Confidentiality is the product.

Client files, matter folders and due-diligence rooms — held under professional secrecy, shared across teams by necessity, and kept long after the matter closes.

ProLionOct 29, 2026

Book a Demo

NetApp

Syslog CEF and REST, into the tool you already run

See it running

The matter file, and the account that started encrypting it.

Film still: Legal & professional services

0:58

The information barrier that was only ever drawn.

One compromised account inside the firm reaches both sides of a wall that exists only on an org chart. The question your client asks is whether you can prove otherwise.

Without

The team disperses. The folder keeps everyone.

Matter opens A folder is created for the transaction team.
Matter closes The team moves on. Every member is still on the folder.
+18 months The firm acts for the other side. The barrier exists on the org chart.
Challenge The firm cannot show that nobody crossed it, which is the only thing that matters.

Outcome

A conflict allegation you can only answer with assurances, a client assessment that notices, and no file-level record of who reached what.

With ProLion

The wall is a record, not a diagram.

Matter opens The same folder, with every access recorded from the first day.
Matter closes The exposure report shows who can still open it; access is withdrawn and the change is logged.
+18 months The firm acts for the other side, on a folder nobody from the first team can reach.
Challenge The record shows who opened what — and, more usefully, who did not.

Outcome

An information barrier you can evidence per file, which is what the client was asking for.

A scenario, not a case study — built from the way these incidents actually run.

What the rules ask for.

Professional secrecy is not a policy here, it is the license to practice. The GDPR sits on top of it, and clients increasingly ask for the evidence themselves.

Professional secrecy

Client confidentiality by profession

Access limited to the people on the matter, and demonstrably so

GDPR

Personal data in every matter

Lawful basis, minimization, and the ability to show who could reach a file

Client audits

The firm is the supplier now

Clients increasingly assess their advisers’ information security before they hand over data

Retention

Files kept long after closing

Matter files outlive the teams that worked on them, and the groups they were in

Orientation, not legal advice. NIS2 applies through national transposition, so sector scope, thresholds and deadlines differ per country — check yours.