How Firmhorse keeps client files private

Your own private system

Each firm runs on its own system, with its own database, storage and sign-in. Nothing is shared between firms. That keeps an ethical wall between every firm we serve.

Encrypted at every step

• Data at rest is encrypted with AES-256, backups included.
• Data in transit uses TLS 1.2 or higher.
• Keys to your systems are stored encrypted, apart from your data.

You stay in control

Firmhorse shows each change in plain words: what will happen and why. At first, nothing is written to Clio, your calendar or your email until a person you chose approves it.

You decide when a job may run on its own, and you can move it back at any time. Some work always stays with people: filing with the court, moving trust money, sending bills and giving legal advice.

A full record

Every action is recorded: who approved it, what changed and when. Your team can see the history in the app at any time.

Sign-in and access

Everyone signs in with two-step sign-in. You choose who can see and approve each kind of work. Our staff get access only when your support request needs it, and that access is recorded.

Your data is used for your work only

Your data is never sold, never shared with another firm and never used to train models. When a job needs to read a document, it uses services that keep no copy and do not train on it.

Hosted in the United States

Firmhorse runs on Amazon Web Services and Google Cloud, in U.S. data centers. Both providers hold SOC 2 Type II and ISO/IEC 27001 certifications. Firmhorse does not hold its own SOC 2 report.

The free Checkup is read-only

The Checkup only reads your Clio data. It changes nothing. You see what we found before you decide anything.

Yours to keep

You own your data. Export it at any time. If you leave, you get a full copy, and we delete ours within 90 days.

Built around your duties

Firmhorse is built to support the duties lawyers already carry: ABA Model Rules 1.1 (competence, including technology), 1.6 (confidentiality) and 5.3 (supervising non-lawyer help), ABA Formal Opinions 477R (securing client information), 498 (virtual practice) and 512 (generative AI tools), and Illinois Rule 1.6(e). Each firm makes its own judgment.

We sign a confidentiality and data agreement with every firm. Firmhorse is not a law firm and does not give legal advice.

Questions, or a security problem to report?

Ask us anything about security before you sign. To report a problem, write to us on our contact page. Our security.txt has the details.