Internet for Law Firms: Uptime, Upload and Confidentiality

A law firm needs a connection that keeps cloud document management, e-filing, video hearings and the phones working through every deadline, with enough upload to send large productions, static IPs where platforms allow-list you, and a backup on a separate path. Professional conduct rules do not prescribe equipment, but they do expect reasonable safeguards for client information, and many of those safeguards live in the network.

Most firms do not need exotic infrastructure. They need a connection that does not fail at 4:45pm on a filing day, and a network that would hold up if a client's security team asked how it works.

What a firm's connection carries

• Document management and practice management systems, increasingly cloud-hosted.
• Time entry and billing, and the trust accounting that sits alongside it.
• Court e-filing portals, with hard deadlines.
• E-discovery and review platforms, where productions can run to many gigabytes.
• Video depositions, mediations and remote court appearances.
• Phones, including intake lines where a missed call can be a missed client.
• Remote attorneys and staff connecting from home or the road.

Almost all of it is sensitive, and almost all of it has a clock attached.

The confidentiality duty and the network

General information only, not legal or ethics advice. Your state's rules and opinions govern.

The ABA Model Rules, which most states have adopted in some form, ask lawyers to make reasonable efforts to prevent unauthorized access to or disclosure of client information (Rule 1.6(c)), and the comments to the competence rule (Rule 1.1) refer to keeping up with the benefits and risks of relevant technology. ABA Formal Opinion 477R discusses securing client communications over the internet, and Formal Opinion 498 addresses virtual practice. None of these lists products. They describe a standard of reasonableness that depends on the sensitivity of the information and the risks involved.

In network terms, "reasonable" usually translates into a handful of practical measures:

• Multi-factor authentication on email, document systems and remote access.
• Encrypted remote access for anyone working outside the office.
• Separate networks for staff, guests and devices, so a visitor in the conference room cannot reach the file server.
• A managed firewall with logging you could hand to an investigator.
• Vendor due diligence: knowing where your cloud providers store data and how they protect it.

Clients increasingly ask about this directly. Outside counsel guidelines, security questionnaires and cyber insurance applications ask how the firm connects, who manages the firewall and whether remote access uses MFA. A clear answer is worth having before the questionnaire arrives. Our cybersecurity service covers managed firewalls, monitoring and DDoS protection.

Sizing by firm type

More on the dedicated option on our dedicated internet access page. For several offices, SD-WAN runs every site under one security policy and switches between circuits automatically.

A worked example

Hypothetical numbers, invented for illustration. They are not a real firm or a quote.

A 20-person litigation firm has to upload a 40 GB production to a review platform before a deadline. That is about 320,000 megabits.

• At 35 Mbps of upload, typical of some cable plans, it takes about 2.5 hours at full speed, with everyone else's video calls fighting for the same pipe.
• At 500 Mbps symmetrical, it takes about 11 minutes in theory.
• At 1 Gbps symmetrical, about 5 minutes in theory.

Real transfers run slower than the theoretical figure, but the ratio holds. On the thin upload, the production becomes an evening's work with a real risk of missing the deadline if anything else goes wrong.

Then consider downtime. If 12 timekeepers each bill a hypothetical $300 an hour and an outage stops most of their work for three hours, that is around $10,800 of time, before the cost of a missed filing or a rescheduled deposition. Against numbers like that, a backup connection on a separate path is inexpensive, and an SLA with a defined repair window stops being a formality. What the SLA really covers is explained in what a 99.99% SLA buys.

Static IPs and allow-listing

Many firms end up needing static IP addresses without planning to. Some document platforms, banks, court vendors and client portals allow access only from known addresses, and conditional-access policies in Microsoft 365 often use the office IP as a trusted location. A static block on a dedicated circuit makes this straightforward. The catch is that addresses belong to the carrier, so changing carriers means updating every allow-list. Keep a list of where your IPs are registered. Our guide to static IPs and BGP explains the options, including keeping addresses when you have more than one circuit.

Private connections to the cloud

A firm that moves large volumes of data to a cloud provider every day can connect to that provider privately, rather than over the public internet. A private on-ramp gives more predictable performance and keeps the traffic off the open internet, which some clients like to see in a security answer. It is not necessary for most firms, but it earns its place for heavy review and litigation-support work. See cloud connectivity.

Phones, intake and recording

For many practices, the intake line is the front door. A prospective client who reaches voicemail often calls the next firm on the list. Hosted voice and UCaaS make routing easy: intake calls to whoever is free, after-hours calls to an on-call attorney or an answering option, and conflict-sensitive calls handled by rules. See voice and UCaaS.

Two cautions. First, call recording consent rules vary by state, and several require every party's consent, so a firm with clients in many states needs an announcement or a policy. Second, if an AI or live answering service takes intake calls, set clear rules: it should gather contact details and the nature of the matter, run no conflict check it cannot do properly, and give no legal advice. An AI receptionist can follow those rules and hand urgent calls to a person.

Remote and hybrid work

Attorneys working from home carry the firm's obligations with them. The office circuit matters less for them than their remote-access setup: MFA, an encrypted connection to firm systems, firm-managed devices where possible, and guidance on home Wi-Fi. If staff connect back to an on-premises server, the office upload becomes their download, which is another reason symmetrical service helps.

Video hearings and depositions

Remote appearances and video depositions put the firm's connection on display in front of a judge, opposing counsel and a court reporter. A frozen image during testimony is more than an annoyance. A few habits help:

• Use wired connections in the conference rooms used for hearings, not Wi-Fi.
• Give video and voice priority over bulk traffic with quality of service, so a large upload elsewhere in the office does not degrade the call.
• Schedule big productions and backups away from scheduled hearings.
• Keep a tested fallback, such as a laptop on a cellular hotspot, in the room for important appearances.

Mistakes we see at law firms

• Buying on download speed. A large download figure on a plan with thin upload is the wrong shape for a firm that sends more than it receives.
• One circuit, no backup, in a firm where every system is in the cloud.
• Guest Wi-Fi on the staff network, so clients and opposing counsel in the conference room share a network with the document server.
• Forgetting the allow-lists when changing carriers, and discovering on the first morning that nobody can reach the billing platform.
• Nobody owning the contracts. Circuits and phone lines renew silently for years at old prices.

Questions to ask your carrier

• What is the upload speed, separately from download?
• Is there a written SLA, and what is the committed repair time for a hard outage?
• How many static IPs are included, and what does a larger block cost?
• Can the backup circuit enter the building on a different path from the primary?
• Can you document how the service is monitored and secured for a client questionnaire?
• For phone and answering vendors: where are recordings and messages stored, and who can access them?

Getting it priced for your office

We qualify your address across several Tier 1 carriers, put their offers side by side with the SLA terms, and tell you honestly when the cheaper option is enough for a smaller practice. The carrier pays FiberX, so there is no markup on the invoice, and the quote is free with no obligation. Send us your address, call 478-758-8091 or text (347) 870-0965, and you will usually hear back the same day.