Skip to content
FNLY IT

For law firms

IT for law firms that protects client confidentiality

Your duty of confidentiality does not end at the server room. Any IT provider you bring in touches client information, so access, contracts and technology have to fit your ethics obligations. We run law firm IT so that your practice management software, email and e-filing work every day and you can show what you did to protect client data.

The situation

Confidentiality includes how you secure your systems.

ABA Model Rule 1.6(c) requires lawyers to make reasonable efforts to prevent the inadvertent or unauthorized disclosure of, or unauthorized access to, client information. Most states have adopted a version of this rule. When an outside IT provider administers your systems, choosing that provider carefully and limiting what it can see is part of those reasonable efforts.

Technology competence is part of competence.

Comment 8 to ABA Model Rule 1.1 says lawyers should keep up with the benefits and risks of relevant technology. You do not have to become an IT expert. You do need someone who can explain the risks in plain language and set up your systems so you can make informed decisions.

Your practice software holds the firm together.

Matters, deadlines, time entries and billing live in a practice management system such as Clio or PracticePanther, and documents often sit in a document management system such as NetDocuments or iManage. Logins, permissions, integrations with Microsoft 365 and backups of these systems have to fit together. Otherwise one expired password or broken sync can stop the whole firm.

Lawyers work from court, client sites and home.

ABA Formal Opinion 477R says lawyers may generally use the internet to communicate with clients if they make reasonable efforts to protect the information, and that highly sensitive matters can call for stronger measures such as encryption. Remote work is safe when laptops and phones are centrally managed and encrypted and every login requires multi-factor authentication.

  • Written services agreement with confidentiality terms, limited access to client data and logging of administrative access
  • Support for your practice management and document management systems, coordinated with the vendor, including single sign-on and multi-factor authentication where the vendor supports it
  • Permissions by practice group and matter, so ethical walls are enforced by the system and not only by policy
  • Email encryption options for sensitive matters and protection against phishing and wire fraud attempts
  • Device management, disk encryption and remote wipe for laptops and phones used outside the office
  • Working e-filing workstations: browsers, PDF tools, scanners and court portal access ready before a deadline
  • Backups with tested restores, so files and calendars are available after an outage
  • Structured onboarding and offboarding for attorneys, paralegals, law clerks and temporary staff

What we do not do: legal ethics advice. Whether a measure satisfies your state's rules of professional conduct is decided by your firm, your ethics counsel or your state bar's guidance. We implement the technology to match that decision and document it.

FAQ

Frequently asked questions

May an outside IT provider access client files?

Yes, as long as you make reasonable efforts to protect the information. ABA Model Rule 1.6(c) asks lawyers to prevent unauthorized access to client information, and Formal Opinion 477R explains that what is reasonable depends on the sensitivity of the data and the risks. In practice this means a written agreement with confidentiality terms, access limited to what each task requires and a record of administrative access. We provide all three. Your state's version of the rules may differ in detail, so your firm decides what is required.

What counts as reasonable efforts under Rule 1.6(c)?

The ABA does not prescribe specific tools. The comments to Rule 1.6 list factors such as the sensitivity of the information, the likelihood of disclosure without additional safeguards, the cost and difficulty of the safeguards and their effect on your ability to represent clients. For most firms this leads to multi-factor authentication on every account, encrypted devices, current patches, tested backups and a plan for a security incident.

Can we send client documents by regular email?

For routine communication, generally yes. ABA Formal Opinion 477R says lawyers may usually transmit client information over the internet if they have made reasonable efforts to prevent unauthorized access. For highly sensitive matters, or when a client or the law requires it, stronger measures such as encrypted email or a secure client portal may be needed. We set up both options so your attorneys can choose per matter.

Can we use cloud software like Clio, NetDocuments or Microsoft 365?

Yes. Many firms do. The cloud vendor is then also a provider you have to select with care, which includes reviewing its security commitments and data location. We help you gather that information, connect the systems to your user accounts with multi-factor authentication and make sure your data can be exported and restored.

What happens if e-filing does not work right before a deadline?

We start troubleshooting right away, because your deadline does not move. Most problems come from browsers, PDF tools, scanners, expired passwords or an update on the workstation. If a court system itself is down, the court's own rules decide how a filing is handled, and your attorneys make that call. We document what we found so you can show the court what happened.

How do our lawyers work securely from home or from court?

With laptops and phones that we manage centrally and encrypt, and with multi-factor authentication on every login. Conditional access lets client files open only on approved devices. If a laptop is lost, we lock and wipe it remotely.

What does managed IT cost for a law firm?

Our plans cost $99, $149 or $219 per user per month. Most law firms choose Standard at $149, because multi-factor authentication, conditional access and documentation are included. A one-time onboarding fee applies, $2,500 for up to 25 users. Microsoft 365 and other licenses are billed at list price without markup.

Is a small firm too small for you?

No. Ongoing managed IT starts at 5 users. For solo practitioners and smaller firms we take on individual projects, such as securing Microsoft 365 or replacing laptops, and bill them by the hour or at a fixed price agreed in advance.

Law firms

How is your firm set up today?

Tell us in 20 minutes which practice software, email and e-filing systems you use. Afterwards you will know whether and how we can support you.