Protect confidential matter files with access limited to the right people
Protect matter files, trust instructions, and client email across the office, court, and remote work.
Or email hello@teclara.tech
Security risks
Protect client information throughout each matter.
Opening a matter, issuing payment instructions, working remotely, and managing staff departures each require clear access controls and documented procedures.
Intake
A new matter is opened
Limit folder access to the assigned matter team from the start, then review permissions as responsibilities change.
Closing
Trust funds move
Real estate and corporate closings move money on instructions that often arrive by email, which is what payment-redirection fraud targets. Email controls help reduce fraudulent messages.
Court and home
Work leaves the office
Laptops and phones carry matter documents to court, client meetings, and home. Managed devices stay encrypted, patched, and monitored wherever they are.
Departure
A lawyer or clerk leaves
Accounts, sessions, and device access are removed through a documented process, and mailbox retention follows the firm’s requirements.
Security controls
Confidentiality depends on more than the document system
Confidential matter files can be exposed through compromised accounts, unprotected devices, shared links, or access left active after a departure. Managed Security & Compliance addresses these risks.
Matters
Limit access to the people on the file
Where matter folders live in Microsoft 365 or Google Workspace, access is limited to the assigned team.
Sign-ins
Protect lawyer and administrator accounts
Multi-factor authentication, administrator controls, and sign-in monitoring help prevent unauthorized access using stolen credentials. Suspicious sessions and inbox-rule changes are investigated through the agreed response process.
Email
Reduce impersonation and payment fraud
Email controls filter phishing and fake-instruction attempts. The firm must verify payment and trust instructions through a trusted contact method, separate from the email requesting the change.
Devices
Protect devices that leave the office
The laptops and phones we manage receive managed endpoint protection, encryption, and security updates. The security team reviews alerts, investigates suspicious activity, and coordinates the response.
Offboarding
Remove access promptly
When a lawyer, clerk, or student leaves, we disable accounts, revoke active sessions, and remove access to managed devices through a documented process.
Recovery
Know which records can be restored
We maintain independent backups of Microsoft 365 or Google Workspace data and test restores.
Security documentation
Clients and insurers can ask a firm to show its controls.
We provide records of the security controls we operate to support client and insurance reviews.
- Institutional client
- How is our data stored, who can access it, and how quickly will you tell us about an incident?
- Matter-folder permissions, reports showing MFA and device protection coverage, and the incident response procedure for the agreed systems.
- Cyber insurer, at renewal
- Is MFA enforced on email and remote access? Are backups tested? Is staff training ongoing?
- Coverage reports, the backup scope with the last restore test, and training and phishing simulation records.
- Managing partner
- When someone leaves, which matters can they still open?
- An offboarding record showing when account and device access was removed and active sessions were revoked.
Your responsibilities
The firm remains responsible for professional duties, client instructions, trust procedures, retention decisions, and legal or regulatory notifications. Teclara operates and documents the security controls we manage. Court portals, trust systems, practice-management software, separate document systems, and local servers are included only when specified in the service agreement.
Managed Security & Compliance
Ongoing security for your accounts, devices, and data.
The security controls on this page run on the platform you use, with access controls, reporting, and maintenance schedules adapted to your firm.
On Microsoft 365
- SharePoint and OneDrive folders restricted to the team working on each matter
- MFA, Conditional Access, and administrator controls
- Managed endpoint protection on supported devices
- Sign-in and sharing records retained for review
On Google Workspace
- Shared drives restricted to the team working on each matter
- Gmail phishing and impersonation protection
- External sharing and stale access reviewed
- Google Vault aligned with retention policy where licensed
Configuration updates are part of the service. When our security baseline changes, your environment is updated without a separate project fee.
Frequently asked questions.
What support is available during a trial or other urgent matter?
Under Managed Security & Compliance, the security team reviews alerts around the clock and responds according to the service agreement. Day-to-day user support and administration require Managed IT, which includes Managed Security & Compliance. The service agreement defines contacts, priorities, and responsibilities before an urgent matter arises.
Can you work alongside our current provider or take over?
Yes. Managed Security & Compliance can work alongside your provider. For a handover, we document the current environment, confirm responsibilities, and schedule the transition around the firm’s commitments. If you want to delegate day-to-day IT as well, Managed IT includes Managed Security & Compliance and adds user support, device administration, onboarding, and platform management.
How is access to confidential matter information handled?
Teclara manages the agreed account, device, and cloud security controls. Administrative access is limited to the work required, and activity is logged where the platform supports it. Matter content is not treated as general support material, and separate document or practice-management systems are included only when explicitly scoped.
What documentation do you provide?
Reporting can include sign-in and access records, backup and restore evidence, patching and vulnerability status, alert response records, and written control descriptions. The reports cover the systems and services in your agreement. This documentation supports client, insurance, or professional reviews but does not replace legal advice.
Can you help with a cyber insurance application or renewal?
Yes. We review the insurer’s questions and provide current evidence for the security controls we manage. Requirements vary by insurer and policy, so the work supports the application but does not guarantee approval, coverage, or a claim outcome.
Client feedback
What a client says about working with us.
“Teclara materially improved both our operational responsiveness and our security posture.”
E.C.
Senior Leadership, GTA Consulting Firm
Led by Wadhah Hussain, Teclara's founder
20+ years enterprise IT · Big Four alumnus · Microsoft & Google Cloud specialist
Short on time? Let your favourite AI sum up Teclara.
Review access to confidential client information
In a 30-minute conversation, we discuss matter access, client confidentiality, and your current IT support. We agree on the next step. Technical checks and written findings belong to a separately scoped engagement.