- Cloud-hosted practice management adoption crossed 60% of firms by 2025.
- Trust accounting, audit trails, and state retention rules remain the hardest pieces.
- “We tried cloud and came back” usually means a SaaS rewrite, not a hosted Windows app.
- Hosted tiers of mature software retain firms that would otherwise churn to lighter tools.
Professional services firms kept practice management on a back-office server long after other verticals moved on. The reasons were sound: trust accounting carries personal liability, audit trails need to survive bar scrutiny a decade later, and privilege gets messy once a third party touches storage. By 2025, the ABA’s Legal Technology Survey showed 60% of firms running cloud-based practice management, up from 38% in 2019. Aging servers, ransomware events at peer firms, and attorneys working from everywhere finally moved the needle.
Trust accounting and what bar associations actually require
State bar opinions issued between 2020 and 2025 generally permit cloud-hosted trust accounting, provided the firm exercises reasonable care in vendor selection. In practice that means immutable audit logs capturing who viewed or modified ledger data, documented data residency, testable restores of specific transactions, and clear answers about who holds encryption keys.
Hosted deployments of established Windows-based practice management handle most of this natively, because the software was built around these requirements long before cloud was a question. SaaS rewrites sometimes lose that depth and have to rebuild compliance from scratch. That gap is the single most common reason firms switch and then switch back.
Document control and state-by-state compliance
Document management here is not about storage. It is about ethical walls at the document level, instant revocation when a partner leaves, audit logs that show every file a contract attorney touched, and restricted access groups that survive personnel changes. Hosted environments often enforce these requirements more consistently than on-premises deployments, because access control is centralized and no local file server is caching credentials.
National firms face a second layer: compliance varies by jurisdiction, and the system has to enforce the strictest applicable rule per matter. Mature hosted software handles this through configuration, not code forks. One deployment serves firms across all 50 states.
| Requirement | Variation |
|---|---|
| Trust account reconciliation | Monthly in most states, every 30 days in some |
| File retention | 5 to 10+ years, indefinite for certain matter types |
| Conflict check records | Written in some states, verbal permitted in others |
| Client communication retention | 3 to 7 years depending on state and matter |
| IOLTA reporting | Annual in most states, quarterly in a few |
Distributed work and the hosted advantage
Thomson Reuters’ 2025 State of the Legal Market found 78% of attorneys at firms over 50 lawyers regularly work from multiple locations. On-premises deployments handle this poorly. VPNs add latency and break with updates. Self-hosted RDS works but needs IT staff smaller firms do not have.
Hosted practice management running on cloud infrastructure gives attorneys the full Windows application from any device, with identical behavior in the office, at a deposition, or in a hotel. Provisioning a contract attorney takes minutes. Revoking access is instant. Audit logs capture exactly what was touched during the engagement.
Client portals follow the same pattern. Bolting a portal onto an on-prem system requires internet exposure the practice management server should not have. In a hosted environment the portal lives inside the same security perimeter, which is why most vendors now ship portals as part of their hosted tier.
Frequently asked questions
Is cloud-hosted practice management permitted by state bar associations?
Yes, in every U.S. state as of 2025. Opinions vary in wording, but all 50 states permit it provided the firm exercises reasonable care in vendor selection, maintains appropriate security controls, and can retrieve client data on demand.
How does trust accounting work when data lives in the cloud?
The accounting logic is identical. What changes is where data lives and how access is controlled. Reputable hosted deployments provide immutable audit logs, encrypted storage with documented key management, and reconciliation tools auditors can verify. Many state bars now accept hosted records as primary records.
Can we keep our existing practice management software and host it differently?
In most cases, yes. Established Windows-based products run identically in a hosted environment. The application, database, and integrations stay the same. Only the infrastructure underneath changes.
What’s the difference between SaaS and hosted practice management?
SaaS is built from the ground up as a multi-tenant web product. Hosted is established software, usually Windows-based, deployed on cloud infrastructure and accessed through a remote session. Feature depth often differs significantly, with hosted versions keeping the full capability of the original product.
The firms most loyal to depth and compliance are not lost to cloud as a category. They are lost to vendors who never offered cloud as an option for the software those firms already trusted.