Client Onboarding Software for Law Firms (UK): Buy or Build?

A UK law firm may not need a new onboarding platform. It needs each new client and matter checked in the right order, with details entered once and the result landing in the practice management system. Client onboarding software for law firms is worth buying when a legal-specific product already covers your steps and connects to the system you run. Where it does not, the alternative is to automate the gaps around that system, which keeps your own risk policy in the flow.

This is the law-firm companion to our guide to client onboarding software and automating your own stack, which covers the identity rules, published tool prices and a three-year cost example. We do not repeat those here. This article covers what is specific to solicitors: conflict checks, matter-level risk assessments, source of funds, client care, data protection and the buy-or-build call. Our client onboarding automation starts from £5,000 for one client journey. Nothing below is legal advice.

Key takeaways

• Law firm onboarding does two jobs at once: the regulatory checks (conflicts, identity, source of funds, risk assessment) and the commercial set-up (client care, engagement letter, matter opening).
• The SRA expects a written client and matter risk assessment for in-scope work, so each new matter needs its own onboarding, even for an existing client.
• Software can chase documents, run electronic checks and open the matter. The SRA says firms should not outsource decision-making to a digital provider, so a fee earner’s judgement has to stay in the flow.
• Buy a legal-specific tool when it matches your steps and links to your practice management system. Automate around that system when your risk policy, matter types or records do not fit a fixed product.

What does law firm client onboarding have to cover?

Law firm client onboarding is two jobs run together. The regulatory job covers conflict checks and, for work in scope of the Money Laundering Regulations, client due diligence and written risk assessments. The commercial job covers the client care information, the engagement letter and opening the matter. A tool that does only one of them leaves your team doing the other by hand.

Assess each matter as well as each client. The SRA’s guidance on the client and matter risk template says firms in scope must carry out a written client and matter risk assessment. It says the assessment should be done at the beginning of the client relationship and reviewed at appropriate intervals. The template is optional, and the SRA tells firms that use it to adapt it to suit their firm. A returning client with a new matter is therefore a new onboarding event, so a flow built only around the first meeting is not enough.

Two layers of guidance sit above the matter. Firms also write a firm-wide risk assessment, and the SRA says they must take its sectoral risk assessment into account when they do. The latest revision of the Legal Sector Affinity Group guidance was approved by HM Treasury and took effect from 23 April 2025. The SRA treats it as official guidance for the firms it supervises for AML (SRA). Your onboarding questions should come from what those documents say about your firm’s risks.

Which law firm onboarding steps can software do?

Software can chase documents, run checks and record the results. The decisions stay with people. The table splits the usual steps into what you can automate and what stays with a fee earner.

Step	Software can	A fee earner must
Conflict check	Search past clients and matters	Judge whether a hit is a conflict
Client identity	Collect ID and run the electronic check	Decide on unclear or failed results
Source of funds	Request, chase and log documents	Read them and judge if the funds make sense
Risk assessment	Pre-fill answers and suggest a rating	Set the rating and record the reasons
Client care letter	Draft by matter type and send for e-signature	Agree scope, price and who the client is
Matter opening	Create client and matter in your system	Release the matter for work

Read down the middle column and you have the automation scope. Read down the right column and you have the review points that should hold the flow until someone has acted. The hold is the useful part: the matter should not open while a conflict decision, a source of funds record or a risk rating is missing.

Conflict checks and client care letters

Run the conflict check before you collect anything else. Under the SRA’s Code of Conduct for Solicitors, you do not act if there is an own interest conflict or a significant risk of one (paragraph 6.1). Paragraph 6.2 sets the rule for a conflict of interest in a matter, with exceptions. There is little point verifying the identity of a client you cannot act for.

A conflict search needs the names of the client, the other side and related parties, matched against every client and matter the firm has held. That history lives in your practice management system, so the search has to run against it directly and not against an export. Software can run the search and flag possible matches. Whether a match is a conflict stays a decision for a solicitor.

Capture who the client is. The Code requires you to identify who you are acting for in any matter (paragraph 8.1). Joint buyers, a company and its directors, or a trustee and the beneficiaries each need a clear answer at intake. The identity check, the engagement letter and the risk assessment all follow from it.

Generate the client care information from the same data. The Code requires you to inform clients in writing at the time of engagement of their right to complain, how to complain and any right to complain to the Legal Ombudsman (paragraph 8.3). If you publish the availability of a service such as residential conveyancing to individuals as part of your usual business, the SRA’s Transparency Rules also require cost information in a prominent place on your website. Drafting the engagement letter from the same fee data you publish keeps the figure a client sees at onboarding in line with the one on your site.

AML client onboarding for solicitors: what the SRA found

The SRA’s Anti-Money Laundering Annual Report 2024-25, published on 30 October 2025, says that of the 5,873 files it reviewed, 5,026 needed source of funds or wealth checks. It found that 10% of those files had no source of funds checks despite being required. Where documents had been gathered, the source of funds had not been scrutinised in 18% of the files it looked at.

Those are two different failures, and software helps with only one. It can stop the first: the matter does not open until a source of funds record exists. It cannot stop the second, where a document arrives, the box is ticked and nobody reads it. A flow that treats “document received” as “check done” would repeat that failure at speed. Build in a step where a named person records what they concluded and why.

