Law Firm IT

The filing is due at five, and the matter files will not open.

Client files a court deadline depends on. Confidentiality duties that turned into technical controls somewhere along the way. We do the law-firm IT work that generalist shops treat like any other office.

The systems we work in

Clio
MyCase
PracticePanther
Smokeball

The law-firm-specific problems

A firm is not an office with billable hours. It is a confidentiality obligation with a network.

Generalist IT treats a law firm like any ten-person office. But a firm carries duties an office does not: client confidentiality as a technical control, matter isolation, and deadlines that turn a routine lockout into an emergency. We built for that on purpose, with background-checked Utah techs and AI triage that answers at 11 PM.

F-01
The malpractice renewal cyber questionnaire
The one item on this list that arrives with a due date. MFA everywhere? Tested backups? Endpoint protection? Written policies? Carriers ask harder questions every year, and answering them wrong, in either direction, costs real money.
F-02
Locked out of the practice management system on a deadline
Password expired, MFA reset never came through, the one admin is in a deposition. The court does not care. Access problems at a firm are deadline problems, and they need minutes-level response, not a next-day ticket.
F-03
Every employee can open every matter
One shared drive, full-firm access, years of client files. That is how conflict and privilege problems start, and it is the first thing we find at most small firms. Rule 1.6 expects better, and so does opposing counsel.
F-04
Client documents still travel as email attachments
Unencrypted attachments to personal inboxes are the default breach. A client portal only helps if it is configured, MFA-protected, and staff actually use it instead of falling back to email.
F-05
Departed staff who can still get in
The paralegal left in March. Their practice-management login, file share access, and email forwarding are still live. Offboarding at a firm is a confidentiality control, not an HR checkbox.
F-06
Nobody can say how well protected the firm actually is
Not because anyone is careless, but because nobody ever wrote it down. When a client, a carrier, or the bar asks, the answer needs to be a document, not a shrug.

The law-firm on-ramp

Start with an assessment. Finish with the safeguards on paper.

Most small firms carry years of deferred IT decisions. The on-ramp is a ladder: a low-cost baseline assessment first, a deeper gap assessment and remediation roadmap next - and, at the top, the foundation bundle for firms that want the whole backlog cleared and documented. The consultant version of this engagement is typically quoted at $4,000 to $10,000; ours is a fixed-scope project at a fraction of that.

01
Baseline assessment
A low-cost snapshot of your current IT and how well client confidences are protected.
02
Gap assessment
A deeper, scoped review of everything the baseline surfaced.
03
Remediation roadmap
A prioritized plan you can run yourself - or hand to us.
04
Foundation bundle
The done-for-you top rung: we clear the whole backlog.

Not sure where you stand? Start with a baseline assessment.

Legal Foundation

Onboarding project, fixed scope

Top rung · done-for-you

$1,049-$1,349

21 credits · one-time

Range reflects standard vs specialist delivery; your quote fixes the number

Scope a legal foundation

Free scoping call. Fixed quote, target within 3 business days.

What is included

Practice cybersecurity assessment (how well each computer is protected, who has two-step login turned on, and whether your backups actually restore)
Firewall tightened and locked down
Matter access isolation review: ethical walls and how Rule 1.6 is enforced in Clio, MyCase, PracticePanther, or Smokeball
Secure client document exchange setup (a portal with two-step login, replaces email attachments)
Business email security
Written findings and a prioritized list of fixes you keep

Retention schedules and litigation-hold archiving are scoped separately as project work, when you want them.

What comes after the foundation

The monthly plan: firm-shaped, not generic.

Once the foundation lands, the firm moves to a monthly plan sized to attorney and staff count. What the plan actually does for a practice:

