Sectors
Google Workspace for law firms
Law firms running Google Workspace need 1 shared drive per matter rather than per department, retention rules aligned to file-closure dates, Vault holds that survive staff turnover, and an ethical-wall mechanism that is enforced by drive membership rather than by asking people to be careful.
| Matter files | One shared drive per matter or client group |
|---|---|
| Ethical walls | Enforced by drive membership, reviewed on conflict check |
| Retention | Rules keyed to matter closure, not account age |
| Holds | Vault holds survive suspension of the custodian |
| Client sharing | Named external accounts, never open links |
| Offboarding | Ownership transfer before suspension, always |
Matter-based structure beats departmental structure
The instinct is to build shared drives around teams: litigation, corporate, property. It works until the first conflict check, at which point a whole department has visibility of a matter it should not. Matter-based or client-group drives cost more administration and are the only structure that makes walls enforceable.
Practically, this means a naming convention, a creation process tied to matter opening, and an archival process tied to matter closure. Firms that get the creation part right and skip the closure part end up with thousands of live drives and no way to apply retention sensibly.
- One drive per matter, named to the matter reference
- Drive creation triggered by matter opening, not by request
- Membership reviewed as part of the conflict check
- Closure moves the drive to an archive org unit with retention applied
- External counsel and clients added as named accounts with an expiry review
Retention that reflects file closure
Retention obligations in legal practice usually run from the closure of the matter, not from the creation of the document or the departure of the fee earner. Workspace retention rules are configured against org units and date ranges, so a rule that satisfies the obligation requires the archival step to actually happen.
Where the obligation varies by matter type, which it usually does, the workable pattern is a small number of archive org units with different retention periods, and an archival decision at closure that puts the matter in the right one. Trying to encode every variation as a separate rule produces a rule set nobody can audit.
Client confidentiality in day-to-day use
The exposures that matter are mundane. Link sharing set to anyone-with-the-link on a document that later becomes sensitive. A departing fee earner whose My Drive holds the only copy of correspondence. An external counsel account left active two years after the matter closed.
Each is prevented by configuration rather than training: external sharing restricted to named accounts, My Drive discouraged for matter material by making shared drives the path of least resistance, and a quarterly external access review that lists every non-firm account with access to anything.
What regulators and clients ask for
Client due-diligence questionnaires from corporate clients increasingly ask specific questions about access control, retention, encryption and incident response. Most of the Workspace-specific answers are the same across firms, and having them written down and evidenced turns a two-week scramble into an afternoon.
We produce that evidence pack as part of a security audit and keep it current on a quarterly cycle for firms on a support agreement. It answers the questionnaire questions, and it is the same document that supports Cyber Essentials or an ISO 27001 scope.
What we see that others don't say
Conflicts and ethical walls in Workspace are enforced through shared drive membership, which means a firm that stores matter files in personal My Drive folders has no enforceable wall at all, regardless of what its policy document says.
What this doesn't cover
- We are not a practice management system. Workspace holds documents and mail; matter management, time recording and billing belong in your PMS.
- We do not advise on your regulatory retention obligations. We implement the periods your compliance lead specifies.
- Ethical walls in Workspace control document access. They do not control what people say to each other, which remains a supervision matter.
- We do not integrate with every legal PMS. Where an integration does not exist, we say so rather than building a fragile one.
Questions we get asked
- Is Google Workspace suitable for a law firm?
- Yes, with matter-based shared drives, restricted external sharing, Vault retention keyed to matter closure and a documented offboarding process. The default configuration out of the box is not suitable; the configured tenant is.
- How do ethical walls work in Google Workspace?
- Through shared drive membership. A fee earner who is not a member of the matter drive cannot access its contents. This only works if matter material lives in shared drives rather than personal My Drive folders.
- Can Vault hold documents after a fee earner leaves?
- Yes. A Vault hold placed on the custodian preserves their data through account suspension and overrides retention rules, which is why suspension rather than deletion is the correct offboarding step.
- How should we share files with clients?
- Named external accounts added to the specific matter drive, with a quarterly review that lists every non-firm account holding access. Anyone-with-the-link sharing should be disabled at domain level.
How this page is verified
Reviewed by Pearl Lemon Cloud security desk, Workspace security and compliance reviewers. Last checked .
- Shared drive membership, Vault hold and retention behaviour reflect Google Workspace and Vault documentation as of 2026-08-06.
- Configuration patterns are drawn from Pearl Lemon Cloud engagements with professional-services clients to 2026-08-06.
- This page describes technical configuration and is not legal or regulatory advice.
Sources you can check
Related pages
Configure Workspace for legal practice
We restructure matter storage, apply retention keyed to closure, and produce the evidence pack your corporate clients keep asking for.