Legal
Legal IT and security — ABA Model Rules aligned.
Attorney-client privilege is a security control as much as a legal one. We run managed IT and cybersecurity (Huntress or Guardz) for solo, small, and mid-size law firms with ABA Model Rules 1.6 (confidentiality) and 1.15 (safekeeping property) explicitly in scope. Document management, identity, backup, and incident response — operated as one engagement. Lincoln firms cluster in Haymarket and downtown.
What we see
What we see in legal.
- 01
Shared logins and email forwarding still happen
Most privilege-jeopardizing operational issues we find aren't sophisticated attacks — they're shared admin logins, auto-forwarding rules to personal email, and stale offboarding. We close those at the identity layer. - 02
Document management that pre-dates the cloud
Network-share-and-pray document storage doesn't meet ABA expectations or partner expectations. We integrate Microsoft 365 / Google Workspace with proper retention and DLP, or coordinate with iManage / NetDocuments where deployed. - 03
Trust account safety + e-discovery preservation
Wire fraud against trust accounts is targeted at law firms specifically. Litigation hold and e-discovery preservation are operational controls, not a paragraph in a policy. We handle both.
Frameworks & regulatory context.
- 01ABA Model Rules 1.6 + 1.15Confidentiality of information and safekeeping property obligations translated into operational security controls — encryption, access management, audit logging, retention.
- 02State bar guidanceState bar associations issue ethics opinions on cloud use, encryption, and incident notification. We align to your state's current guidance.
- 03Huntress Managed ITDRIdentity threat detection for Microsoft 365 and Google Workspace — catches account takeover and OAuth abuse, including wire-fraud precursor patterns specific to law firms.Reference
What we deploy for legal.
- 01Cybersecurity (Huntress)Huntress Managed EDR, ITDR, SIEM, SAT. ITDR is critical for law firm wire-fraud defense.Open
- 02Microsoft 365 ManagementEntra ID hardening, conditional access, Defender posture, SaaS protection backup (vendor-neutral).Open
- 03Google Workspace ManagementCloud Identity 2SV, Drive sharing controls, DLP, SaaS protection backup (vendor-neutral).Open
- 04Backup & DRImage-based BCDR + SaaS protection. Litigation hold + retention policy mapping. Vendor-neutral.Open
- 05vCISOABA-aligned strategy, cyber insurance support, breach notification, partner-ready reporting.Open
- 06Managed ITMonitoring, help desk, network, and backup admin for solo, small, and mid-size law firms — scoped to your firm and billed at a documented monthly rate.Open
Legal FAQ
Do you provide IT security for law firms?+
How do you address ABA Model Rule 1.6 (confidentiality)?+
By translating it into operational controls — MFA on every account, encrypted-at-rest data stores, conditional access policies, audit logging — and documenting the evidence so an ethics inquiry has answers, not guesses.
What about wire fraud targeting trust accounts?+
Huntress Managed ITDR catches the identity precursors (suspicious sign-ins, OAuth consent grants, mailbox rule changes). We pair it with operational controls — verification call-backs, dual approval, segregated identities for trust accounting.
Do you support iManage or NetDocuments?+
We support the operating environment around them — workstations, identity, network, security. Application administration usually stays with iManage/ND or their specialist. We make sure the surrounding environment is sound.
What about cyber insurance renewal questionnaires?+
vCISO engagements answer them with evidence, support broker negotiations, and remediate gaps that carriers require. Most renewals tighten requirements year over year — this isn't optional anymore.
Written for operators by Colton Porter, Founder & CEO of SAINT Technology Services — U.S. Army veteran. Hickman-based; Lincoln first, Omaha second · Legal IT & security.
Call 531-625-2111 or email clientcare@saintsecured.com. Book an assessment at /contact.
Free risk assessment
Run the free law-firm risk assessment — professional-duty and client-data controls.
Start the ~4-minute assessment →Bring SAINT to your legal environment.
Not sure where you stand? Take the free industry-standards risk assessment at /risk-assessment, or book a 30-minute human review scoped to your vertical. Hickman-based; Lincoln and Omaha are service markets, not storefronts. Call 531-625-2111.
30 minutes. NIST-aligned report. No obligation.