IP protection for software companies in Kenya requires combining several legal tools, since no single mechanism covers every category of asset a founding team needs to protect The challenge is selecting the right combination for the specific assets being protected and implementing them in a commercially practical way, and one of the most consequential mistakes a founding team can make is misunderstanding who actually owns the company’s code by default under the law, since that default position is the opposite of what is commonly assumed.

Copyright: The Foundation of IP Protection for Software Companies in Kenya

Computer programs are protected as literary works under the Copyright Act (Cap 130). Protection arises automatically without registration. It covers the specific expression of the code, not the underlying idea or functionality, which means a competitor can build a product with similar functionality without infringing copyright as long as they have not copied the actual code or its structure. The critical ownership question is who the law treats as the first owner. Section 31 of the Copyright Act, “First ownership of copyright”, sets out a default rule that is more favourable to a commissioning company than is often assumed: where a work is commissioned by a person who is not the author’s employer under a contract of service, or is made in the course of an author’s employment under a contract of service, the copyright is deemed transferred to the person who commissioned the work or to the employer, subject to any agreement between the parties excluding or limiting that transfer. In other words, the statutory default already vests ownership of commissioned and employee-created code in the company, not the individual contractor or employee, contrary to a common assumption that a contractor automatically retains ownership absent a written assignment. This does not mean a written IP assignment clause is unnecessary; it remains essential because it removes any argument about whether a particular engagement actually qualifies as a “commission” under the Act, it covers situations where the statutory default might be disputed on the facts, and it gives the company a clean, demonstrable chain of title that investors and acquirers will expect to see during due diligence, rather than leaving the company to rely on Section 31’s default position if the relationship is ever challenged. A company that has engaged developers in different countries should also check whether the equivalent default rule under each relevant jurisdiction’s copyright law matches Kenya’s position, since not every jurisdiction vests commissioned work in the commissioning party by default in the same way, and a multi-jurisdiction codebase without consistent assignment documentation is a recurring finding in technical due diligence for cross-border acquisitions.

Patents: A Narrower Path for Software

Software companies sometimes assume patent protection is unavailable in Kenya entirely; that is not quite accurate. The Industrial Property Act defines an invention as a solution to a specific problem in the field of technology, and Section 21(3) excludes from patent protection discoveries, scientific theories, and mathematical methods, as well as schemes, rules, or methods for doing business, performing purely mental acts, or playing games. The Act does not contain an explicit, named exclusion for computer programs as such, unlike some other jurisdictions’ patent statutes; rather, software claimed purely as an abstract algorithm or business method is likely to fail under the mathematical-methods or business-methods exclusions, while software that forms part of a genuine technical solution to a technical problem, an embedded control system or a specific technical process, for instance, sits in a comparatively stronger position to be assessed as a patentable invention. A software company considering patent protection for a specific technical innovation should get a patentability assessment against these actual statutory exclusions rather than assume the door is closed, or conversely assume any software invention automatically qualifies, and should weigh the cost and public-disclosure requirement of a patent application against the alternative of protecting the same innovation as a trade secret instead.

Trademarks: Protecting Brand and Product Names

Company names, product names, logos, and distinctive user interface elements can be registered as trademarks at the Kenya Industrial Property Institute (KIPI). For SaaS companies operating across multiple jurisdictions, regional registration through ARIPO’s Banjul Protocol is more efficient than filing separately in each member country, and trademark registration should generally be treated as a priority to complete before public launch, since a competitor or opportunist filing for a confusingly similar mark first can force a costly rebrand or opposition proceeding after launch, when the brand has already accumulated market recognition that is expensive to abandon.

Trade Secrets and Confidentiality

Algorithms, training data, customer lists, and business processes can be protected as trade secrets through employment agreements, contractor agreements, non-disclosure agreements, and physical and technical security measures restricting access to the information. A trade secret loses its protection if it enters the public domain, which means a company’s confidentiality measures need to be genuinely operative, access logs, need-to-know restrictions, exit interviews covering confidentiality obligations, rather than a clause sitting unused in a contract while sensitive information is in practice freely accessible to anyone in the organisation. For a company whose core competitive advantage is a proprietary dataset or training pipeline rather than a single algorithm, trade secret protection combined with strict contractual access controls is often the more practical protection route than copyright or patent, since neither of those regimes protects raw data or a dataset’s compilation in the same direct way a well-documented trade secret programme does.

Open Source Compliance

Software companies that incorporate open source components must comply with the applicable licence terms for each component used. Violating a copyleft licence such as the GPL by incorporating GPL-licensed code into a proprietary product can, depending on how the code is combined and distributed, require the company to release its own proprietary code under the same licence terms, a consequence that can be commercially catastrophic for a company whose product is its core asset. An open source compliance audit, cataloguing every open source component used across the codebase and the licence each one carries, is advisable before any significant licensing deal, acquisition, or funding round, since this is exactly the kind of issue a sophisticated counterparty’s technical due diligence will surface, and discovering it during diligence rather than before is a materially worse negotiating position.

Clay & Associates Advocates advises software companies on copyright ownership and assignment under Section 31 of the Copyright Act, patentability assessments for technical innovations, trademark strategy across Kenya and the wider ARIPO region, trade secret protection programmes, and open source compliance audits. If you are unsure who actually owns your company’s code under the statutory default, or are preparing for a funding round or acquisition, we can help you build a clean IP position before a counterparty’s diligence team finds the gap first, and can run the open source audit alongside the ownership review so both come back clean at the same time.

Protecting the IP in your software business? Contact Clay & Associates Advocates for a technology IP strategy session. Book a Consultation

Related reading: Content Licensing and Rights Management in Kenya | Data Protection for Media and Technology Companies

For tailored legal advice on this matter, speak with our technology and startups legal services team at Clay & Associates Advocates. We advise businesses and individuals across Kenya on Technology and Startups matters from our offices at Nextgen Mall, Nairobi.