Practice management day-to-day
New-hire and departing-staff accounts, workstation rebuilds, MFA resets, document template repair, integration breakages between Clio or MyCase and your email. The unglamorous work that decides whether a Tuesday goes smoothly.
Matter access reviewed on a schedule, not once
Access drifts. A paralegal covers a case, keeps the permission, and two years later can open matters nobody meant to share. We re-run the user-to-matter audit on a schedule and hand you the record of what changed.
Offboarding treated as a confidentiality control
A documented sequence rather than a memory test: practice management login, file share, email and any forwarding rule, mobile access, and the shared passwords nobody wrote down. Signed off in writing, because that is the version that helps you later.
Trust accounting systems kept separate
IOLTA reconciliation runs on a machine that should not be doing anything else. We keep that separation intact, keep the backups verified, and keep the access list short enough that a bar audit is a short conversation.
Carrier questionnaire support, before renewal week
The cyber section of a malpractice renewal asks for MFA coverage, backup testing, endpoint protection and written policies. We keep the evidence current year-round so the form is a lookup instead of a scramble.
Backup verification and quarterly restore drills
A backup nobody has restored is a hope. We pull a representative restore each quarter, document it, and keep the signed record. When a deadline depends on a file, that drill is the reason you get it back.
24/7 AI support, human dispatch in business hours
The AI assistant answers around the clock, so a Sunday-night lockout before a Monday filing gets worked at 11 PM rather than at 8 AM. Human dispatch runs Monday through Friday, 8 AM to 6 PM, and anything logged overnight is queued for the morning.

Why us, not a generalist

A missed filing is not the same class of problem as a slow printer.

Generalist IT prices a law firm like a ten-person office, because on paper it is one. The difference is what a failure costs. A retail shop with a dead workstation loses a morning. A firm locked out of its matter files at 4 PM on a filing deadline is looking at a different kind of conversation with a client, and possibly with the bar.

So the work is shaped around the two things a firm cannot afford to get wrong: access to files when a deadline is running, and a written record that client confidences are actually protected. Everything else is ordinary IT, and we do that too.

Deadline-aware triage, not queue position
A lockout with a filing behind it is not the same ticket as a slow laptop, and it should not wait behind one. Say the deadline when you call and it changes what happens next.
Confidentiality written down, not asserted
Matter isolation, MFA coverage, encrypted client exchange and offboarding, documented in a form you can hand to a client, a carrier or the bar. The framework detail is on the compliance page.
Local Utah techs, not a national queue
We dispatch background-checked Utah technicians rather than routing you to a call center in another time zone. For a firm that sometimes means someone who can be at your office before the courthouse closes.
Month to month, because the alternative is the problem
The three-year agreement is the norm in this market and it is what most firms are actually complaining about. Plans here are month to month and cancel with 30 days notice, so staying is a choice you keep making.

Law firm FAQ

The questions firms ask first

Confidentiality, ethical walls, response times. Specifics a managing partner can act on.

The vendor secures their side: their servers, their datacenter, their application. Everything on your side is still yours: which user can open which matter, whether MFA is actually turned on for every account, the laptop that syncs client files to a kitchen table, the email account that forwards to a personal inbox. Clio being secure does not make your firm secure, the same way a bank vault does not secure the cash sitting in your car.

ABA Model Rule 1.6(c) expects reasonable efforts to prevent unauthorized disclosure of client information, and the duty of technology competence has been part of professional conduct for years. In practice that means specific, documentable controls: MFA on every account that touches client data, matter-level access instead of a wide-open shared drive, encrypted client document exchange instead of plain email attachments, and a written record of all of it. The framework detail lives on our compliance page.

In: a practice cybersecurity assessment, firewall hardening, a matter access isolation review in your practice management system, secure client document exchange setup, and business email security, plus the written findings you keep. Not in: retention schedules and litigation-hold archiving (we scope those as a separate project when you want them) and ongoing month-to-month management (that is the monthly plan, after the foundation lands).

Yes, that is the matter access isolation review. We audit user-to-matter mappings, conflicted-matter isolation, file share permissions, and audit log coverage in Clio, MyCase, PracticePanther, Smokeball, and similar systems, then document what we find so you can show your work. A wall that exists only as an office policy is not a wall.

The AI assistant answers 24/7, and account lockouts and access resets are exactly the kind of thing it resolves in minutes. When a human is needed, dispatch runs Monday through Friday, 8 AM to 6 PM, with response-time targets by area (Salt Lake County: under 90 minutes). Phone is (435) 227-5583.

One scoping call. We will tell you what your firm actually needs.

Free, 30 minutes. Attorney and staff count, your current stack, and whatever the malpractice carrier's questionnaire is asking for this year.

Book a law firm consultation See pricing

Prefer the phone? (435) 227-5583

Built for 5-50 person firms