We read your numbers. We never touch your systems.
LawKPIs connects to your practice management, intake, and accounting systems to build Daily Pulse and your dashboards. That connection is read-only, full stop — nothing LawKPIs does can create, edit, or delete a record in Clio, MyCase, Smokeball, Lawcus, QuickBooks Online, or any other system it joins.
What "read-only" actually means
Not a policy promise — a technical limit on what the connection can do.
We pull, we don't push
Each integration uses read-scoped API access. There's no write, update, or delete call available to LawKPIs in any of these connections — the permission simply isn't granted.
Nothing changes in Clio, MyCase, or your books
Your timekeepers, matters, invoices, and ledger stay exactly as your team enters them. LawKPIs reports on that data — it never edits a client record, an invoice, or a journal entry.
Disconnect any time, no cleanup required
Because nothing was ever written back, revoking access removes LawKPIs' ability to read your data and leaves your source systems untouched.
How your data is handled
The short version, in plain terms.
Encrypted in transit and at rest
Data moving between your source systems and LawKPIs, and data sitting in our infrastructure, is encrypted.
SOC 2
LawKPIs operates under SOC 2. If your firm needs documentation for its own compliance or vendor review, ask your account contact.
Access is limited internally
Your firm's data is scoped to your firm's account. Only the people who need access to support you have it.
Practice management first, accounting when you're ready
You can connect just your practice management system to start. Accounting joins when your bookkeeper connects QuickBooks — on your timeline, not a forced bundle.
Security FAQ
Can LawKPIs change anything in my Clio, MyCase, or QuickBooks account?+
No. Every connection is read-only at the API level. LawKPIs pulls data in to build your dashboards and Daily Pulse — it never sends a create, update, or delete request back to your practice management or accounting system. There's no button in the product that writes to your source data, because that path doesn't exist.
Who at LawKPIs can see our firm's data?+
Access is limited to the people who need it to keep your account running and support you when you ask for help. It isn't open to the whole company by default, and it isn't shared across firms.
Where is our data stored, and is it encrypted?+
Data is encrypted in transit and at rest. We don't publish infrastructure specifics on this page, but we're glad to walk through the details on a call or answer a security questionnaire directly.
Do you have SOC 2?+
Yes, SOC 2 is part of how we operate. If you need documentation for your firm's own compliance process, reach out and we'll get it to you.
What happens to our data if we cancel?+
Disconnecting a source system revokes LawKPIs' read access immediately. If you'd like data removed after cancellation, tell us and we'll handle it — ask your account contact for the specifics of timing.
How do we ask a security question you haven't answered here?+
Send it to your account contact or through the contact page. If your team runs a formal security review or vendor questionnaire, we'll work through it with you directly rather than trying to cover every case on a marketing page.
Have a security question we haven't covered?
Ask on a call, or send it through the contact page — we'll get you a straight answer, not a form letter.