Legal practices and notaries
IT support for solicitors that keeps client confidences
Every document you hold belongs to a client who trusts you with it. We provide secure, managed IT support for solicitors and notaries, so confidential files stay controlled and fee earners are never left waiting for IT.
The legal practice security review
- Scope agreed with you before we start
- Devices, sign-in and email security
- How documents are shared and stored
- Gaps against Cyber Essentials
- A written report for partners
Trusted by teams across UK government, healthcare, education, charities, financial services and global brands
Why legal practice IT is different
A legal practice’s risk sits in its documents and its inbox. A lost laptop, a misdirected email or a fake change of bank details on a completion can cost a client money and the business its reputation, whatever the size of the practice.
At the same time, fee earners cannot wait for IT. Controls that add friction get worked around, so we design them to stay out of the way: single sign-on, devices that set themselves up, and a helpdesk that knows your business. For practices in the Square Mile, see IT support in the City of London.
Legal clients we can name
- Cranbrook Legal
- Wharf Notaries
Cranbrook Legal: from an internal team to a managed service
“Postremo IT has completely transformed our internal operations.”Amer ZamanCEO, Cranbrook Legal
What your regulator expects, in plain English
This is a general summary of published rules, not legal advice. Your compliance officer decides how they apply to your business.
Solicitors: the SRA Code of Conduct for Firms
The Solicitors Regulation Authority (SRA) does not tell businesses which technology to buy. Its Code of Conduct for Firms sets outcomes instead. Paragraph 6.3 requires businesses to keep the affairs of current and former clients confidential. Paragraph 2.1 requires effective governance, systems and controls, and paragraph 2.5 requires businesses to identify, monitor and manage all material risks to the business.
For IT, that points to the basics done well and written down: who can open which matter, how devices are protected if lost, how email is secured against impersonation, and what happens if a supplier fails. The SRA’s confidentiality guidance also treats storing data with a cloud provider as outsourcing, and points businesses to NCSC guidance on whether a provider is secure enough.
Notaries: the Faculty Office
Notaries in England and Wales are appointed and regulated through the Faculty Office of the Archbishop of Canterbury, not the SRA. Notarial work is often international and document-heavy, with identity documents, powers of attorney and corporate papers passing through every day. We support Wharf Notaries in London.
Lexcel, insurers and clients
Lexcel, the Law Society’s practice management standard, requires an information management and security policy, and recommends Cyber Essentials certification (Lexcel v6.1, section 3.2).
Professional indemnity and cyber insurers, and corporate clients running supplier due diligence, often ask about the same controls: multi-factor authentication, encryption, backups and patching. We prepare businesses for Cyber Essentials and Cyber Essentials Plus so the answers are already evidenced.
Secure document handling
Confidentiality controls only work if people can still do their jobs. These are the ones we put in place first.
Devices that protect themselves
Controlled sharing
- Microsoft Purview sensitivity labels for client matters
- External sharing limited and logged
- Data loss prevention for sensitive documents
- Secure, expiring links instead of attachments
Sign-in and email
- Single sign-on with MFA for every account
- Conditional access for managed devices only
- SPF, DKIM and DMARC against impersonation
- Phishing protection and reporting
Frequently asked questions
Can’t see your question? Call us on +44 20 7550 9103 or book a call.
What does the SRA require for legal practice IT?
The SRA does not prescribe technology. Its Code of Conduct for Firms requires businesses to keep client affairs confidential (paragraph 6.3), have effective systems and controls (2.1), and manage material risks (2.5). IT has to support all three.
Who regulates notaries?
In England and Wales, notaries are appointed and regulated through the Faculty Office of the Archbishop of Canterbury, not the SRA. Notarial work is often international and document-heavy, with identity documents, powers of attorney and corporate papers passing through every day, so the same care over confidential files applies.
Do legal practices need Cyber Essentials?
It is not an SRA rule. Lexcel recommends Cyber Essentials certification rather than requiring it, but insurers and corporate clients may ask for it. We prepare businesses for Cyber Essentials and Cyber Essentials Plus across Mac and Windows.
Is it safe to keep client files in Microsoft 365?
It can be, when it is set up properly. The SRA treats cloud storage as outsourcing, so you need to check the provider and your own configuration: access controls, sensitivity labels, MFA and where data is held.
Do you support Macs in legal practices?
Yes. For Cranbrook Legal we run a fully managed service, with every Apple device managed in Jamf Pro, Mac sign-in through Jamf Connect and endpoint security from Jamf Protect.
How is the work priced?
Managed IT is a fixed monthly fee per device, from £25 per device per month, excluding VAT and licences. Reviews are a fixed price for an agreed scope. See pricing.
Book a legal practice security review
Tell us how your fee earners work and what your insurers and clients ask for. We will agree the scope with you and show you where client data could leak.
London head office
Postremo IT Limited
Level 24, One Canada Square
Canary Wharf
London E14 5AB
+44 20 7550 9103
info@postremoit.com
Also in Dubai
Business Bay, Dubai