Client Portal Software for Legal Teams in 2026
Choosing client portal software for lawyers? Compare secure file sharing, client access and handover controls before uploading confidential matter records.
- Published
- Updated
Choose client portal software for lawyers inside your existing matter system when clients need documents and instructions kept with the file. A separate document-collaboration service suits exchanges with external advisers when your firm can manage its permissions and preserve the complete matter record.
The deciding question is who needs access to which records. A portal that makes uploading easy can still fail your firm if it shares later documents too broadly or leaves messages behind at handover.
Which Portal Approach Fits the Matter?
A legal client portal gives invited people authenticated access to selected matter information. An unrestricted file link can pass from one recipient to another without the same identity check. Secure file sharing needs both an approved recipient and permissions that match the purpose of the exchange.
Start with the portal your firm already uses. Keeping documents beside instructions reduces the work of reconciling separate records. Choose a separate service when the external collaboration needs exceed that portal’s controls or capacity. Assign someone to bring the resulting records back into the matter file.
Portals Within the Matter System
Clio places Clio for Clients in its Core plan and above on the Australian pricing page. It suits a firm already using Clio that wants client communication and shared documents connected to a matter. EasyStart does not include the portal.
Clio’s sharing instructions distinguish selected documents from shared folders. Later additions to a shared folder become available to the client automatically. That makes a dedicated client folder useful, provided staff keep internal advice elsewhere. Its Shared resources view records what was shared, by whom and when.
Actionstep suits firms that need folder permissions tied to participant roles within matter types. Its setup guide distinguishes listing files from reading, uploading, replacing and deleting them. A client who only needs to supply statements does not need every permission.
Actionstep’s client-upload limit is 100 MB per file. Its help guide also states a 2 GB portal storage limit. A matter requiring larger direct client uploads needs another approved exchange route. Giving broader permissions does not increase those limits.
A Separate Document-Collaboration Service
Microsoft SharePoint supports external document sharing through guest permissions. It is a candidate when the firm needs a separately managed document space and has an administrator responsible for access. It does not organise the solicitor’s complete matter record by itself.
SharePoint applies sharing settings at organisation and site level, with the more restrictive setting controlling access. A matter space therefore needs deliberate configuration within the firm’s wider environment. Adding an adviser as a site member can grant more access than sharing one document.
Prefer the existing matter portal for routine client exchanges. Shortlist a separate service when document capacity or external collaboration requires it, and include the extra administration in the decision.
Control Client Access and Confidential Documents
Approve each recipient’s identity and authority before issuing an invitation. Possession of an email account establishes access to that mailbox. It does not establish that the person can receive every document or instruct the firm.
The Law Council’s Australian Solicitors’ Conduct Rules provide the national reference point. Apply the version in force in your jurisdiction. Rule 9 governs confidentiality, while rule 8 addresses client instructions. A portal permission cannot supply missing authority to disclose.
For a fictional family-law matter, assume Priya is your client and she authorises her accountant, Helen, to receive selected bank statements. Priya’s former partner remains the opposing party. Helen needs her own approved access to those statements. The former partner needs a separate disclosure process and must not inherit access to Priya’s advice.
If Priya’s household email remains accessible to her former partner, sending an invitation there defeats the intended separation. Agree a safe address and recovery method with Priya before sending the invitation. Record Helen’s authority, its scope and any withdrawal in the matter file.
Use the following requirements in the supplier demonstration. They are purchasing requirements, not assumed features of every shortlisted product.
- Invitation approval before sending, with cancellation of unaccepted invitations.
- Separate accounts and document permissions for the client and each adviser.
- Firm-enforced multifactor authentication for external users, including account recovery.
- Visible inherited access and identification of administrators who can enter the matter.
- Removal of an adviser from one matter while retaining authorised access to another.
Keep permission to read separate from permission to replace or delete. The firm’s client confidentiality assessment determines permitted disclosure before the software implements it. Assess supplier data flows through a privacy impact assessment when the proposed arrangement calls for one.
Exchange Statements Without Losing Context
Request statements through a named matter folder and keep each upload connected to the request it answers. The solicitor needs to distinguish a successful transfer from a complete response to the request.
For example, ask for the original PDFs for specified accounts and periods. Record which files arrive and which periods remain outstanding. Preserve the originals when a client uploads a clearer copy or a corrected version. A replacement must not silently erase the earlier record.
Clio supports documents attached to portal messages as well as shared folders. Its instructions suggest a dedicated client-uploads folder with an explanatory message. Keep the request and any qualification from the client with the received records, instead of relying on filenames alone.
Actionstep’s document-exchange help says the firm receives no email notification when a client uploads a document or sends a portal message. Assign a portal-checking routine and show clients where receipt is recorded. An email alert to a client about a firm upload is a different event.
SharePoint’s published library limit permits individual files up to 250 GB. Its multi-file ZIP download limit is 20 GB. A large upload allowance therefore does not prove that a whole matter can leave in one download. Document libraries support version history, but the firm still needs a defined version and export policy.
Include a representative large PDF in the demonstration. Show the client-facing size limit and the result of a rejected upload. Confirm that a failed transfer leaves a visible failure rather than a misleading receipt. Acknowledgement of an upload must not imply that a solicitor has reviewed its contents.
