Remote legal support has become normal, which means the interesting question is no longer whether to use it but how to buy it safely. Two providers can quote similar monthly rates and offer completely different risk profiles. One employs its staff, issues managed equipment, runs background checks and keeps a named supervisor on every account. The other maintains a roster of freelancers, forwards profiles and takes a margin. From a rate card, they look the same. From a compliance standpoint, they are not remotely comparable.
Law firms carry duties that do not transfer with an invoice: competence, supervision of non-lawyer assistants, confidentiality and, in many jurisdictions, disclosure to clients where the arrangement is material. Those duties stay with the attorney regardless of who does the work. This guide lists the questions that reveal how a provider is actually built, organised by the four areas where the real risk sits: employment model, data security, supervision, and continuity.
1. Employment model
Everything else depends on this answer, because you cannot enforce equipment standards, background checks or exclusivity on people the provider does not employ. Ask directly and ask for specifics.
- > Is the professional assigned to us your employee or an independent contractor?
- > Who is the legal employer of record, and in which country?
- > Are local labour, tax and social security obligations handled by you?
- > Is the person exclusive to our firm, or shared across clients?
- > What background checks were run, and when?
- > What is your annual staff turnover on client accounts?
An employment relationship matters for a reason that has nothing to do with ethics rules: exclusivity and accountability. A contractor juggling several clients is working on your urgent filing between two other urgent filings, and no service agreement changes that reality. Our own model is built on directly employed staff under an employer of record structure, which is described on the how it works page.
2. Data security and confidentiality
Client files are the asset that matters. The relevant question is not whether the provider has a confidentiality clause, because everyone does, but what physically and technically prevents a file from leaving the controlled environment.
- > Is work performed on company-issued devices or personal computers?
- > Are the devices centrally managed, encrypted and remotely wipeable?
- > Do staff work from a monitored office, from home, or either?
- > How is access to our case management system provisioned and revoked?
- > Are permissions role-based so each person sees only their assigned matters?
- > Is there a written incident response process, and has it ever been used?
- > Do you carry cyber or data breach insurance, and at what limit?
Ask where the file physically lives while someone is working on it. The answer tells you more than any certificate.
3. Supervision and the practice-of-law boundary
Non-lawyer assistants may perform substantive support work, but the supervising attorney remains responsible for the output and for making sure nothing crosses into legal advice. A good provider makes that boundary explicit in its own training rather than leaving it to you.
- > How are your staff trained on the limits of non-lawyer support work?
- > What is escalated to the supervising attorney by default?
- > Is there a quality review step inside your team before work reaches us?
- > How are errors logged, analysed and corrected?
- > Who is our named point of contact when something goes wrong?
Write your own protocol alongside theirs: who reviews what, at which stage, and what the external team must never decide alone. This is the single control that prevents most of the problems attributed to outsourcing.
4. Continuity
A remote professional who disappears for two weeks with no backup is worse than no professional at all, because your workflow has already adapted to them. Continuity is a service design question, not a promise.
| Scenario | Weak answer | Strong answer |
|---|---|---|
| Staff illness | We will let you know | Named trained backup with access to your files |
| Power or internet failure | They work from home | Office with redundant power and connectivity |
| Resignation | We will start recruiting | Replacement pipeline plus documented handover |
| Holiday leave | Coverage gap | Scheduled in advance with cover assigned |
| Volume spike | Overtime if available | Additional capacity from the same trained pool |
A short due diligence checklist
- > Written service agreement naming the employer of record and the exclusivity terms
- > Confidentiality agreements signed by every individual touching your files
- > Evidence of company-issued, managed equipment
- > A named supervisor and a documented escalation path
- > Insurance coverage confirmed in writing, with limits
- > A continuity plan covering illness, leave, resignation and infrastructure failure
- > Clarity on whether your jurisdiction requires client disclosure, and language to use if so
Ask us these questions directly. We answer them in writing before any engagement starts.
Talk to our team