IT Support and Security for Law Firms

Managed IT that protects client confidences and holds up when a client, an insurer, or a bar association asks how you do it.

The Duties Behind Your Security Program

Ethics rules are written for lawyers, not IT teams. Here is how the common ones translate into technical work.

RequirementWhat it asksHow we support it
ABA Model Rule 1.1, cmt. [8]CompetenceKeep abreast of the benefits and risks associated with relevant technology.Plain-language guidance on the technology you use and the risks that come with it.
ABA Model Rule 1.6(c)ConfidentialityMake reasonable efforts to prevent unauthorized access to, or disclosure of, client information.Encryption, MFA, access controls, and secure client file sharing.
ABA Model Rule 5.3Supervising nonlawyer assistanceMake reasonable efforts to ensure vendors’ conduct is compatible with your obligations.Written scope, confidentiality terms, and evidence of the controls we operate.
ABA Formal Opinion 477RSecuring client communicationsUse reasonable safeguards, scaled to the sensitivity of the information, for client communications.Email security, encryption options, and secure portals.
ABA Formal Opinion 483After a breachMonitor for breaches, stop and restore, and notify affected clients as required.Logging, an incident response plan, and recovery you have tested.
Ethics rules differ by state and change over time. NovaCore provides technical and consulting services and does not provide legal advice. Confirm obligations with your state bar and counsel.

Who We Serve

  • Small and mid-sized law firms
  • Solo practitioners and boutique practices
  • Firms responding to client security audits
  • Practices handling healthcare, financial, or other sensitive matters

What We Handle for You

  • Microsoft 365 security and email protection
  • Secure document and client file sharing
  • Cyber insurance application support
  • Written information security policies
  • Backups and ransomware recovery planning
  • Help Desk for attorneys and staff

Common Questions

Do ethics rules really cover how we run IT?

In most jurisdictions, yes. Duties of competence and confidentiality extend to the technology you use and to the vendors who touch client data. The ABA Model Rules are a template, and each state adopts its own version, so check your own bar’s rules and opinions.

Can you help with client security questionnaires and cyber insurance applications?

Yes. These are some of the most common triggers for a firm to get serious about security. We answer the technical questions accurately, close gaps that would cost you coverage or work, and keep the evidence on hand for next time.

Do you see our client files?

We apply least-privilege access and log administrative activity. Our work is the systems and security around your data, not the content of client matters, and we treat everything we encounter as confidential.

Talk Through Your Compliance and IT Needs

Tell us about your practice. We will reply with an honest read on where you stand and what to fix first. Support hours are 7 a.m. to 7 p.m. MST, Monday through Friday, and we are available 24/7 for emergencies.