Polished longsword on dark stone

Our Edge · For Law Offices

Guard client confidences. Show your work.

Privilege and confidentiality are the foundation of your practice. Longsword gives your firm flat-rate, 24/7 security and a documented information security plan we build and keep current, so protecting client information is something you can demonstrate, not just promise.

The Reality

Your duty to protect client information is professional, not just technical.

A duty of reasonable care

ABA Model Rule 1.6(c) calls for reasonable efforts to prevent unauthorized disclosure of client information, and ABA Formal Opinions 477R and 483 address securing client communications and responding to breaches. Your state's rules may add specifics.

Clients are asking

Corporate and institutional clients increasingly send security questionnaires and outside-counsel guidelines. A written plan and real controls make those easier to answer honestly.

Concentrated, sensitive data

Case files, settlement details, financial records, and personal data in one place make firms an attractive target, and a breach can threaten more than money.

This page is informational, not legal or ethics advice. Your state bar and malpractice carrier can confirm what applies to your firm.

The Longsword Approach

What we handle for your firm

A written security plan, built and maintained

Policies covering access, matter data handling, vendors, remote work, and incident response, tailored to your firm and kept current as people and systems change.

24/7 Managed Detection & Response

Our SOC watches your endpoints and network around the clock and responds within minutes, including during filing deadlines and trial prep.

Email defense and secure communication

Intelligent filtering for phishing and impersonation, plus practical guidance on encrypted communication with clients.

Staff training

Phishing simulations and practical training on safe handling of client files and avoiding invoice and payment-change scams.

Backups that restore

2x daily backups of Google or Azure with unlimited retention and rapid restores.

Incident response included

If something happens we show up, contain it, and hand you a findings report and remediation plan, with a documented path for your client-notification and ethics obligations, which you and your counsel decide. No hourly invoice, no retainer.

Documented, Not Dusty

From blank page to a plan you can stand behind.

How security plan management works

  1. 1

    Assess

    A free Security Gap Analysis shows where your firm stands today.

  2. 2

    Build

    We create your plan and tailor it to your practice areas, staff, and systems.

  3. 3

    Formalize

    The plan is reviewed, signed, and acknowledged by attorneys and staff, with a clear record of who agreed to what.

  4. 4

    Maintain

    Scheduled reviews and updates as your firm changes, with training records kept as evidence.

  5. 5

    Respond

    If an incident occurs, your documented response plan is already in place, and we execute it with you.

Template vs. Managed

A security policy template vs. a managed plan

Managed plan with Longsword
Policy Template
Creation
Built with you around your practice areas and how matters actually flow
Generic policy you adapt yourself
Upkeep
Reviewed and updated as attorneys, staff, and software change
Written once, filed, forgotten
Evidence
Signed acknowledgments and training records that support client questionnaires
Hard to show reasonable efforts are being made
Backed by
24/7 monitoring, email defense, and backups that match what the plan says
Nothing technical

FAQ

Questions attorneys ask us

Ready to protect your clients and your practice?

Start with a free Security Gap Analysis. Real conversation, honest findings, no pressure.