Commercial law firms, 30–150 people
Law firms
Lawyers in insolvency, employment, disputes and compliance work answer personally for their clients’ secrets. We run your IT so that professional secrecy holds, and so you can prove it to clients, insurers and the bar.
Software we keep running
- Microsoft 365
- Entra ID
- Intune
- SharePoint
- Teams
What’s at stake
Professional secrecy reaches into your IT.
Your IT provider shares your secrecy
Under § 203 StGB, the technicians who look after your systems count as people involved in your work. If one of them discloses a client secret and you didn’t make sure they were bound to secrecy, you can be criminally liable too.
§ 43e BRAO sets the checklist
Careful selection, a contract in text form that names the criminal consequences, access only where it’s needed, subcontractors only where the contract allows and bound in text form, and services from abroad only with comparable protection.
Clients and insurers ask harder questions
Corporate clients send security questionnaires before they instruct you. Cyber insurers want multi-factor sign-in, tested backups and a written incident plan. And someone has to decide which AI tools may see client data.
What we put in place
A confidentiality package, not just IT support.
- Secrecy, signed in text formA § 43e BRAO agreement covering 2nd wind and every subcontractor who can see client data, with access only where it’s needed and on record. Tax advisers get the same package, since their rules are nearly identical; notaries share the core, with rules of their own on top.
- Microsoft 365, hardened and documentedMulti-factor sign-in, protected admin accounts, managed devices and a written security baseline. Where your data lives is documented, with sovereign hosting options where a mandate requires them.
- Rules for AIWhich AI tools may see client data, set up in Microsoft 365 and written down, so the firm can use AI without handing mandates to public services.
- Ready for deadline daybeA workstations, card readers and certificates kept current. If the beA or your systems fail on a filing deadline, our records help you show the court the outage was real (§ 130d ZPO).
- Backups that restore, a plan for the bad dayDated restore tests, and an incident plan walked through with your leadership before it’s needed.
- One evidence fileAll of the above in one file you can hand to a client’s security questionnaire, your insurer or your auditor.
Proof
What we can show today.
- Security practices aligned with ISO/IEC 27001.
- We’ve run IT for law firms and fund managers for years, alongside our engineering and architecture clients.
Start
Where does your firm stand?
In a first call we go through what your clients, your insurer and the professional rules will ask of your IT, and how we’d meet it. The legal assessment stays with you.
- No first level
- No surprises
- Pilot before you buy