Source of funds is not the same as source of wealth. The SRA’s compliance Q&A says it is the firm’s responsibility to be satisfied that funds come from a legitimate source. It also says a source of wealth check must be undertaken when funds are coming from a politically exposed person, and it lists further cases. Your intake form should ask where the money for this matter is coming from, and whether the person funding it is the client.

Our general guide covers the identity and record-keeping rules themselves. This section is about how the regulator tests client due diligence for law firms in practice.

What do client onboarding tools for law firms do?

Legal-specific onboarding products, sometimes sold as legal client intake software, combine a mix of identity and AML checks, client care letter signing and payment collection, and some link to practice management systems. At the time of writing (October 2026), two examples whose own pages we have read are below. They are examples of the category in no particular order, and we have not tested either.

• Legl describes client onboarding, client due diligence, risk assessments and ongoing monitoring. It says it is certified under the UK Digital Identity and Attributes Trust Framework and that it integrates with practice management, case management and document management systems. It says its pricing is pay-as-you-go and based on what a firm uses.
• Osprey Approach describes InMyNameKYC as an app for identity verification, AML and KYC checks, document signing and payment collection, with client care letter signing in its feature list. The page publishes no price.

Our general guide lists published prices for several ID and AML providers, if you want a cost comparison.

What the SRA says about trusting the result. In its compliance Q&A, the SRA says this kind of technology is a tool like any other, and that whether to use it is ultimately the firm’s decision. It also says firms should not outsource decision-making itself, and that a firm cannot rely on a digital client due diligence provider in the meaning of reliance in regulation 39. Whatever you buy or build, the provider’s pass or fail is an input. The decision stays with a named person at your firm.

Three questions sort the products faster than a feature list:

• Does it write the client and matter into your practice management system on your current plan, or does someone re-key it?
• Does it run your firm’s own client and matter risk assessment, or only a fixed form?
• Does it treat a returning client with a new matter as a new onboarding, with the checks that implies?

Data protection: the notice and the selfie check

Give the notice at intake. Regulation 41 of the Money Laundering Regulations 2017 says personal data obtained for the purposes of the Regulations may only be processed in limited ways, chiefly to prevent money laundering, terrorist financing or proliferation financing. Before starting a business relationship, a firm must give a new client a statement to that effect, alongside its UK GDPR privacy information. Build it into the intake screen. Keep ID evidence out of marketing lists and CRM campaigns unless your data protection adviser confirms the use is permitted.

Ask how a selfie match is handled. If an electronic ID check matches a selfie to the photo on an ID document, the ICO’s biometric recognition guidance is relevant. It describes verification as a one-to-one match, and its example of a rental company comparing a face with a driving licence photo involves processing special category biometric data. The ICO says the guidance is under review following the Data (Use and Access) Act, so check the current version. Ask any provider how it handles that data and which legal condition it relies on.

Client onboarding software for law firms: buy or build?

Buy when a legal-specific tool covers your steps and links to your practice management system. Automate or integrate when the gaps sit between systems you already own. You can also mix the two, buying the ID check and automating the joins around it.

If this is true	Lean towards	Because
A legal tool covers your steps and links to your system	Buy	Less for you to maintain
Your risk form differs by matter type	Automate	You set the rules
Staff re-key details between systems	Automate the joins	Enter once, use everywhere
You run several systems after a merger	Integrate	One flow over many systems
Your flow includes witnessed signing	Build that step	Witnessing needs design work

What we build. Our client onboarding automation has two published tiers. Onboarding automation, from £5,000, is one client journey: forms, documents and e-signing collected in order, client details entered once, and automatic chasing for missing information. Onboarding platform, from £12,000, is for complex or regulated intake: KYC and identity checks built into the flow, a branded client portal, accounts created across your systems and an audit trail for every client.

Two neighbouring services cover the gaps. Intelligent document processing starts from £5,000 for one document type, such as the forms clients return at intake, with human review where the AI is unsure. Systems integration starts from £5,000 for two systems, such as your onboarding tool and your practice management system. If you are weighing the cost of the time saved, our guide to where automation pays off shows how to work it out.

What we have and have not built. We have not built an onboarding platform for a law firm. The nearest work is Gemdarr, an online will platform with a guided questionnaire and a DocuSign-integrated signing and witnessing flow. We would build the checks to run automatically and route anything unclear to a named fee earner, and we would not build a flow that decides whether to take on a client. If a legal-specific product covers your steps, we will tell you to buy it.

Next step: list your matter types

For each matter type, walk through the six steps in the table above. Mark where a person re-keys data, where a check can be skipped, and where a document arrives without anyone reading it. That one page shows whether a legal-specific tool covers you or whether the gaps sit between systems you already own.

If automation is the answer, our client onboarding automation starts from £5,000 for one client journey, or from £12,000 for regulated intake. Scope and price are fixed before work starts, and you pay by milestone as each stage is delivered. You can cancel within the first 21 days of a build for a full refund, and all code and IP are yours once delivered and paid for. Our legal and professional services page covers the wider sector.

Bring that page to the free 20-minute consultation below. We will tell you which route fits, including when buying a tool is the better answer.