IT support & cyber security for law firmsClient money moves on your word.
Make sure it’s yours.

Managed IT and cyber security for Australian legal practices. Hosted in Australia. Sensitive data stays onshore.

Why law firms are a target

Your inbox holds privileged advice, client ID and settlement instructions. All in one place.

Conveyancing, estates and commercial work put client money and identity documents through email every day. That makes a practice worth more to an attacker than its size suggests, and the profession’s confidentiality duties do not pause for a breach.

Illustration. Names, domain and BSB are made up.

Payment redirection

Settlement and trust account fraud

A lookalike or compromised mailbox changes bank details days before settlement. The money is gone before anyone rings.

Data exposure

ID documents living in mailboxes

Passports, licences and statements sent for verification sit in sent items and OneDrive for years, long after the matter closes.

Account takeover

One stolen password, every matter

Without enforced MFA and monitoring, a single phished login gives an attacker your whole correspondence history.

Practice systems

Integrations nobody has reviewed

Practice management and e-signing tools connected to Microsoft 365 with broad permissions, granted once and never checked again.

What’s changed

The obligations that already apply to your practice.

Not new frameworks. Named obligations that touch how your practice handles client data and client money.

1 July 2026

AML/CTF Tranche 2 is live. Lawyers providing designated services, such as conveyancing, trust and company structures and handling client money, are now AUSTRAC reporting entities: enrolment, an AML/CTF program, customer due diligence and suspicious matter reporting. Onboarding and CDD records have to live in your systems, not in someone’s inbox.
What Tranche 2 means for your workflows →

10 December 2026

Privacy Act transparency. Privacy policies must describe decisions that software makes, or substantially helps make, using personal information. Practices doing employment, family, immigration or consumer work should check theirs.

Always

Confidentiality and supervision. Solicitor conduct rules on confidentiality, competence and supervision apply to how client information is stored, shared and secured, including by junior staff and contractors.

At renewal

Insurers ask harder questions. PI and cyber insurers increasingly ask about MFA, backups and email security. A documented, evidenced answer is easier to give than a promise.

How we help

One team for your IT, your security and the fraud in between.

Start small with an audit, or hand us the lot. Either way you know the price before we start.

01The foundation

Managed IT & Security

Helpdesk, Microsoft 365 and security, run properly.

  • Helpdesk and Microsoft 365 management
  • Essential Eight baseline, MFA and endpoint protection
  • Backup tested by restore
  • Quarterly reviews with a real engineer
  • Evisent Live: a score, a fix list and a monthly evidence pack
  • Insurer & licensee submissions: your cyber renewal questionnaire, answered from evidence
From $185 per user per month · ex GST
See Managed IT
02Practice Automation

Fixed-price protections

Published products, each priced on its own.

  • Settlement & Payment Guard. Available now Requests to change settlement, trust or refund details are flagged, and a call-back to a number already on file is assigned and logged, so your team verifies before paying. $1,950 setup · $95/mo
  • AML Onboarding & Evidence Pack. In validation For designated services: ID checks, sanctions and PEP screening, beneficial owners and a risk rating, with the evidence in your AML register and client file. Early access, quoted after review. $4,950 setup · $295/mo + ID checks
  • Matter & Client Email Filing. In validation Correspondence filed to the matter, a 7-year retention safety net, and a weekly unfiled report. $3,450 setup · $195/mo
  • Client Data Exposure Sweep. Available now Finds ID numbers and statement details in emails and OneDrive (scanned images need an optional OCR add-on), and warns staff before the next one is sent. $1,950 setup · $650 per quarterly re-sweep
Price the Client Money Protect bundle →The guard and sweep can start now; Matter & Client Email Filing joins when it is released.
See the Legal & insurance range
03Start here

Find out where you stand

Low-commitment first steps.

  • Live Audit. 30 days of Evisent Live on your tenant, then a findings meeting on cost and security.
  • Domain security check. Can someone send email as you? Free, in a minute.
Live Audit $990 ex GST · domain check free
See the Live Audit

All prices ex GST. Anything outside the standard stack is quoted upfront, before work starts.

Our promise

Four things that do not change, whatever we look after for you.

Australian-hosted

Data that needs to stay in Australia stays here, in your Microsoft 365 tenant or our Australian Azure. Where a project genuinely benefits from a more capable overseas model, we use it only for data that is allowed to leave, with your sign-off.

Sensitive data stays onshore

Automations that handle client PII, ID, TFNs or financial data run on Australian-hosted solutions only. Rules and Microsoft-native tools first.

Fixed scope, fixed price

You know the cost before we start. Anything outside the standard stack is quoted upfront.

Security-first

Built and managed by a cyber security MSP looking after Australian businesses since 2017, not a generic IT shop.

Straight answers

Questions practices ask first.

Do you work with our practice management system?

Yes. We manage the Microsoft 365 environment it connects to, review the permissions it has been granted, and keep it working through updates. Integrations outside Microsoft 365 are scoped and quoted upfront.

Can we buy the settlement guard on its own?

Yes. Every Practice Automation product stands alone with a published price: the Settlement & Payment Guard is $1,950 setup and $95 a month, ex GST. Trust account workflows differ from firm to firm, so we confirm the call-back rules with you in the practice review before anything is installed.

Where is our data held?

In your own Microsoft 365 tenant or our Australian Azure. Automations that handle sensitive data run on Australian-hosted solutions only.

Custom builds · Any industry

Not on the list? We’ll build it.

The products cover the jobs most practices share. Your business has its own. Tell us the job that eats your team’s week and we’ll scope a custom automation inside your Microsoft 365, quoted at a fixed price before we start.

  • Any industry. If the work runs through email, files, spreadsheets or forms, it can usually be automated.
  • Review first, fixed quote second. Thirty minutes with an engineer, then a written scope and price. No payment until you approve it.
  • Built and managed by us. In your own tenant, secured by the team that already looks after your IT.
↳ Next step

Book a 30-minute practice review.

Thirty minutes to map your systems and find the gaps that matter. If nothing needs doing, we will tell you that.