OPSWORQ

Industries · Law firms

Client confidentiality is an IT setting as well as an ethical duty.

Encrypted devices, controlled access, audited sign-ins and email that can’t be spoofed, documented so you can show it.

Confidentiality · Access control · Evidence

A law firm conference room with a long table, a laptop and shelves of bound volumes, one orange cable to a floor box.

What’s different here

A breach at a law firm is a professional matter, not only a technical one.

Client files, privileged email and wire instructions are the targets, and the duty to protect them is yours.

Privilege lives in email

Most client communication is email, so it’s the first thing we secure.

Wire fraud targets closings

A spoofed email with new bank details is the most expensive message a firm can receive.

Access by matter

Who can open which client’s files is set deliberately and reviewed.

Court, home, office

Laptops that leave the building are encrypted and managed wherever they are.

The obligation

Reasonable efforts, and the evidence that you made them.

ABA Model Rule 1.6(c) asks lawyers to “make reasonable efforts to prevent the inadvertent or unauthorized disclosure of, or unauthorized access to, information relating to the representation of a client.” The comments to Rule 1.1 add a duty to keep up with the benefits and risks of relevant technology.

What counts as reasonable is for you and your state bar’s rules to decide. What we provide is the technical side: encryption, multi-factor authentication, controlled and reviewed access, email authentication, tested backups, and a written record of all of it.

We also give every firm a simple rule for wire instructions: a changed bank detail is confirmed by a phone call to a number you already had, never the one in the email.

Source: American Bar Association, Model Rule 1.6, Confidentiality of Information. Your state’s version of the rules governs.

We support your compliance program with the controls and the evidence. We don’t certify compliance, and we’re not your attorney.

The calendar

Confidentiality doesn’t take a season off.

The controls run every day. These are the moments they matter most.

  1. New matter

    Access set

    The right people, and only them, on the client’s files.

  2. Closing

    Wires confirmed

    Bank details confirmed by phone, never by reply.

  3. Staff change

    Access ended

    Within four business hours of someone leaving.

  4. Every quarter

    Access reviewed

    Who can reach what, checked and signed off.

What we set up

Built into the Secured plan, and documented.

Every item below is part of Secured, with the evidence kept for whoever asks.

  • Multi-factor authentication on email, document systems and remote access.
  • Full-disk encryption on every laptop and phone that holds client data.
  • Access reviewed every quarter, with a record of who approved what.
  • Audited sign-ins, with risky sign-ins flagged and reviewed.
  • SPF, DKIM and DMARC enforced, so nobody can send email as your firm.
  • Backups restore-tested monthly, including the document store.
  • Offboarding within four business hours, every account, every time.
  • A monthly report you can show a client or an insurer.

A price example

A 12-person office on Secured: from $2,100 a month.

12 people × $175, the published floor. Month to month, unlimited remote support, and everything on this page included. Your number comes from a 20-minute review and holds after you sign.

Monthly floor, Secured

12 people× $175

$2,100 / month

Month to month. $750 monthly minimum. About 10% less with a twelve-month commitment.

Questions

Straight answers.

Do you work with our practice management software?
Yes. We secure access to it, keep the machines it runs on patched, and work with the vendor when the fix is theirs.
Can clients ask what we do to protect their data?
They can, and the monthly report and evidence pack are written so you can answer them.
Is email encryption enough?
It’s one layer. The large reported losses come from business email compromise, a spoofed or taken-over mailbox, so authentication and multi-factor come first.

Get started

Talk to an engineer, not a salesperson.

1‑855‑OPSWORQ

855‑677‑9677 · Mon–Fri, 8am–5pm ET

If the business has stopped, call. Don’t use the form.

Pick a time (opens in a new tab) for a 20-minute review of what you run, or write to us and a person replies within one business day. Then a written quote with a start date on it.

What’s it about? Select all that apply.

A sentence is plenty.

A person replies within one business day. Nothing is sold, and you’re not added to a mailing list.

Prefer to talk? Pick a time for a 20‑minute review (opens in a new tab) Or call 1‑855‑OPSWORQ.

Call Get your price