Law firms
Client files protected, and proof that they are.
A small firm holds other people's secrets on a handful of laptops and one email account. We make that hard to break into and write down what is in place, so you can show reasonable care if anyone ever asks.
What a small firm is expected to do
Georgia's Rule 1.6 requires lawyers to keep client information confidential. The ABA Model Rules say it directly in Rule 1.6(c), and the ABA comment explains that what is reasonable depends on how sensitive the information is, how likely a disclosure is, and what the safeguards cost. Your obligations are yours to read. Our part is the technology and the record of it.
Nobody expects a three-person firm to run like a bank. Clients and courts expect the basics, done and documented. Separate logins, two-step login on email, encrypted laptops, tested backups, and a staff that knows what a fake court notice looks like.
The problems at an established firm tend to be specific. A fake email asks to change where settlement or trust funds go. A corporate client sends a security questionnaire before renewing. An associate leaves and nobody is sure what they can still reach. The practice software has to come back after a dead server, not just the files. Each of those has a plain fix, written down.
What we put in place
In plain words, and written down so you can show it.
Two-step login on email and the practice software
Email account takeover is a common way law firm incidents start. A code on the phone stops it.
Encrypted laptops and workstations
A laptop stolen from a car becomes a hardware loss, not a client notification.
Backups that are test restored
Matter files and email copied off-site, with a restore we actually run, so a dead drive is a Tuesday and not a crisis.
Separate logins and same day shutoff
Every person has their own account, and a departing associate or assistant is shut off the day they leave.
A call-back rule for wire and trust instructions
Any new or changed payment details are confirmed by calling a number already on file, and staff are trained on it.
A one page record of what is in place
Kept with your malpractice and cyber insurance files, updated when something changes.
How we usually help
Pick one project or let us look after all of it every month.
Who we fit, and who we don't
Honest on purpose, so nobody wastes a call.
We fit
- Solo practitioners and growing firms, with larger firms reviewed before we quote
- Firms on cloud practice software and Microsoft 365
- Attorneys who want the setup documented, not just done
We don't fit
- Firms that need staff on the phone all day
- Anyone looking for legal advice on their own obligations. You know the rules. We handle the technology and the paper trail.
Questions owners ask
Do you sign confidentiality agreements?
Yes. We sign one before touching any system that holds client information.
Can you help with the cyber insurance application from our malpractice carrier?
Yes. That is exactly what the cyber insurance readiness project is. We go through it question by question, fix what is missing, and keep the proof.
We use Clio or a similar practice platform. Do you support it?
We support the computers, logins, email, and network around it, and we turn on two-step login for it. For problems inside the software itself, we get on the phone with the vendor with you.
What about secure client portals and encrypted email?
Microsoft 365 Business Premium includes message encryption, and most practice platforms include a portal. We turn those on and show your staff when to use them.
A corporate client sent us a security questionnaire. Can you help?
Yes. We check each answer against what is really in place, gather the evidence, and help you answer accurately. See security questionnaire help.
We already have an IT person. Do we need you?
Maybe only for the security side. We can work alongside your current IT person with a written split of who does what. See security alongside your IT provider.
How much does this cost?
Microsoft 365 setup and hardening starts at $1,200 for up to 10 people. The monthly care plan is $125 per person a month with a $1,000 minimum. Services like email fraud protection are quoted after a short review. All prices are on the pricing page.
Ask a quick question, get a straight answer
Three fields. You hear back the same business day by text or email, whichever you give us.
Stop being your own IT person.
Tell us what's bugging you. In 15 minutes you'll know what it takes to fix and roughly what it costs.