For solo attorneys and small law firms
Client confidentiality you can show, not just promise.
A 30-task framework written for small firms: confidentiality controls, trust account IT security, vendor due diligence and an incident plan with bar notification triggers, plus 20 firm-ready document templates.
- 14-day free trial
- No credit card
- Cancel anytime
From the Legal Industry checklist
- Adopt a written confidentiality + acceptable use policy
- Verify wire transfer instructions out-of-band
- Restrict trust account access to authorized signers
- Vet cloud providers for matter document storage
- Maintain backup copies of client matter files
Each task comes with a plain-English guide.
01Why it matters
What's already being asked of you.
01
Competence now includes technology
Comment 8 to Model Rule 1.1 asks lawyers to understand the risks of the technology they use. The framework turns that duty into concrete steps.
02
Wire fraud targets closings and settlements
Out-of-band verification and a written transfer approval procedure are tasks in the framework, with templates ready to adopt.
03
Clients and insurers ask about your security
Clients' outside counsel guidelines and malpractice carriers may ask how you protect client data. Answer from records you already keep.
02What's included
Frameworks that fit how you work.
These are the frameworks that matter most for you. Starter includes one of your choice; Pro and above include all of them.
30 tasks
Legal Industry
Client confidentiality, technology competence, communication security, vendor due diligence, trust account IT security and incident response.
30 tasks
Cyber Insurance Readiness
The controls insurers ask about on applications and renewals: MFA, backups, email security, incident response.
40 tasks
Privacy · CCPA / GDPR
For firms that handle personal information subject to state or EU privacy law.
Law firm document templates
- Client Confidentiality and Acceptable Use Policy
- Incident Response Plan with Bar Notification Triggers
- Wire Transfer Verification Procedure
- Trust Account Transfer Approval Procedure
- Matter Sensitivity Classification Policy
- Vendor Confidentiality and Data Protection Agreement
- Client Text Messaging Policy
- Departing Employee Access Removal Procedure
03How it works
Three steps, at your own pace.
1
Answer a few questions
A short questionnaire at signup recommends the frameworks that apply to your business. Add or remove any of them later.
2
Work through the tasks
Each task says what to do and why, with a guide written for people without an IT background. Invite teammates or your IT provider to work through them with you.
3
Keep the evidence
Attach screenshots, documents and notes to each task as you finish it. When a processor, insurer, client or auditor asks, export it.
04Good to know
Questions we hear.
What Secure-Stack doesn't do
Secure-Stack is software, not a law firm or an ethics opinion. The framework reflects the ABA Model Rules; check your own state's rules and bar guidance, which can differ.
- Which ethics rules does the framework follow?
- It is built around ABA Model Rule 1.1 (competence, including Comment 8 on technology) and Model Rule 1.6 (confidentiality of client information). Your state's version of these rules governs.
- How many templates are included?
- Twenty, covering confidentiality, communications, vendors and trust accounts, and incident response. Answer a short company profile once and the templates fill in your firm's details.
Start with the Legal Industry checklist today.
From $50 a month, with a 14-day free trial and no credit card.