Data security for law firms