Solutions / Law firms
Client confidences, protected and documented.
Lawyers have a duty to take reasonable care with client information, and clients increasingly ask how you do it. We lock down the systems your files live in and give you the paperwork to show it.
- 1.6(c)
- The ABA model rule that asks for reasonable efforts to protect client information.
- 483
- The ABA opinion saying current clients must be told about a breach that affects them.
- 20min
- Is all we need from you to get started.
- 1page
- A plain-English summary you can hand a client who asks.
How it works
From first call to a policy on file
Most of the work is ours, and none of it requires opening a client file.
Your security plan
Ready for client questionnairesWeek 1
20-minute call
Where client files live: practice software, email, document storage and laptops.
Week 2
Policy written
A short written policy that matches how your firm actually works.
Weeks 3–4
Controls in place
Two-step login, encrypted laptops, safer file sharing and email that can’t be faked.
Every year
Reviewed and refreshed
A quick review, short staff training and updates when your tools change.
Questions from firms
What lawyers ask us first
We’re a small firm. Is this really expected of us?
Yes. The duty of confidentiality doesn’t shrink with headcount, and most states have adopted the ABA’s technology competence comment. What’s reasonable for a three-lawyer office is smaller and simpler, and that’s what we build.
A client sent us a security questionnaire.
We help you answer it with evidence, like screenshots and dates, the same way we handle cyber insurance forms. Then we fix anything it turns up.
Will you need to read client files?
No. We work on the systems around them: logins, computers, email and backups. We never need to open a matter.
We handle real estate closings.
Then fake wiring instructions are your biggest risk. We lock down email, watch for suspicious mailbox rules and set up a call-back rule for any change to wiring details.
Other businesses we look after
- Tax preparers & CPA firmsFTC Safeguards Rule
- Medical & dental practicesHIPAA Security Rule
- Contractors & home servicesWebsite leads and payment fraud
- Manufacturers & distributorsRansomware and supplier requirements
- Retail shopsPCI DSS for card payments
- Restaurants & cafésPCI DSS for card payments
- Consultants & agenciesClient security questionnaires
- Salons, spas & gymsBooking and payment data
- Auto dealers & repair shopsFTC Safeguards Rule for dealers
- Nonprofits, schools & childcareDonor, family and student data
- Real estateWire fraud at closing
- Financial & insurance officesFTC Safeguards Rule and state insurance laws