Compliance Center
This page is designed to help attorneys satisfy their ethical due diligence obligations when evaluating Law Hired as a technology platform. It addresses the specific ABA Model Rules and formal opinions that apply to cloud-based legal software.
Last updated: May 2025ABA Model Rules Addressed
The following ABA Model Rules are directly relevant to a lawyer's decision to use a cloud-based practice management platform. Here is how Law Hired addresses each.
Rule 1.6 — Confidentiality of Information
Lawyers must make reasonable efforts to prevent inadvertent or unauthorized disclosure of client information. Law Hired supports that evaluation with encryption, Oracle database isolation controls, and application access controls. Lawyers remain responsible for determining whether those controls meet their obligations.
Rule 1.1 — Competence (Technology Competence)
ABA Comment 8 to Rule 1.1 requires lawyers to keep current with changes in the law and its practice, including the benefits and risks of relevant technology. Law Hired is maintained on current, actively supported infrastructure and receives regular security updates.
Rule 1.15 — Safekeeping Property (Trust Accounting / IOLTA)
Lawyers must keep client funds segregated from operating funds. Law Hired provides ledger and reconciliation tools, but lawyers must configure their payment provider and accounts correctly and remain responsible for compliant fund handling.
Rule 5.3 — Responsibilities Regarding Nonlawyer Assistance
Lawyers must make reasonable efforts to ensure that services provided by nonlawyer firms comply with professional obligations. Law Hired operates under a Data Processing Agreement (DPA) that lawyers can execute to satisfy their Rule 5.3 vendor oversight obligations.
ABA Formal Opinions
These formal opinions from the ABA Standing Committee on Ethics and Professional Responsibility establish specific obligations for lawyers using cloud-based platforms.
Generative Artificial Intelligence in the Practice of Law
This opinion addresses technology competence, confidentiality, communication, candor, supervision, and billing when lawyers use generative AI. Law Hired provides review prompts and AI-use controls designed to support a lawyer's evaluation, but use of the platform does not by itself establish compliance. Lawyers must independently review every output and their applicable rules.
Securing Communication of Protected Client Information
This opinion requires lawyers to assess the nature of the information being communicated and the sensitivity of the matter when selecting a technology platform. Messages on Law Hired are encrypted in transit (TLS) and at rest (AES-256), and access is restricted to the parties on the matter. Encryption is not end-to-end: Law Hired holds the keys and can technically access content, which is what makes support, search, and export possible. Before an engagement is signed, communications through the platform are not privileged.
Lawyers' Obligations After an Electronic Data Breach or Cyberattack
Opinion 483 addresses lawyers' duties to monitor for breaches and notify affected clients. Law Hired will investigate incidents and provide notices required by applicable law and binding agreements without unreasonable delay; this page does not create a universal 72-hour customer-notification promise.
Privacy Law Compliance
GDPR
Privacy roles depend on the processing context. Organizations subject to GDPR should review the current DPA, subprocessors, transfer mechanism, and product configuration with counsel before using Law Hired for regulated data. This page does not certify GDPR compliance.
CCPA / CPRA (California)
California residents may have access, correction, deletion, and opt-out rights subject to statutory exceptions. Law Hired does not sell personal data as that term is described in the current privacy notice. Requests are verified and handled under applicable law; the in-product JSON export is not represented as a complete archive of every record.
HIPAA
Law Hired does not currently offer a Business Associate Agreement or represent the platform as HIPAA compliant. Do not upload Protected Health Information unless Law Hired has expressly approved that use under a signed agreement.
Attorney-Client Privilege Protections
Law Hired is architected to preserve attorney-client privilege:
✓
Client communications and documents are accessible only to the assigned attorney and their authorized staff — enforced at the database layer.
✓
Authorized support or security personnel may receive narrowly scoped access when necessary for an approved support request, incident response, abuse investigation, or legal obligation.
✓
Data is protected in transit and with infrastructure encryption-at-rest controls; each lawyer must assess whether the controls are reasonable for the sensitivity of a particular matter.
✓
The in-product JSON export covers supported account records but is not yet a complete document archive; broader portability requests require support review.
✓
Deletion requests are verified and scoped against authentication data, Oracle application data, backups, audit evidence, legal holds, and retention duties; no universal purge deadline is promised here.
Need a Data Processing Agreement?
Law Hired provides a DPA that satisfies GDPR Article 28, ABA Rule 5.3 vendor oversight requirements, and state bar cloud storage guidance. You can view and download it at any time — no request needed.