MDW Inc Attorneys← Home

Security & Privacy

This portal is built for law firms handling sensitive FICA and client information. Below is a plain-English summary of the controls we have in place.

Encryption in transit

All traffic uses TLS 1.3. Your data is never sent in plaintext over the network.

Encryption at rest

Documents and database records are stored with AES-256 disk encryption.

Authenticated access

Every page that holds client data requires you to be signed in. Your session expires automatically.

Strict access control

Clients can only see their own intake. Reviewers see only intakes assigned to them.

POPIA-aligned

Personal information is processed for the lawful purpose of FICA verification only, never sold or shared.

Defence in depth

Document uploads use signed, short-lived URLs. Private buckets, row-level access policies in the database.

Platform operator and data handling

MDW Inc Attorneys is the responsible party (data controller) for client information. This portal is built and operated by Madikane Systems, which acts only as the operator (data processor) on MDW Inc Attorneys's instruction.

  • Encryption. TLS 1.3 in transit; AES-256 encryption at rest for documents and database records. Third-party API credentials are stored encrypted, never in plain text.
  • Multi-tenant isolation. Every record carries the firm it belongs to, and row-level security in the database enforces that boundary on every query. One firm can never read another firm's intakes, documents or audit records — including through the application itself.
  • Madikane's data handling. No secondary use of client data, no resale, no marketing use, no training of external models on your documents. Support access is limited to controlled maintenance and is logged.
  • Ownership and deletion. Client data belongs to MDW Inc Attorneys, not to Madikane Systems. Madikane stores documents only to operate this portal for MDW Inc Attorneys and deletes them on MDW Inc Attorneys's instruction, subject to FIC Act retention rules.

Honest disclosure

We do not claim "end-to-end encryption". The application can read your documents in order to assist with FICA review and auto-fill the intake form.

Your rights under POPIA

  • Request a copy of the personal information we hold about you.
  • Request correction or deletion of inaccurate information.
  • Withdraw consent for processing at any time.
  • Lodge a complaint with the Information Regulator of South Africa.