created each one, and let you restore an earlier version without overwriting the history. For documents that need sign-off, such as opinions or final agreements, an approval workflow records who reviewed and approved, and when. That record is often as valuable as the document itself if a matter is later disputed.

Access control and ethical walls

Client confidentiality is the core duty behind document security in a law firm. In practice that means:

Role-based access by matter, client or practice area, rather than firm-wide shares.
Restricted matters for sensitive work, visible only to the named team.
Ethical walls where a conflict requires that certain people cannot see a matter, enforced through permissions and evidenced through the audit trail.
Joiners, movers and leavers handled through your directory, so access follows the person's current role.

When you evaluate any system, ask how a wall is set up, who can change it, and how you would show later that nobody behind the wall opened the matter.

Retention, legal holds and the Data Protection Act, 2019

Law firms hold large amounts of personal data about clients, counterparties and witnesses. The Data Protection Act, 2019 requires personal data to be kept no longer than necessary for the purpose it was collected for, and to be protected by appropriate security measures. At the same time, professional, tax and limitation considerations mean many files must be kept for years.

An EDMS helps by:

Applying retention schedules by document category instead of relying on individuals to delete files.
Placing legal holds on matters subject to litigation, investigation or a complaint, so nothing is deleted while the hold is in place.
Recording what was disposed of, when and under which rule.

Your retention periods are a legal and policy decision. Set them with your advisers; the system's job is to apply them consistently.

Client money, disbursements and the documents behind them

Client account rules under the Advocates Act and the Advocates (Accounts) Rules put strict requirements on how firms handle and record client money. Disbursements and client-chargeable costs also need approval and supporting documents. Keeping the invoice, the approval and the payment reference together makes these much easier to evidence. Creodata's expense management system handles this side, with supplier invoice, petty cash and cashbook payment requests routed through configurable approval chains and every attachment stored in SharePoint Online. It is a payment-approval tool, not a client-account ledger, so confirm your client-account obligations with your accountants.

Questions to ask an EDMS vendor for a law firm

Show a new matter being opened: workspace, metadata and permissions.
Show two advocates working on one agreement, and restore version 2 of 5.
Set up an ethical wall and show how you would prove later that it held.
Apply a retention rule to a closed matter and a legal hold to a disputed one.
Search across matters for a clause, as a user who can see only some of them.
Show how existing files are migrated with their metadata intact.
Explain where the data is stored and who at the vendor can access it.

Where Creodata fits

Creodata's EDMS solutions are built on SharePoint Online in the firm's own Microsoft 365 tenant. We configure a central, searchable repository with workflow automation for review, approval and sign-off, version control with every prior version recoverable, granular role-based access, retention schedules and legal holds applied automatically by category, metadata and search, and a tamper-evident audit trail that logs every action with actor and timestamp.

Our approach has four steps: we audit where documents live today and the obligations they carry, design libraries, content types, metadata and retention around how your teams work, configure SharePoint, automate workflows and migrate content with metadata intact, then train users and tune retention and permissions as your obligations change. Matter structures and ethical walls are designed as part of that model using SharePoint permissions, so it is worth agreeing them in the design phase.

What we are not: a practice-management, time-recording or billing system, and not a conflict-checking tool. If you need those, keep your existing system or choose a specialist product, and use the EDMS as the governed home for the documents. For disbursement and payment approvals, see our expense management system and the payment approval workflow. To discuss your matter structure, contact us or book a demo.

Frequently asked questions

What is an EDMS for a law firm?

An electronic document management system is a governed store for a firm's documents: filed by client and matter, versioned, access-controlled, retained according to policy and fully audited. It replaces shared drives and email attachments as the authoritative home for matter files.

Can SharePoint be used as a legal document management system in Kenya?

Yes, if it is configured for it. Out of the box SharePoint is a general platform; a legal EDMS on SharePoint needs a matter-centric structure, metadata, permissions, retention and workflows designed around how the firm works.

How do ethical walls work in a document management system?

The people who must be excluded from a matter are denied access to its documents through permissions, and the audit trail shows who did access the matter's documents, so you can show the wall held. Ask any vendor to demonstrate both the restriction and the evidence.

How does the Data Protection Act, 2019 affect law firm document management?

The Act requires personal data to be secured and kept only as long as necessary. For a law firm that means access control, an audit trail and retention schedules applied consistently. Confirm your retention periods and registration obligations with your advisers and the ODPC's guidance.

How long should a law firm in Kenya keep client files?

It depends on the type of matter, limitation periods, tax rules and professional guidance. Set retention periods by document category with your advisers, then let the EDMS apply them and hold files under dispute.

Can we migrate existing matter files into a new EDMS?

Yes. A migration should map existing folders and files to clients, matters and document types, and bring their metadata across. Plan it with the matter model, not after it.

EDMS for Law Firms in Kenya: Matter Files, Retention and Audit on SharePoint