IT support for solicitors in Camberley and Surrey
Circuit Minds is a Camberley-based managed IT and Microsoft 365 security provider for law firms with 5 to 50 staff, across Surrey, Berkshire and Hampshire. We look after your computers, Microsoft 365 and client files for a published £45, £55 or £75 per user per month, and we start with a free 76-check security audit.
Free for firms with 5 or more Microsoft 365 users. You keep the written report whether you work with us or not.
What we sort out for law firms
Completion funds that don't get diverted
The SRA found email modification fraud made up 68% of the cybercrime reported to it between 2016 and 2019, with conveyancing a frequent target. We lock down sign-ins and email so a fraudster can't easily take over a mailbox or pose as your firm.
Sign-ins that a stolen password can't open
In 2025 the ICO fined a law firm £60,000 after attackers got in through an admin account without two-step sign-in. Every account we manage, admin accounts included, needs a code from the person's phone. On Secure+Secure+Security-first, built for regulated firms. £75 per user per month, minimum 10 users.Tap or click the name to compare plans, stricter rules too.
Client confidentiality built into the setup
Matter files are opened only by the people working on them, sensitive documents can carry confidential labels, and files go to clients by secure links instead of attachments.
Laptops that can go to court and home
Every laptop is managed centrally: encrypted, kept up to date and protected by antivirus. If one is lost, we lock and wipe it remotely.
Your case management system, properly looked after
LEAP, Clio, Actionstep, Osprey and Proclaim each have their own support desk. We look after what they run on and speak to the vendor so you don't have to.
Answers for insurers and the Legal Aid Agency
Insurers and the LAA ask about two-step sign-in, backups, antivirus and keeping software up to date. We give you the answers in writing, with the evidence behind them.
Who provides IT support for solicitors in Camberley?
Circuit Minds does. We're a Camberley-based managed IT provider and we publish our prices. Our clients are firms of 5 to 50 people without their own IT person, and Microsoft 365 security is our main specialism. Law firms are a good fit because confidentiality and safeguarding client money are already part of how you're regulated.
Remote support covers the whole UK. For Guildford, Woking and further afield, we plan visits in advance and quote the travel upfront. See our Camberley IT support page for the local detail.
What do the SRA, the LAA and UK GDPR expect from a law firm's IT?
The SRA doesn't hand you a technical checklist, but its codes expect effective systems and controls, client confidentiality and safeguarded client money, and you stay accountable even when an outside firm runs your IT.
SRA Code for Firms
Paragraph 2.1 asks for effective systems and controls, 5.2 for safeguarding client money and assets, and 6.3 for keeping client affairs confidential. Paragraph 2.3 says you remain accountable when work is done through others you contract with.
Legal Aid Agency
Firms doing legal aid work hold a contract with the Legal Aid Agency. If that contract started on or after 1 October 2025, the firm must hold Cyber Essentials for as long as the contract runs. The LAA also recommends Cyber Essentials Plus, a version that adds a hands-on technical check.
Money Laundering Regulations 2017
Client due diligence records are kept for five years from the end of the business relationship, then deleted unless another law requires you to keep them.
UK GDPR
If a breach is likely to put people at risk, you must tell the ICO within 72 hours of becoming aware of it. The ICO has fined and reprimanded law firms for missing basic security such as two-step sign-in.
We set up Microsoft 365 so those duties are workable: sign-ins protected, access limited to the people on each matter, and a record of who opened what. Our setup is aligned with these expectations. Compliance itself stays with your firm.
Sources: SRA Code of Conduct for Firms; SRA cybersecurity review (2020); LAA Provider Data Security Requirements v5; Money Laundering Regulations 2017, reg. 40; ICO: law firm fined £60,000 (2025).
Where client files and payments are most exposed
Where risk often creeps in
- Acting on new bank details that arrive only by email
- Contracts and ID documents sent as email attachments
- Old accounts nobody uses that can still sign in with just a password
What helps reduce it
- Email settings that make it much harder to pretend to be your firm, and a call to a number you already hold before any new bank details are used
- Documents shared through secure links that only the intended client can open
- Two-step sign-in on every account, and unused accounts switched off
Not sure how your setup compares? Book the free security audit
How much does IT support cost for a law firm?
Per user, per month, ex VAT. Published, the same price for every firm.
Essentials
Min. 5 users£45/user/month
Remote support 9am-5pm (fair use), Microsoft 365 and computers looked after, security updates, antivirus, spam and scam email filtering, two-step sign-in for everyone
Complete
Min. 5 users£55/user/month
Unlimited remote support, stronger email protection, backup of your Microsoft 365 email and files, staff security training, IT reviews every quarter
Secure+
Min. 10 users£75/user/month
Attacks spotted and stopped 24/7, alerts if your staff's details turn up in data leaks, monthly checks for security weak spots, stricter sign-in rules, priority support, a yearly security review
As a regulated firm holding client money and confidential files, we'd suggest Secure+Secure+Security-first, built for regulated firms. £75 per user per month, minimum 10 users.Tap or click the name to compare plans, for the 24/7 monitoring and yearly security review. It starts at 10 users. Smaller firms are best on CompleteCompleteRight for most growing businesses. £55 per user per month, minimum 5 users.Tap or click the name to compare plans, which includes backup and staff training. Full detail on the pricing page.
