How a law firm automation project runs

Jan Elvers, founder of Elevate Consulting
Jan Elvers spent seven years as a DevOps engineer building and running software that has to hold up in production. In 2026 he founded Elevate Consulting, where he builds automation, internal tools and integrations for small law firms and businesses. He leads every project himself, from the first call to operations.
Published · updated · 7 min read
A law firm automation project with us runs in six steps: a two-week process check, a fixed-fee proposal, the build inside your systems, testing with your own matters, handover of code and documentation, and optional ongoing operations. A contained first system typically takes 3 to 10 weeks from signed proposal to handover. The firm provides one contact person, system access, real test cases and an attorney's sign-off. This guide explains each step, the paperwork around confidentiality and when we advise you not to start.
Part of the guide Law firm automation: what pays off and where to start
Key takeaways
- The process check takes two weeks at a fixed fee and is credited against a later project.
- Scope and price are fixed in writing before any build work; if we underestimate the effort, we carry the difference.
- A fixed-fee project runs 3 to 10 weeks, and the first contained system is usually live within two to four weeks.
- Acceptance is tested against the firm's own matters, and an attorney signs off before the system goes live.
- At handover the firm receives the source code, the infrastructure and the documentation, so another developer could take over.
What are the steps of a law firm automation project?
The project runs in six steps: process check, fixed-fee proposal, build, testing with real matters, handover and operations. Each step ends with something the firm can review before deciding on the next one.
The durations below are typical ranges for one contained system in a firm with 1 to 10 lawyers. Larger replacements of legacy systems are split into stages, so part of the value arrives early.
| Step | Typical duration | What the firm provides | Result |
|---|---|---|---|
| 1. Process check | 2 weeks | Interviews, a look at current workflows and systems | Ranked list with effort and benefit |
| 2. Fixed-fee proposal | A few days | Choice of the first system, questions answered | Written scope, acceptance criteria and fixed price |
| 3. Build | Most of the project | Admin access, a contact person, short weekly check-ins | Working system in a test setup |
| 4. Testing with real matters | 1 to 2 weeks within the project | Test cases from real matters, a reviewing attorney | Acceptance sign-off |
| 5. Handover | At go-live | Time for a walkthrough | Source code, infrastructure, documentation |
| 6. Operations | Monthly, optional | Reporting of issues and change requests | Monitoring, maintenance, extensions |
What happens in the process check?
In two weeks we map how intake, deadlines, documents, billing and data transfer between systems actually run in your firm, measure where the hours go, and deliver a ranked list of candidates with effort and benefit.
The list includes the honest negatives: workflows that happen too rarely, that a setting in your existing software already solves, or that should be fixed as a process before anyone automates them. The fee is fixed and is credited against a later project, so the check does not cost extra if you go ahead. On our services page it appears as the process audit.
What is in the fixed-fee proposal?
The proposal fixes in writing what will be built, how it will be accepted, what is excluded and the price, before any build work starts. If we underestimate the work, that is our cost, not an addition to your invoice.
It also records the points a firm's professional duties call for when an outside provider touches client information. ABA Formal Opinion 512, drawing on earlier outsourcing opinions, lists confidentiality agreements, the vendor's security policies and a forum for enforcing the agreement among the things to check. Rule 5.3 Comment 3 makes the extent of a lawyer's duty depend partly on the terms protecting client information.
Scope
The workflow, the systems involved and the review points where a person decides.
Acceptance criteria
Which test cases must pass, measured against the firm's own matters.
Exclusions
What the system will not do, including any legal or professional judgment.
Access and data
Which accounts we need, with least privilege, and that client data is not copied to our side.
Confidentiality terms
Written confidentiality obligations and, where UK GDPR applies, a controller and processor contract.
How is the system built without disrupting the practice?
We build inside the systems you already use, in your own tenant, and keep the new workflow separate from live matters until testing is complete. Your staff keep working as before while the build runs.
