Microsoft 365, configured for a law firm.
Most firms already pay for security and compliance features they haven't switched on. We configure your tenant's identity, devices, data protection and retention to what your obligations require, and change-control it so it stays that way.
Microsoft Partner
What we configure.
Licensing
We provision your Microsoft licences and match each person to the plan their role needs, so you are not paying for what nobody uses or missing what your obligations require.
Identity and access
Multi-factor authentication, conditional access and administrator roles, so only the right people sign in, from the right places, with the access they need.
Devices
Every device that touches firm data, firm-owned or personal, is registered and covered by policy before it gets access.
Data protection
Sensitivity labels and data loss prevention in Microsoft Purview, so client information is marked and stays where it should.
Retention and records
Retention settings matched to your record-keeping obligations, so records are kept as long as they must be and not deleted early.
Backup and recovery
Backup of mail, files and Teams, with restores tested so you know they work when you need them.
Copilot sees what your tenant lets it see.
Copilot and other AI tools work with whatever they can reach. If permissions, sharing settings and sensitivity labels aren't right, an AI tool can surface information people were never meant to see. We set that access as part of the configuration, and your staff AI use policy sits on top of it.
Copilot for legal: a briefing for principals →Staff AI use →
Change-controlled, not set and forget.
Controls drift. A new starter is given the wrong access, an exception made for one matter stays in place, a setting is switched off to fix a problem and never switched back on. Any change that affects identity, security policy or data protection is scoped, approved and recorded. Routine adds, moves and changes stay with your IT provider.
The record of what is configured, and when it changed, becomes part of your compliance evidence.
The right plan, confirmed before work starts.
Depending on what we find, some firms need a higher Microsoft 365 plan to turn on the security and compliance features their obligations require. For many smaller firms that means Microsoft 365 Business Premium. We tell you before any work starts, and we scope the work at a fixed fee.
What can be included:
- Tenant security and compliance review against your obligations
- Licensing review and provisioning
- Multi-factor authentication, conditional access and administrator roles
- Device registration and policy, for firm-owned and personal devices
- Sensitivity labels, data loss prevention and retention in Microsoft Purview
- Email security settings
- Backup and tested recovery
- Copilot and AI tool access review
- A configuration record and change-control process
Frequently asked questions
-
Your firm. We have the access we need for the security and compliance configuration we are responsible for, and your IT provider keeps administrator access for day-to-day work.
-
Your core Microsoft 365 data is stored in Australia, in your own tenant. The workflows and records we build sit there too.
-
No. If you decide to use it, the access settings need to be right first, because Copilot works with whatever it can reach in your tenant. Our briefing for principals covers the decisions to make before rollout.
-
Yes. We agree a scope with them: they keep day-to-day administration and support, and changes that affect security and compliance configuration go through us. How the split works.
Find out what your tenant is already capable of.
Start with a cybersecurity baseline review, or talk to us about your Microsoft 365 setup.