Free Firm Risk Check
14 categories, 37 questions, about 10 minutes. Your answers produce a TrustScore and the three gaps to close first.
Answer scale
Not in place · Done informally · Written down · Has an owner and done consistently · Checked by someone else
If you're a solo, an outside bookkeeper or CPA counts as "someone else".
No signup. Answers save on this device as you go, so you can leave and finish later. Your report is emailed only if you ask for it.
You already run the firm. This shows which parts of it depend on memory, and which parts would hold up if someone asked to see the record.
A date entered once instead of twice. A conflict check that lived in someone’s head. A reconciliation skipped in a busy month. None of it reads as a problem until someone asks for the record.
Most firms can list their software but not their weak spots. The check turns that into a short list: what is missing, what has no owner, and what has no set cadence.
A dated reconciliation with initials on it, or a conflict check with a name and a time, answers the question. "We do it consistently" leaves it open.
Answer now, then again next quarter. The score moves when the work moves, so you can see which changes actually stuck.
Fourteen areas of practice, thirty-seven questions. Each area carries a weight, so trust accounting and client intake move the score most.
Monthly three-way reconciliations, fee transfers tied to an invoice, and the records behind your annual certification.
A recorded conflict check before the file opens, signed engagement letters, and confirming wire instructions by phone.
Where client information lives, how it leaves the firm, and whether the devices holding it are locked and encrypted.
Multi-factor authentication, same-day removal of access when someone leaves, and who holds admin rights.
Which vendors can see client data, whether the agreements are in place, and when each was last reviewed.
Which AI tools are allowed, what may go into them, and who reviews the output before it leaves the firm.
The four core policies in writing, who owns each one, and when it was last reviewed and acknowledged.
A named owner and a second check for each obligation, plus a log that tracks problems until they close.
Deadlines calendared twice, and whether anyone other than the responsible lawyer can see the status of a matter.
How fast a full client file comes together, your retention schedule, and whether templates are version-controlled.
A monthly look at receivables aging and documented approval for write-offs, discounts, and refunds.
Confidentiality agreements and onboarding before staff open files, annual training, and current personnel records.
A written incident plan the firm has walked through, and the evidence your carrier would ask for.
Automatic backups stored separately, a restore tested recently, and who protects matters if you cannot practice.
This is a self-reported snapshot of your firm's controls. It is not a legal opinion and does not tell you whether you comply with any rule.
Answer the questions and you will see your band and the area that needs attention first. The full breakdown, every area score, and your three priority fixes come next.
You are not signing up for anything. The report is emailed only if you ask for it.