IT Support for Solicitors and Law Firms

Modern law firms need more than a helpdesk. They need a managed partner who governs Microsoft 365, runs layered cyber security, maintains tested backups, supports secure remote access to case management and document systems, and gives senior, partner-level advice. Reactive break-fix support is no longer enough: clients, the SRA and PII insurers all expect a documented, proactive operating model behind your IT.

Firms handling sensitive client data typically sit on our Complete IT and security package, at £55 to £90 per user per month, because it includes managed cyber security, Microsoft 365 management, independent backup and Cyber Essentials guidance. Core support starts at £30 per user per month. Both are on a rolling annual agreement, all prices exclude VAT, and the full breakdown is on our IT support pricing page.

Email modification was among the most common attacks in the SRA’s 2020 cyber security review: of 40 firms visited, 30 had been targeted, and firms had to repay £4,059,689 to clients after losing client or office money. We enforce MFA, Conditional Access and DMARC, turn on impersonation protection, alert on suspicious mailbox forwarding rules, and help you put a verbal callback check in place before bank details are changed or money is sent. Our guide to Friday afternoon fraud shows how these attacks work.

If an attack amounts to a serious breach of the SRA Standards and Regulations, your firm has an obligation to report it under Rule 3.9 of the Code of Conduct, and the SRA has said it expects a prompt report in all cases where an attack has had, or could have, an impact on clients (SRA Update 123, January 2024). We help you contain the incident, work out what happened and gather the facts your COLP needs to make that report.

No. The SRA does not make Cyber Essentials mandatory, but many clients and insurers now ask for it, and it is a sensible baseline for any firm that holds client data and client money. Our guide on whether the SRA requires Cyber Essentials explains where it fits and why firms fail their first assessment.

Yes. Our law-firm clients have run LEAP, Clio, Actionstep and Proclaim, and we look after everything those systems depend on day to day: the devices, Microsoft 365, network, remote access and backups. For problems inside the application itself, we work directly with your software supplier, so your fee earners are not left chasing two companies.

Start with the controls that matter most: enforce phishing-resistant MFA on every account, deploy managed EDR on all devices, lock down Microsoft 365 with Conditional Access and modern authentication, run independent backups of your tenant, and align the environment with Cyber Essentials. Add user awareness training, a documented incident response plan and a quarterly review of identity and tenant risk. ATS delivers all of this within one managed retainer.

Microsoft 365 holds your client matters, privileged correspondence, conveyancing files and case papers, which makes it the highest-value target in your firm. Default tenant settings are not secure or audit-ready: legacy authentication is often enabled, SharePoint is over-shared, guest access is uncontrolled and there is no third-party backup. A properly governed tenant with MFA, Conditional Access, retention policies, DLP and independent backup greatly reduces the risk of email compromise, conveyancing fraud, regulatory exposure and data loss.

Look for named engineers rather than a ticket queue, a published price, security included as standard rather than sold as extras, independent backup that is actually tested, and someone who will explain your risks to the managing partner and your PII insurer in plain English. Ask any provider how it secures its own systems too, because an attack on an IT supplier can reach every firm it supports.

Logged tickets are picked up in under 15 minutes on average, and calls are answered by our own UK engineers rather than a call centre. Most issues are handled remotely, without partners or fee earners needing to leave their desk. Critical, business-impacting incidents, including suspected breaches and conveyancing fraud, are escalated immediately under documented major-incident procedures.

Continuity for a law firm means more than a backup file. It means independent, immutable backup of Microsoft 365 and on-premises systems, rehearsed recovery, documented incident response, resilient remote access, secure device management and a clear plan for what happens if the office, the internet or a key system is unavailable. ATS builds and tests this as part of the managed service, so partners can answer continuity questions from clients and insurers with confidence.

Yes. We deliver managed IT and cyber security to firms working fully remotely, hybrid or across several offices, using Intune-managed devices, Conditional Access and modern remote access. Many of our legal clients work all day inside case management, document systems and online portals, so we set their environments up for consistent performance, security and auditability wherever people work.

Yes. ATS has offices in Arundel and Chichester and supports firms on site across Sussex, Surrey, Hampshire and London, with managed IT and cyber security delivered to law firms throughout the UK using secure remote tooling. On-site visits are scheduled where they add real value: projects, partner meetings or critical incidents.

Our helpdesk is open from 9am to 5.30pm on working days, and urgent out-of-hours support is available when you need it. Monitoring runs around the clock.