# Confidentiality is the whole product. Law firms, accounting and tax practices, and financial advisories. We protect privileged communications, simplify decade-spanning document retention, and answer your clients' cybersecurity questionnaires before they ask twice. ## Compliance scope - ABA Formal Opinion 477R - SEC Cybersecurity Rules - FTC Safeguards Rule - IRS Pub 4557 - State Bar Ethics Rules ## Typical engagement 5–250 users · 1–6 offices ## Who we usually meet Managing partner, firm administrator, or COO. Often inherited a 'works fine' IT setup that hasn't kept pace with client questionnaires, hybrid work, or document retention growth. Allergic to surprises in front of clients. Professional services firms — legal, accounting, financial advisory — operate on a substrate of confidentiality. A breach doesn't just cost money; it ends careers, blows up cases, and may itself be a regulatory event. We design every engagement around three realities: privileged information has to stay privileged, document retention obligations span decades and vary by matter type, and your clients' cybersecurity questionnaires are getting more pointed every year. ## The pro services pain points, named. ### Privileged communications, end-to-end. Email containing privileged content has to be encrypted in transit and at rest, recoverable only by intended recipients. SMS and consumer file-sharing apps are not the answer — and your insurance carrier knows it. ### Document retention rules are a labyrinth. Tax records 7 years, real estate documents potentially permanent, client matters 7–10 years per state bar, engagement letters varies — and litigation hold can override all of it. Storage strategy gets complicated fast. ### Senior partners work from everywhere. Court, the airport, a client site, vacation homes. Each environment is a potential exposure point, and 'just VPN in from anywhere' isn't a credible answer in 2026. ### Client cybersecurity questionnaires keep getting harder. Every Fortune 500 client now sends a 30-question security questionnaire. The content overlaps but the formats don't. Every new engagement is fresh paperwork unless your evidence library is already staged. ## How we solve them ### Email encryption + DLP for privileged communications. Outbound encryption gateways with privilege markers, recipient verification, and audit trails. Sensitivity labeling on documents that follows them across the firm and out to opposing counsel. ### Per-matter retention with tiered storage. Active matters on fast local storage; closed matters on Wasabi cold storage with retention policies tied to matter type. Legal hold workflows that override retention. Roughly 60% lower storage cost than flat-hot architecture. ### Conditional access and posture-checked remote work. MFA at every entry point. Posture checks before tunnel up. Step-up authentication for sensitive matter folders. Senior staff get the experience they expect with the audit trail your malpractice carrier wants. ### Pre-staged client questionnaire evidence. We maintain a living evidence library answering the 80% of cybersecurity questions every client asks. New questionnaires get filled by mapping to existing controls in hours, not weeks. ## How we run it ### Retention rules, automated. Per-matter retention policies, automatic tier-down to cold storage at the policy boundary, legal-hold workflows that pause everything. The audit trail prints itself. ```bash $c2 retention review --org=acme-law --period=q2 Scanning matter file repository… ✓Active matters: 312 ✓Closed matters in retention: 1,847 ✓Per-matter retention policy: 100% applied ⚠Legal hold: 14 matters (excluded from auto-purge) ✓Tiering: 312 hot · 1,247 warm · 600 cold Storage cost vs flat-hot: -68% $c2 ediscovery export --matter=24-CV-1892 ✓Export sealed · 12,409 docs · privilege log included ``` ## Services pro services clients ask for first. ### Cybersecurity Stop threats before they cost you. ### Data Recovery & Backups The 3am insurance policy you hope you never use. ### Managed IT Your IT department, on speed dial. ## Pro Services questions, answered. **Do you support our practice management software?** We support whatever you run today — Clio, MyCase, NetDocuments, iManage, Worldox, Lacerte, ProSeries, etc. We're not the application vendor; we're the team that keeps the platform and its supporting infrastructure healthy. **How do you handle attorney-client privilege in cloud systems?** Privileged data is encrypted at rest and in transit, with access scoped to the matter team and audit-logged. Cloud platforms (M365, Wasabi) are configured with the controls a state bar reviewer would expect. **Can you help with our clients' cybersecurity questionnaires?** Yes — we maintain a pre-staged evidence library aligned to the most common client questionnaires. Most engagements turn a multi-week annual exercise into a few hours of mapping. **How do you handle litigation hold and e-discovery requests?** We work with your litigation counsel or e-discovery vendor to scope the data set, freeze deletion, and produce export packages with chain-of-custody documentation. We're not the e-discovery vendor; we're the team that gets them what they need without surprises. **Are you familiar with state bar ethics rules around technology?** Yes. ABA Formal Opinion 477R is the baseline; state-specific overlays vary. We design our standard configurations so the answer to 'is this ethically OK?' is yes by default.