Client intake software for law firms - SMB guide

Client intake software for law firms handles four compliance-bound steps: conflict checks, engagement letter signing, identity verification, and secure document collection. Most small and mid-size firms can run all four for $40-150 per month. The $5,000+ annual enterprise platforms aimed at AmLaw firms solve a problem they do not have. The trick is telling the genuinely regulated intake steps apart from the operational habits.

This is for solo practitioners and 2-20 attorney shops who outgrew the email-plus-DocuSign-plus-shared-drive setup, then read the price tag on Litify or top-tier Lawmatics plans. There is a middle. Most of intake runs fine on general-purpose SaaS, and a narrow slice needs a legal-specific tool. Sorting the two is the whole job.

What law firm intake actually requires

The ABA Model Rules and your state bar's rules of professional conduct govern what intake must accomplish. Most of the rest is firm-by-firm preference.

The non-negotiables for nearly every U.S. firm:

1. Conflict check before the engagement starts. ABA Model Rule 1.7 covers concurrent conflicts. Rule 1.18 protects prospective clients whose information you collected even if you never took the case. Run the check before you receive confidential information from a new matter. Not after.
2. A written engagement letter. Rule 1.5(b) requires one when you have not previously represented the client, and Rule 1.5(c) requires it in writing for contingent fees. Most state bars now treat the written engagement letter as the standard for every matter. It stopped being a courtesy.
3. Identity verification appropriate to the matter. For most U.S. firms this is light: enough to know who you are representing. It gets heavier in regulated practice areas, including immigration, real estate closings covered by FinCEN's residential transfer reporting rule, and non-U.S. firms subject to AML regulations. UK firms under the SRA face full Client Due Diligence requirements.
4. Trust accounting separation. Retainer funds belong in an IOLTA or equivalent trust account, not your operating account. Your intake software does not have to manage the trust account. It does have to connect cleanly to whatever does (LawPay, Clio Payments, your bank).
5. A confidentiality-appropriate channel for documents. Email attachments are not categorically prohibited. But multiple state bars, California's Formal Opinion 2010-179 among them, have advised attorneys to weigh encryption against the sensitivity of the matter.

Everything else (branded portals, automated welcome sequences, intake CRMs that score leads) is operational, not regulatory. A paper notebook can run a compliant intake process. The question was never whether you can. It is whether you should.

The build-vs-buy decision: where you actually need a legal tool

Most articles in this space conflate "law firm intake software" with "law firm practice management software" and recommend Clio, MyCase, or PracticePanther. Those are case management systems that happen to include intake features. Buying one to run intake is buying a truck to move a couch. It works. It is not the cheapest or simplest way to handle intake alone.

Here is the honest breakdown of which intake steps require legal-specific tooling and which do not:

The pattern: legal-specific tools for trust accounting, KYC where required, and integration into case management. General-purpose SaaS handles the rest. That is the entire list.

For the underlying form mechanics that apply to any vertical, see the client intake form guide.

Engagement letters and e-signature

The federal ESIGN Act of 2000 and the Uniform Electronic Transactions Act (adopted by 49 states; New York adopted the similar ESRA) make electronic signatures on engagement letters legally enforceable in all U.S. jurisdictions for the kinds of contracts law firms typically use. There is no "lawyer-only" e-signature standard. DocuSign and Dropbox Sign are used for engagement letters every day.

What you actually need to get right in the engagement letter itself:

• Scope of representation (what you are and are not doing)
• Fee structure with specific dollar amounts or rate schedules
• Trust account handling for retainers
• Costs and disbursements policy
• Termination conditions
• Conflict-of-interest disclosure and waiver if applicable
• For contingency cases, the contingency percentage and how costs are deducted

These are content requirements set by your state bar. The tool you sign them in is your choice. A "legal e-signature" product does what DocuSign does, at a markup. I would not pay for the label.

One feature is worth paying for: template-based document generation. It lets non-attorney staff send the correct engagement letter for the correct matter type without rewriting it each time. Clio Grow, Lawmatics, and most modern intake platforms offer it. Documate (now Gavel) handles heavier document assembly when your engagement terms vary a lot by matter.

Conflict checks: the step that resists automation

This is where small-firm intake usually breaks down. A conflict check is not a feature you can buy off the shelf. It is a search across every party you have ever represented or been adverse to. Then their related entities, opposing counsel, witnesses, and anyone whose interest could create a positional conflict. No vendor knows those names. You do.

For solo practitioners with fewer than 100 historical matters, a maintained spreadsheet with party names, related entities, and matter status meets the standard. Search it before opening any new file. Document that you did the search.

Above 100 matters or with multiple attorneys, you want:

• A central client and party database that everyone updates when a matter opens or closes
• Searchable by name, alias, related entity, and matter
• A logged search result attached to each new matter file

Most case management systems (Clio Manage, MyCase, PracticePanther, Smokeball) include this. Run intake through a separate tool and the check still has to land against your case management system's party database. The intake tool collects the names. The case management system checks them. Get that handoff working before the volume arrives, not during.

ID verification, AML/KYC, and trust accounting

ID verification for most U.S. law firms means seeing a driver's license or passport and matching it to the person sitting across the table or on the Zoom call. A request through an encrypted intake form is sufficient. Content Snare, Clio Grow, and most encrypted intake tools collect ID documents with encryption at rest. That is the whole requirement.