Permissioned access controls delivery. It does not establish that every uploaded file is harmless, accurate or privileged. Preserve your firm’s document-security checks and make disclosure decisions before moving material into a shared folder.
Share, Revoke and Audit Access to Client Documents
Revoke access at the level where it was granted and retain a record of the change. Removing one link can leave another permission active. Revocation stops future access through that permission, but it cannot retrieve a copy already downloaded to a recipient’s device.
Clio allows the firm to stop sharing a document through its portal controls. Actionstep lets staff revoke a participant’s portal access and requires portal access to be revoked before closing a matter. SharePoint distinguishes removing a guest’s permissions from deleting an unrestricted sharing link.
Ask the supplier to show the activity record for an invitation and a download. Establish whether it records the named user, action and time. Ask staff to export that record. A list of shared resources is useful, but it is not automatically a complete history of everything a recipient did.
Check administrator access too. Identify who can grant themselves entry, how supplier support obtains access and how those actions appear in the record. Restricting the client’s view does not define the administrator’s view.
Handover Requires More Than a Folder Download
Build a matter inventory before export. Include original documents and relevant versions, portal instructions, attachments, client messages and the access record needed for the handover. Separate any internal records the recipient is not entitled to receive.
Clio’s bulk export guide describes CSV exports of structured records, including communications and matter notes. Treat document retrieval as a separate part of the handover. A CSV of communications does not by itself demonstrate that every attachment and portal conversation is included.
Actionstep supplies a requested takeaway of organisation data to an authorised administrator. Its guide describes database data and documents in protected ZIP files. That organisation-wide process is different from preparing one client’s file. Extracting one matter requires a check that the delivered package excludes every other matter.
Under Queensland’s published conduct rules, rule 14 addresses delivery of client documents on request after completion or termination, subject to an effective lien. Apply your jurisdiction’s rule to the handover. Choose software that lets the responsible solicitor assemble the required documents without exposing another client’s records.
Compare Costs and Test the Shortlist
Compare the annual cost for the same staff and external participants, then test the access and export requirements using synthetic records. A low staff-seat price is insufficient if the required portal sits in a higher plan or export needs paid assistance.
Cost Basis for a Five-Person Firm
Use five staff, 20 client accounts and two external advisers as an illustrative comparison. Specify an annual commitment and exclude GST in every supplier quote. Add implementation separately, then show the total including GST where it applies.
| Option | Relevant plan or charge basis | Storage and external access | Support and handover cost |
|---|---|---|---|
| Clio | Core or above, with a firm-specific quote for five staff | Australian pricing lists unlimited document storage; request terms for the same client and adviser counts | Pricing lists 24/5 support; cost any assistance needed to assemble the sample export |
| Actionstep | Per-user pricing plus implementation, quoted for the Australian firm | Quote the external participants explicitly; portal help states 2 GB storage and 100 MB client uploads | Include implementation and any requested export assistance in the written quote |
| SharePoint through Microsoft 365 Business Basic | $10.50 per staff user per month, paid yearly, excluding GST | Five licences provide a SharePoint pool of 1 TB plus 10 GB per licence; basic guest collaboration does not require a licence in your organisation | Include administration, any additional identity controls and export work separately |
For five Business Basic staff seats, the illustrative licence subtotal is $630 a year excluding GST, or $693 including 10% GST. Add the cost of managing the portal to that licence subtotal. External users needing capabilities beyond basic guest collaboration can require additional licensing.
Clio’s advertised entry price belongs to EasyStart, which excludes the client portal. Compare a Core quote against the same annual assumptions. Actionstep publishes a quote method rather than a comparable fixed total. Require both written quotes to identify external-user charges and storage additions before comparing the totals.
Synthetic Acceptance Test
Create two fictional matters containing invented statements and instructions. Give the sample client access to matter A, while matter B belongs to a different fictional client. The following outcomes are acceptance criteria, not reported trial results.
| Test | Action | Successful outcome |
|---|---|---|
| Valid client upload | Upload an original PDF and answer its document request | Staff retrieve the same file under matter A and see its receipt status with the client’s response |
| Wrong invitation | Invite a controlled test mailbox by mistake, then withdraw it | The withdrawn invitation cannot open the matter, and the record identifies what happened |
| Changed permissions | Change an adviser from editing to reading | The adviser can read the approved file but cannot replace or delete it |
| Revoked access | Revoke an active recipient and retry from a fresh session | The old invitation and saved document URL deny access; a previously downloaded copy remains outside portal control |
| Complete handover | Export matter A with messages, instructions and attachments | Files open outside the service, match the inventory and contain nothing from matter B |
Include a file near the stated upload limit and one above it. Preserve the original when testing replacement. Ask the administrator to demonstrate the access record and the exported record together, using the same fictional matter.
Reject an option if its required workflow depends on making an adviser a broad site member or sharing a folder containing unrelated advice. Choose the smallest permission set that completes the matter’s exchange and handover, and retain the successful sample package as your acceptance record.
FinTrace
Statements in. Evidence out.
FinTrace turns your bank statements into one searchable Excel ledger and a written findings report, with every finding cited to its source page.
FinTrace
See how FinTrace works