Plans require Microsoft 365 Business Premium (or equivalent), billed separately at Microsoft's list price. We manage your licences so you only pay for the ones you use. That licence is what includes the security features mentioned on this page. On-site visits are quoted per visit. In the first three months you can leave with 30 days' notice.
What does the free Microsoft 365 security audit check?
We run 76 checks on your Microsoft 365. We can only look, not change anything, and we send a written, prioritised report. It's free for firms with 5 or more users; the full 108-check audit is £99. Checks that matter most to law firms include:
- whether every account, admin accounts included, needs a phone code as well as a password
- whether old ways of signing in that skip the phone code are still switched on
- whether your email settings stop scammers sending emails that look like they come from your firm
- whether mailbox rules are quietly forwarding or hiding emails, a common sign of a taken-over account
- whether Microsoft 365 keeps a record of activity, so you could investigate a breach within the ICO's 72 hours
What might an audit find?
Illustrative example, not a real client. It shows the kind of finding the audit reports, written up the way the report does.
- Finding
- A fee earner's mailbox has a rule that moves emails containing the word "completion" to a hidden folder.
- Why it matters
- That's a typical sign someone else has access to the mailbox and is waiting to send fake bank details. If a client acts on them, completion money can be lost.
- Fix
- Remove the rule, reset the account with two-step sign-in, check recent sign-ins and alert clients on open matters.
Can you help a law firm get Cyber Essentials?
Yes. Cyber Essentials is a government-backed certificate showing the basic protections against common attacks are in place. It's mandatory for new legal aid contracts, and the 2018 Lexcel standard says legal practices should be accredited against it.
We prepare you. We put the protections in place, check your answers against how things are actually set up, and stay with you through the assessment. The certificate itself comes from an approved certification body, which charges its own fee. On our Secure+Secure+Security-first, built for regulated firms. £75 per user per month, minimum 10 users.Tap or click the name to compare plans plan, much of that groundwork is already part of the service. More on our cyber security page.
How do we get started?
It starts with the free audit and a call to go through the report. If you decide to work with us, we agree a written plan for what gets done first, usually sign-in security and computers, and pace the rest around your work. We connect through Microsoft's own secure access for IT providers, so you never have to share an admin password with us.
Moving from another provider? Our guide to switching IT support provider covers the handover.
Common questions
Do you support LEAP, Clio, Actionstep, Osprey or Proclaim?+
We look after what your case management system runs on: the computers, Microsoft 365 accounts, email, updates and staff access, and we deal with the vendor's support desk for you when something breaks. Cloud systems need little installed locally. Desktop or server systems need updates planned around court deadlines and completions.
How do we stop email fraud on completions?+
Several layers together. Everyone signs in with two-step sign-in, scam email filtering catches lookalike addresses, and your domain's email settings make it much harder for anyone to send emails pretending to be you. The SRA also advises telling clients you'll never change bank details by email, and checking any change by phone. We set up the technical side and give you the wording for clients.
Do legal aid firms need Cyber Essentials?+
Yes, for contracts that started on or after 1 October 2025. The Legal Aid Agency's data security requirements say the firm must hold Cyber Essentials, or an equivalent standard, for as long as the contract runs. It also recommends Cyber Essentials Plus, which adds a hands-on technical check. We prepare you for it as a fixed-price project.
How long do we keep client due diligence records?+
Under the Money Laundering Regulations 2017 (regulation 40), five years from when the business relationship ends, then delete them unless another law requires you to keep them. We set up one secure place for them, with access limited to the people who need it.
What happens if client data is breached?+
If a breach is likely to put people at risk, UK GDPR requires you to tell the ICO within 72 hours of becoming aware of it. On every plan we contain it straight away in support hours: locking accounts, cutting infected devices off the network and stopping it spreading. Investigation and recovery are charged at our hourly rate or quoted upfront, and Secure+ includes up to 8 hours a year of that work.
We use an outside IT provider. Isn't security their job?+
Not under the SRA rules. The Code for Firms says you remain accountable for compliance when work is done through others you contract with. That's why we put the security responsibilities in writing and give you the evidence for your own records.
We're a firm of three. Can you help?+
Our managed plans start at 5 users. For smaller firms we offer the full 108-check Microsoft 365 audit and one-off projects at a fixed, written quote.
What if we already have an IT provider?+
You can still have the free audit as an independent second opinion. If you decide to move, our switching guide explains how the handover works.
Find out where your firm's Microsoft 365 stands, before the next completion.
Free for 5 or more Microsoft 365 users. You keep the written report.