MyCase, Clio, or Neither: What Law Firms Get Wrong About Practice Management IT
Practice management software runs the firm, but it does not cover backups, email security or the machines it runs on. This is the list of what firms assume is included and is not.
What practice management software actually does
Clio, MyCase, and similar platforms handle the core operations of a small or mid-size law firm: cases, calendars, time tracking, billing, documents, intake, and client portals. They run in the vendor's cloud infrastructure, not on a server in your office. That shift is important, it means your firm depends on reliable internet, not on managing hardware. But it also means the vendor's responsibility ends at the edges of their platform.
Five IT gaps firms assume are covered
Most firm administrators believe their practice management subscription covers everything IT-related. It does not. Here are the gaps that show up repeatedly.
Backups beyond the production database. Clio and MyCase back up their own systems, the database that stores your cases, contacts, and billing records. They do not back up the file attachments you upload to cases, the document management folders you store there, or the OneDrive folders where partners save working documents. If you lose those files, the vendor's backup does not restore them. You need a separate backup strategy for the documents themselves.
Email security and business email compromise. Practice management software does not protect your email. Attackers routinely impersonate a partner to redirect settlement funds, trust account disbursements, or closing payments. Your email inbox is outside Clio or MyCase. If your email is not protected, your firm is exposed.
Endpoint security on attorney laptops. The devices your lawyers use to access Clio or MyCase need their own protection: antivirus, anti-malware, and behavioral monitoring. A compromised laptop can expose client data even if Clio itself is secure. Practice management software does not provide endpoint security.
Network security at the office. Your office firewall, Wi-Fi, and network infrastructure are not part of your practice management subscription. Cloud software protects data in transit and at rest in the cloud, but it does not protect the network your office devices connect through. A misconfigured firewall, unsecured Wi-Fi, or a compromised device on your network can still expose firm data.
Identity management and multi-factor authentication. Clio and MyCase require reliable identity management, SSO configuration and MFA-capable systems so that every user account is protected. Many firms skip this or set it up incompletely. If a password is compromised, MFA stops the attacker. Without it, one weak password is a door into your entire practice.
Why this is a legal duty, not just an IT preference
Lawyers have an ongoing duty of technology competence. You must keep abreast of the benefits and risks associated with the technology you use to provide services or to store and transmit confidential client information. This is not a one-time checkbox. The Massachusetts Bar Counsel published a 2024 update on the duty of technology competence, confirming it is active and evolving.
For Wisconsin firms, the State Bar's Practice411 program offers guidance on practice management tools and law office operations. State Bar members also receive discounts on Clio, MyCase, PracticeMaster, and Zola Suite. But discounts on the software do not cover the IT infrastructure around it.
What "covered" actually looks like
A complete IT setup around Clio or MyCase includes:
- Image-based backups of every attorney's laptop and desktop, not just file-level backups of documents
- Multi-factor authentication on every user account, including admin accounts
- Email filtering and monitoring tuned specifically for business email compromise
- A monitored firewall with properly configured rules and logging
- Tested restore procedures so you know backups actually work if you need them
The gap between "we bought the software" and "we are protected" is the difference between having a practice management platform and having a secure practice.
What it costs and where the savings come from
Pricing for practice management software varies. Clio's mid-tier plan runs $49–$59 per user per month. MyCase Pro runs $89 per user per month billed annually, or $99 monthly. A five-attorney firm with two associates pays more regardless of which platform they choose, that is just the cost of scaling.
The surrounding IT is a separate line item. Many firms treat it as a series of one-off repairs: a backup fails, a laptop gets infected, a firewall rule breaks. Each incident costs money and time. A flat-rate managed IT agreement changes the math. Instead of paying for repairs, you pay a predictable monthly fee for prevention, monitoring, and response. The backups run automatically. The firewall is monitored 24/7. Email filtering is tuned and updated. When something breaks, it is fixed under the agreement, not billed as an emergency.
Local resources and next steps
Wisconsin State Bar members in the Coulee Region, Chippewa Valley, and Southwest Florida already have access to discounts on Clio and MyCase through the State Bar, and to Practice411 for practice management guidance. What you still need is local IT support, someone who understands law firm operations, can be on-site when you need them, and can build a backup and security plan around your specific setup.
Ask us for a one-page IT gap review of your Clio or MyCase setup. We will tell you, in plain language, what your practice management subscription covers and what it does not, and what it would cost to close the gaps under a flat-rate managed agreement.
