IT support and security for law firms
For a law firm a breach isn't only a security incident. It's a professional-conduct problem and a privilege problem at the same time, and the notification clock starts before you know what happened. Your Law Society expects you to have done due diligence on the vendor holding your client files. Most providers have never been asked for that file. We keep ours ready.
By the numbers
Years of experience
Enterprise deployments
Senior engineers
Support
Which rules apply to you?
A photo means it applies to you now. A white tile depends on you.
- Applies now
Law Society obligations
Confidentiality and competence duties reach the technology you practise with, and the vendors who touch client information. The firm is expected to have assessed the provider, which means the provider should arrive with the answers.
- Applies now
Solicitor-client privilege
What a third-party administrator can and can't see, and whether you can prove which of them opened what, months later. Access that isn't logged is access you can't account for.
- Applies now
PIPEDA breach notification
A report to the Privacy Commissioner where there's a real risk of significant harm, plus a record of every breach, including the ones you decide aren't reportable.
- Applies conditionally
Quebec Law 25
If you hold files on Quebec clients. Its own thresholds, its own timing, and they don't line up with the federal ones.
If you hold files on Quebec clients.
Which services answer them?
- Security Awareness Training Phishing a legal assistant is cheaper than attacking your firewall, and it works more often.
- Backup and Disaster Recovery Matter files carry retention obligations that outlive the client relationship.
- Managed Security Services (MSSP) Monitoring by people who understand what privilege means.
- Identity and Access Management Who can open which matter, provable after the fact.
- PIPEDA Compliance The notification duty, documented before you need it.
- Quebec Law 25 Compliance Separate thresholds the moment you hold a Quebec client's file.
- Endpoint Management Devices that leave the office with client files on them.
- Virtualization Services Remote access to the files without the files leaving.
Whose kit does this run on?
The platforms we design, build and support. Named because a buyer with an estate already standardised on one of them needs to know before the first call, not after it.
Microsoft, Cisco, Fortinet, VMware, Azure
What do you need from us?
Tell us who you are and what you're working on. A senior engineer reads your message before replying, so the first answer is a real read on scope, risk and timing, within an hour, 24/7. Nothing here is a commitment, and we'll tell you plainly if we're not the right fit.
Your request
- Sector
- Legal
What happens next
- A senior engineer replies within an hour, 24/7, never an SDR.
- We book a 30-minute call to listen, sketch options, and flag risks.
- You get a scoped statement of work within 3 business days.
Call the 24/7 line
+1 514-465-1584