How We Protect Your Clients’ Information
Bringing an outside team into your practice is a serious decision. Your obligations to your clients do not change because part of the work is delegated. This page sets out exactly how we protect confidentiality, control access, and support your professional responsibilities.
Have a security questionnaire or vendor assessment? Send it to info@techattan.com and we will complete it before you commit to anything.
Confidentiality Agreements
Every Techattan specialist signs a binding confidentiality agreement before onboarding, and before being given access to any firm system or document.
We will also sign your firm’s own NDA or confidentiality terms. If your standard agreement contains specific provisions, send them during onboarding rather than after work has begun.
Specialists are assigned to a single firm. The person working on your matters does not work on another firm’s matters.
Confidentiality obligations continue after an engagement ends, and after a specialist leaves Techattan.
One firm per specialist
Conflicts of Interest
Before an engagement begins, we screen the parties and matters your firm identifies against our existing client engagements, and confirm in writing that no conflict exists.
We maintain an internal conflicts register covering client firms, matter types, opposing parties, and assigned specialists.
If a potential conflict arises during an engagement, we notify your firm immediately and reassign the specialist. We do not resolve conflicts internally without telling you.
Written conflict confirmation
Access Control
Techattan specialists work inside your systems, under credentials your firm issues and controls.
- Access is requested at the minimum level the role requires
- Every specialist has an individual named account — no shared logins
- Your firm can revoke access instantly, at any time, without contacting us
- Access permissions are reviewed quarterly and unused permissions removed
- Activity is logged, so you have a record of what was done and by whom
Work product stays in your case management system. We do not build a parallel copy of your client files on our own infrastructure.
Devices and Workspace
Work is performed from a controlled office environment, not from personal homes or public spaces.
- Company-issued, centrally managed devices only
- Full-disk encryption on all machines
- USB ports and removable media disabled
- No printing of client material
- Personal devices not permitted in the operations area
- Access-controlled entry to the working floor
- Encrypted connections for all system access
Controlled office environment
Managed devices only
Supporting Your Supervision Obligations
Techattan specialists perform support work under your firm’s direction. They do not provide legal advice, exercise independent legal judgment, or communicate legal conclusions to your clients.
Our workflows are built to support your obligations when working with non-lawyer assistance, ABA Model Rule 5.3 in the United States, and the SRA Code of Conduct in England and Wales.
- Every task has a defined scope, agreed with your firm in advance
- Work routes back to a named supervising attorney or paralegal for review
- Anything outside the agreed scope is escalated, never decided independently
- Activity logs give you a documented record for your own file
Where client consent to, or disclosure of, outsourcing is required or advisable in your jurisdiction, we will support your firm in documenting it.
Who We Let Near Your Files
Our specialists are qualified lawyers in their own jurisdiction, holding a University of London LLB and enrolled as advocates, with two to ten years of legal experience.
Before placement, every specialist completes:
- Identity and document verification
- Education verification
- Employment history verification
- Confidentiality and privilege training, refreshed annually
- A written assessment covering handling of sensitive material
Verified before placement
When a Specialist Leaves
When a specialist rolls off your engagement or leaves Techattan:
- Access to your systems is revoked the same day
- The change is confirmed to your firm in writing
- Confidentiality obligations survive their departure
- Handover is documented so matter knowledge is not lost
Documented handover
Protected Health Information
For firms handling protected health information, we will sign a Business Associate Agreement and assign specialists trained on HIPAA handling requirements.
Medical records are treated under the same access, device, and logging controls described above, with no local storage and no printing.
No local storage, no printing
Send Us Your Security Questionnaire
Firms with a formal vendor assessment process are welcome to run it before any commitment. Send it over and we will complete it.
If you would rather talk it through, a call with our operations lead takes twenty minutes.