Law Firms
Privilege is a promise. The systems have to keep it.
Thursday, 4:40 p.m. A settlement draft goes to opposing counsel, exhibits attached, client copied. Every system that just touched that email is supposed to be sealed. Practice management software, encrypted email, secure client portals, and document management: the IT environment a law firm should have, built around the actual tools your firm uses, not generic "professional services" filler.
Why most law firm IT is wrong.
Most law firms in Anchorage are running on a configuration somebody set up a decade ago and nobody has touched since. Email goes through Outlook on a desktop nobody migrated to the cloud. Documents live on a file server in the closet that nobody backs up. Client communication happens over unencrypted email attachments. The "IT person" is often whoever in the office is least afraid of computers, and that is not a security plan. This is not a security model. It is a slow-motion ABA Model Rule 1.6 problem waiting to happen.
Software and systems we already support.
Practice management software
Clio, MyCase, PracticePanther, Smokeball. Cloud-based and on-premise variants. Integration with email, calendar, and document storage.
Document management
NetDocuments, iManage, SharePoint with proper version control and metadata. The "where is the latest draft" problem, solved.
Microsoft 365 and Google Workspace
Both, with the security hardening law firms specifically need (encrypted email, sensitivity labels, audit logging, retention policies).
Secure client portals
For document exchange that doesn't involve sending privileged information as an unencrypted email attachment.
Encrypted email
Microsoft 365 Message Encryption, Google Workspace S/MIME, or third-party tools like Virtru depending on your environment and clients.
Time and billing systems
TimeSolv, Bill4Time, or whatever your practice management software handles. We make sure they sync, back up, and recover.
Endpoint encryption
BitLocker on Windows, FileVault on Mac. Required by professional responsibility, often missing in practice.
Professional responsibility and data security
"…reasonable efforts to prevent the inadvertent or unauthorized disclosure of, or unauthorized access to, information relating to the representation of a client."
ABA Model Rule 1.6(c)
In 2026, "reasonable efforts" includes MFA, endpoint encryption, secure email, and audit logging. We are not your bar counsel. We do the technical work that makes "reasonable efforts" defensible if it ever has to be argued. For formal compliance documentation and client engagement letters, we'll point you to a partner who specializes in legal-industry IT compliance.
What we do for law firm clients.
Practice management software administration and integration
Microsoft 365 / Google Workspace security hardening to ABA-aligned baselines
Secure client portal setup and document exchange workflows
Encrypted email configuration with policies enforced for matter-related communication
Endpoint encryption and MFA enforcement on every device that accesses client data
Backup verification for practice management databases and document repositories
Daily helpdesk for partners, associates, and staff
Conflicts-of-interest aware audit logging: who accessed what client file, when
Where this lands
Cybersecurity
Huntress EDR, identity hardening, endpoint encryption, phishing simulation, and incident response.
See how →
Microsoft 365
Tenant administration, Exchange, Teams, SharePoint, MFA, Entra ID hardening, and license rightsizing.
See how →
Identity & Access Management
Enforced MFA, single sign-on, conditional access, least-privilege, and same-day offboarding.
See how →
Get a law firm IT health check.
Thirty minutes with Orion about what you run and what has been annoying you. No slide deck, no checklist. A straight answer on what to fix first, whether or not you hire us.