ID verification becomes a regulated process when:

• You are a UK or EU firm subject to AML regulations
• You are handling residential real estate transfers in a U.S. jurisdiction covered by FinCEN's residential beneficial ownership reporting rule
• Your matter involves anti-money-laundering checks for compliance reasons

For these, you want a dedicated KYC vendor: Persona, Veriff, Jumio, or Onfido. They verify the document itself (is the ID real?) and run biometric matching (does the face match the ID?). A general intake tool collects a JPG of a driver's license, which does not satisfy AML requirements. Storing a picture is not checking it.

For retainer collection, LawPay and Clio Payments handle IOLTA segregation automatically. Stripe and Square will take the money and leave the routing to you. Manual trust routing is where most bar grievance complaints originate. The $20-40 per month for LawPay is cheap insurance.

Three intake stacks by budget

Here are the stacks I would actually recommend at three budget points for a U.S. firm in a non-AML practice area. Prices are monthly per firm unless noted as per-user.

Two notes on the table. First, the per-user pricing for Clio Grow and Lawmatics is approximate, and it moves with tier and contract length. At solo or small-firm volume you are also buying client-facing CRM features (lead scoring, email sequences, marketing automation) that small firms rarely use. Second, the lean stack is not a step down in compliance. Every step still meets the ABA Model Rules. It is a step down in convenience. Those are two different purchases.

For a practical look at the same problem in adjacent verticals, client portals for financial advisors and client portals for accountants handle similar trade-offs in regulated industries.

A practical 10-step intake sequence

The sequence below is what I would set up for a 1-5 attorney firm running on the mid-tier stack. Adapt the tool names to whatever stack you actually run.

1. Inquiry capture. Prospective client fills out a web form on your site. Capture: name, contact, matter type, opposing parties, jurisdiction, and a free-text description. Tag the matter type so it routes to the right attorney.
2. Conflict check. Run the prospective client's name and any disclosed opposing parties against your case management system's party database. Log the search result with a date and the name of whoever ran it.
3. Intake call scheduling. If no conflict surfaces, send a Calendly or Cal.com link. Block 30 minutes.
4. Initial consultation. Discuss scope, fee structure, and likely engagement terms. Take notes that map to the engagement letter template you will send.
5. Engagement letter generation. Pull the right template, fill in the client name, scope, fee, and any matter-specific terms. Send for e-signature.
6. Retainer collection. Once the engagement letter is signed, send a LawPay payment request for the retainer. Funds route to the IOLTA. Send the receipt and a trust account ledger entry.
7. ID and document request. Send an intake form for the documents you need: ID, prior counsel records, contracts, correspondence, and anything matter-specific. Use an encrypted portal, not email.
8. Matter creation. Once intake documents are returned, open the matter in your case management system and link the intake record.
9. Welcome and next-steps email. Tell the client what to expect: who is on the matter, how to reach you, expected timelines, and how to use the portal for ongoing document exchange.
10. Internal handoff. Notify the attorney and paralegal that the matter is active. Schedule the first work task.

A general client onboarding checklist covers the structural pieces of any service-business onboarding without the legal-specific compliance layer if you want to compare.

When to pay for a legal-specific intake platform

Three signals tell you that you have outgrown a general-purpose intake stack:

• Volume. Above roughly 200 inquiries per month, one intake coordinator becomes the bottleneck for routing and conflict checks. Lawmatics, Clio Grow, and Captorra exist to automate the routing, status tracking, and reporting at that volume.
• Multi-attorney conflict surface. Once you have more than five attorneys taking unrelated matters, a spreadsheet conflict log is no longer defensible. You need a real database with role-based access.
• Marketing intake. When paid ads or referral partners send you matters, somebody has to track attribution. That is when the marketing-CRM features in Lawmatics or Clio Grow start to pay for themselves.

If none of the three applies, $100+ per user per month for a legal-specific intake CRM is hard to justify. Content Snare, or a self-built combination of Typeform, DocuSign, and LawPay, will run a compliant intake at one-third the cost. Same compliance posture. Less software.

A note on the tool behind this blog: it sits in the middle tier above. Its e-signature support handles engagement letters. Its encrypted document storage covers the document-collection step in the same workflow. That is two of the four compliance-bound intake steps. It does not handle KYC verification or trust accounting, so for those you still need a dedicated tool. That gap is not specific to Portico. Every general-purpose intake platform has it.

A note on what counts as "compliance" in legal intake

Most of what gets sold as "law firm compliance" is operational hygiene with a compliance label. A branded portal is not required by any rule. Lead routing is not required by any rule. Automated welcome sequences are not required by any rule. These are useful operational features, and individual firms benefit from them. They get sold as compliance because compliance prices higher than convenience.

The actual compliance surface in intake is narrow:

• Conflict check before receiving confidential information (Rule 1.18)
• Written engagement letter with required content (Rule 1.5)
• Trust account segregation for retainers (state IOLTA rules)
• Document confidentiality appropriate to the matter (state confidentiality rules; sometimes encryption advisories)
• Where applicable, AML/KYC and FinCEN-specific verification

A stack that covers those five points compliantly is enough. Anything past them is a productivity decision, not a regulatory one. Knowing which is which is how a small firm spends $100/month where a peer spends $1,000/month for the same compliance posture. The rule book does not charge extra.