Where your practice management system offers an API, the new system uses it; otherwise we work with the exports or databases available. A short weekly check-in with your contact person replaces long status meetings, and questions that need a lawyer's judgment are collected and answered in one go. The principle stays fixed throughout: software prepares, a person decides.
How is the system tested and accepted?
The system is tested with cases taken from your real matters, including the awkward ones, and accepted only when the agreed test cases pass and a responsible attorney signs off.
Good test sets include a matter with a potential conflict, a deadline with an unclear service date and an inquiry that should be rejected. The expected behaviour is written down in advance: a possible conflict is shown to an attorney and never opens a matter automatically, and an unclear deadline is flagged rather than calculated.
Real matters mean real client information, so testing happens in your environment under the same confidentiality terms as the build. Rule 1.6 Comment 18 describes the reasonable-efforts standard that applies to safeguarding that information.
What does the firm need to provide?
The firm provides one contact person, admin access to the relevant systems, a set of real test cases and a lawyer's time for decisions and final sign-off. You do not need technical knowledge or preparation beyond that.
If none of these can be made available in the coming weeks, the honest answer is not yet. A project without a contact person or test cases tends to produce a system that nobody trusts.
Contact person
Knows how the workflow runs day to day, often an office manager or senior paralegal.
System access
Admin rights in the practice management system, Microsoft 365 and any other system involved.
Test cases
Ten to twenty real examples of the workflow, including exceptions.
Attorney time
For review points, edge cases and the acceptance sign-off.
What happens at handover and after go-live?
At handover you receive the source code, the infrastructure and the documentation, and the system runs in your environment. Because you own all three, another developer could maintain it without us.
After go-live you choose between a monthly operations arrangement, with monitoring, maintenance, extensions and agreed response times, and small fixed-fee follow-ups when something changes. Either way, the firm remains responsible for its professional obligations: in England and Wales, paragraph 2.3 of the SRA Code of Conduct for Firms keeps the firm accountable where work is carried out through others.
Cite this page
Elevate Consulting (Jan Elvers). "How a law firm automation project runs". https://elevate-consulting.net/en/guides/how-a-law-firm-automation-project-runs. Updated September 25, 2026.
Frequently asked questions
Can we skip the process check if we already know what we want?
Yes, if the workflow and systems are clear, we can go straight to a fixed-fee proposal. The check is most useful when you are unsure which workflow to automate first or whether it pays off.
Do we need a data processing agreement with the developer?
For UK firms, the ICO says processing by a processor must be governed by a written contract that meets Article 28 UK GDPR. For US firms, Rule 5.3 and Opinion 512 point to written confidentiality terms with outside providers. Which documents you need is for your own assessment; this is not legal advice.
What if the system does not pass acceptance?
Then we fix it within the fixed price until the agreed test cases pass. Acceptance criteria are set in the proposal, so both sides know in advance what passing means.
How much of our time does the project take?
Mostly the contact person's time for a weekly check-in and questions, plus attorney time at review points and acceptance. The exact amount depends on the workflow and is estimated in the proposal.
Can you work with a US or UK firm from Germany?
Yes. We work remotely with overlap in your morning hours, and you deal with Jan and a small fixed team rather than rotating account managers.
Sources
- ABA Formal Opinion 512, Generative Artificial Intelligence Tools (July 29, 2024), americanbar.org, accessed September 24, 2026
- ABA Model Rule 5.3, Comment 3, americanbar.org, accessed September 24, 2026
- ABA Model Rule 1.6, Comment 18, americanbar.org, accessed September 24, 2026
- ICO, When is a contract needed and why is it important?, ico.org.uk, accessed September 24, 2026
- ICO, What needs to be included in the contract?, ico.org.uk, accessed September 24, 2026
- SRA Code of Conduct for Firms, paragraphs 2.3 and 6.3, sra.org.uk, accessed September 24, 2026
This guide explains technology and workflows. It is not legal advice and does not replace a professional-responsibility review of your situation.
Deutsche Version: So läuft ein Automatisierungsprojekt in der Kanzlei ab