"A client almost wired funds to a fake account"
Fake payment-change emails target firms that handle real estate closings and settlements. Email filtering, multi-factor sign-in and a simple callback rule stop most of them.
Client files have to stay confidential, and a filing deadline doesn't move because a laptop died. We secure and support the systems your firm runs on, for practices in London, Windsor, Sarnia, St. Thomas and Woodstock.
Fake payment-change emails target firms that handle real estate closings and settlements. Email filtering, multi-factor sign-in and a simple callback rule stop most of them.
Matter documents end up spread across a shared drive, personal laptops and email attachments. One structured, permissioned file store makes them easier to find and easier to protect.
Cyber insurance renewals ask about multi-factor sign-in, endpoint protection and backups. We set those controls up and give you the details to answer the questionnaire accurately.
Ontario lawyers must hold client information in strict confidence under the Law Society of Ontario's Rules of Professional Conduct. Most firms are also subject to PIPEDA, the federal privacy law. Here is how each requirement maps to the work we do.
| What's required | What CVN puts in place |
|---|---|
| Keep client information confidential (LSO Rules of Professional Conduct, Rule 3.3) | Individual accounts with multi-factor sign-in, encrypted laptops and phones, permissions set by matter or practice group, and same-day account removal when staff leave |
| Use safeguards suited to how sensitive the information is (PIPEDA) | Endpoint detection and response on every device, email filtering for phishing and payment fraud, prompt security patching, and encrypted email for sending documents to clients |
| Report breaches that create a real risk of significant harm, and keep a record of every breach (PIPEDA) | A written incident plan, plus a dated record of what happened, which files were involved and what was done, so you can decide what you must report |
| Understand the technology you use, and stay responsible for the providers you hire | A plain-language summary of your systems, a confidentiality agreement at onboarding, and named technicians |
| Keep files available through hardware failure, theft or ransomware | Encrypted, versioned backups that we monitor and test-restore, and a recovery plan with an agreed target for how long you can be down |
This is a practical summary, not legal advice. The Law Society of Ontario and the Office of the Privacy Commissioner of Canada publish the current rules and guidance. We handle the technology side and document it, so you can show what safeguards are in place.
We don't replace your software vendors. We look after everything your practice software depends on, and we deal with the vendor's support team for you when a problem turns out to be on their side.
Fraudsters watch for closings and settlements, then send a convincing "updated banking details" email from a look-alike address. We filter those emails and train staff to confirm any change by phone using a number already on file.
We publish our prices, which most IT providers in the region don't. Rates are in Canadian dollars, billed monthly, plus tax.
Unlimited remote helpdesk, 24/7 monitoring, patching, managed antivirus and a password manager. Suits a sole practitioner or a small firm on cloud software.
Everything in Essential, plus unlimited on-site support, the full security suite with email protection, cloud backup and disaster recovery, and priority emergency response.
For multi-office firms. Adds VoIP, hosting, a technology roadmap and controls planned around your firm's policies and insurer's requirements.
We're based at 615 Commissioners Rd E in London. Remote support covers every firm we look after. On-site visits cover London, St. Thomas, Woodstock, Sarnia and Windsor, plus the towns in between.
We'll ask how your firm handles accounts, email, devices and backups, and tell you the two or three things worth fixing first. No obligation, and no sales pitch on the call.