Industries Served / Law Firms
Cybersecurity & litigation support for law firms.
Law firms call Veil for the technical side of a matter: eDiscovery, a client’s data breach, stolen crypto to trace, or a security standard a client or an insurer requires. After a breach, firms also refer the client to Veil to fix what failed so it does not happen again. Veil performs the requested services and provides the information counsel needs to support their legal strategy.
How Veil helps
Where Veil supports legal matters
Discovery in litigation
Veil hosts, processes, and supports the review of the data once counsel or the forensic provider delivers it. Veil works with counsel to set the relevance and privilege criteria, narrows the set to what needs review, and produces in the format the order requires, with Bates numbers, redactions, and a privilege log.
Explore eDiscovery →Data breach and notification matters
Veil reviews the breached data to find whose PII or PHI was exposed. After working with counsel to set the review protocol, Veil’s U.S.-based reviewers analyze the data and deliver an accurate notification list in the format the notification vendor requires. Records for the same individual are combined into a single entry, with the exposed information documented and linked to its source file, so each person is counted once in the final population.
Explore Breach Data Review →Asset tracing and crypto fraud
Veil traces stolen or diverted crypto on the public blockchain record and works with counsel to shape the report for its use, whether that is a demand letter, a request to an exchange, an insurance claim, a law enforcement referral, or an expert counsel retains. Each finding is marked as verified from the record or inferred from patterns, and the report supports the recovery effort rather than recovering the money on its own.
Explore Crypto Tracing →Hardening after an incident
When a client has been breached, Veil works with the client and its counsel to find what failed, fix it, and put in place the policies and plans the client will be asked to produce. The work can run in tandem with incident recovery, so the client comes out of the incident with a cybersecurity strategy in writing and the implementation under way to reduce its risk. Law firms refer their clients to Veil for this work, and Veil provides the same services to the firm itself.
Explore Cybersecurity →Client compliance and security reviews
When a client has to meet a security standard, whether a regulation such as HIPAA or GLBA, a contract requirement such as CMMC or SOC 2, or a customer’s security questionnaire, Veil measures the client’s program against it, closes the gaps, writes the policies, and assembles the evidence the auditor or the insurer requires. Counsel receives the findings to support the advice. As firms entrusted with guiding clients through cybersecurity incidents and compliance obligations, law firms also engage Veil to perform the same work for the firm itself.
Explore Compliance →What makes these matters difficult
The dates are set
Notification requirements start the moment data is exposed, and discovery deadlines are set by the court. When courts, clients, partners, and insurers seek answers, the size of the data is not an excuse. Veil staffs the work to meet the dates.
Forensics is not enough
Forensics is meant to identify what the attacker did. It does not say whose PII or PHI was exposed, who needs notice, or what to tell the carrier. Veil works with counsel to answer those questions from the data itself, so the client’s notices go out on the right facts.
They want answers now
Opposing counsel, regulators, customers, and the client’s own security team will ask what was exposed and how far it reached, and they will not wait for the review to finish. Veil expedites the review and documents the sources, assumptions, and findings as the work is done, so counsel has the answer before the question is asked.
No in-house security team
Many clients come into an incident with an outside IT provider and no dedicated security staff. The cybersecurity questions land on the client, who lacks the expertise to answer them. Veil steps into that role, works with the client’s IT provider to get the right answers, and reports back to counsel.
Technical support for counsel
20+ years of founder experience across military, federal, and regulated environments
Veil works with counsel from the first question through the final report, and the findings are written to support the legal strategy
Sources, assumptions, and findings are documented as the work is done, so they hold up when courts, regulators, or the client’s customers ask
Tell us what the matter is.
Whether a client has been breached, a production is due, funds need tracing, or a security standard has to be met, share the type of matter and the date it runs against, and keep the details for the call. An experienced professional will normally respond within one business day.
Request a Free Consultation