Payment redirection fraud
Spoofed emails that change bank details on settlements and trust payments.
For law firms
Cyber security your clients' trust money can rely on.
Law firms hold privileged documents, identity records and trust account money, which makes them a favourite target for business email compromise. We run your firm's IT so you can meet your regulator's expectations without becoming an IT expert.
Limited onboarding slots each year. Every application is reviewed.
The problems we fix
What keeps law firms up at night.
Regulator expectations
Minimum cybersecurity expectations from the Legal Services Board, and the disciplinary risk of ignoring them.
New AML/CTF obligations
Customer identification records you now have to collect, store and protect.
Practice management lock-in
LEAP, Smokeball or Actionstep integrations, Office add-ins and document templates to keep working.
What you get
Handled for you.
- MFA everywhere, strong passphrases and automatic updates: the VLSB+C critical controls
- Email protection and processes that stop payment redirection fraud
- Secure storage for identity documents and AML/CTF records
- Your practice-management software and Office integrations supported end to end
Fixed price. One bill.
We pay for all your cloud subscriptions and IT costs, and you get one convenient bill every quarter. No hourly rates, no surprise invoices.
The rules that apply
Obligations we help you stay on top of.
We align your IT to the expectations below. This is general information, not legal advice.
VLSB+C minimum cybersecurity expectations
The Victorian Legal Services Board + Commissioner expects MFA everywhere it's offered, strong passphrases, automatic updates and “call before you pay” verification. Falling short can lead to disciplinary action.
Source: VLSB+C(opens in a new tab)AML/CTF reforms (Tranche 2)
Since 1 July 2026, lawyers, accountants and real estate agents providing designated services have AML/CTF obligations, including collecting customer identification. Protecting those records brings Privacy Act and breach-notification obligations with it, regardless of business size.
Source: AUSTRAC(opens in a new tab)Notifiable Data Breaches scheme
Organisations covered by the Privacy Act must notify the OAIC and affected individuals of eligible data breaches. 2025 saw a record number of notifications, most of them caused by malicious or criminal attacks.
Source: OAIC(opens in a new tab)ASD Essential Eight
Australia's baseline strategies for stopping cyber attacks. We align your environment to Maturity Level 1 or 2, the levels cyber insurers increasingly ask about.
Source: ASD's ACSC(opens in a new tab)Your software
We manage the apps you already use.
Product names are shown for identification only and belong to their respective owners.
- LEAP
- InfoTrack
- Smokeball
- PEXA
- Actionstep
- Clio
- GlobalX
- PracticeEvolve
- LawMaster
- Affinity (Dye & Durham)
- SILQ
- Microsoft 365
- Google Workspace
- Xero
- MYOB
- QuickBooks
- DocuSign
- Adobe Acrobat
Ready to hand over IT for good?
We only take on a limited number of law firms each year. Join the waitlist to secure your place in the queue.
Join the waitlist