Insights for California Family Lawyers
Is there family law software with identity theft protection or a secure client portal?
Yes. In this buyer’s mouth, “identity theft protection” usually means (a) you are not emailing FL-150 financials as PDFs and (b) the vendor does not train AI on client files. You want encrypted client intake behind a portal the client logs into. Cloud tools are allowed if you do Formal Opinion 2023-208 diligence.
· FamilyLawyer.software
Every year a California family lawyer types “identity theft protection” next to “family law software” and gets a pile of consumer credit-monitoring ads, plus three practice-management vendors waving a lock icon. None of that is the question. The question is whether last night’s FL-150 — wages, accounts, Social Security-adjacent identifiers, sometimes a DV history — is sitting as an attachment in Gmail, or sitting behind a login you issued.
There is no public market-share data for California family-law portals, and I am not going to invent a “most secure” ranking. I am also not going to recite SOC 2, HIPAA, or cyber-insurance claims a product page does not make. HIPAA is the wrong statute for a divorce file anyway. Formal Opinion 2023-208 is the right cite. Architecture is the right test.
What “identity theft protection” actually means in this RFP
LifeLock, Aura, and Norton are a search collision. The Lighthouse query that dumped those results is a buyer using consumer language for a lawyer problem. In this practice, the phrase almost always collapses into two requirements:
- The firm is not emailing financials. The client logs into a portal. The interview is encrypted in transit. Completed Judicial Council forms do not go out as PDF attachments for the client to forward to a sibling, an opposing party, or a shared iCloud account.
- The vendor does not train AI on client files. A disclosure questionnaire that becomes someone else’s training corpus is a Rule 1.6 event. Data & Divorce (May 2025) said it in family-law English. ABA Formal Opinion 512 (29 July 2024) said it for generative AI: boilerplate consent is not informed consent to put confidences into a self-learning system.
If a salesperson answers the identity-theft question with a badge and cannot answer those two sentences, you are not having the same conversation.
The failure mode is the PDF, not the missing badge
Paper FL-150s and emailed questionnaires are how identity theft actually happens in this office. Someone forwards the PDF. Someone prints it at a hotel business center. Someone’s spouse still has the old Gmail password. A portal does not make you immortal. It removes the copy in transit, which is the copy you cannot later un-send.
TLS is table stakes. Diligence is who holds the keys, who can download, whether the file trains a model, and whether you can export or delete it. The rule-by-rule version is using divorce software under California ethics rules. This post is the architecture test those rules imply.
A portal is not a PMS inbox
Clio, MyCase, and Smokeball all sell a “client portal.” They mean messages, invoices, and a place to drop a PDF. Useful. Different job. The portal this query is hunting is a guided interview the client lives in for two or three evenings, that writes the FL-series from one record, that the lawyer — not the client — downloads. Lawmatics and Clio Grow are a third job. Do not automate the consult form while the disclosure is still a 14-page attachment.
| Pattern | What the client does | Where the FL-150 lives | Identity-theft problem it does not solve |
|---|---|---|---|
| Emailed questionnaire / PDF FL-150 | Fills a form, hits send, often from a shared account | Two inboxes, two devices, often a printout | The copy in transit. This is the failure mode. |
| PMS client portal (Clio, MyCase, typical Smokeball) | Messages the firm, pays, uploads a PDF | Whatever PDF they uploaded, still a PDF | Not a California interview-to-packet engine. Contacts yes; reconciled FL-142 / FL-150 generally no. |
| Horizontal automation you send (Gavel questionnaire, Clio Draft library) | Fills your questionnaire, or you fill it | Depends on how you configured sharing and generation | You are the developer of the workflow. Who can download is a setting you can get wrong. |
| Consumer B2C interview (Hello Divorce, DivorceWriter, Guide & File) | Logs into their brand, often files | On the consumer vendor’s system, under the consumer’s account | You are not the attorney of record on the default path. Their portal is not your portal. |
| Lawyer-gated CA interview portal | Logs into a host you issued, completes a guided interview over sessions | Behind the login; completed docs stay on the lawyer side | Still requires 2023-208 vendor diligence. Architecture is not a substitute for reading the terms. |
SuperDocs’ JurDocs portal is a lawyer-facing intake/e-sign portal with a published security page — more than a lock icon, still not a reason to skip the opinion’s checklist. DivorceDocs markets a client link for FL-150 / FL-142 / FL-160. Treat each as a vendor claim until you have walked a file through who can download.
Formal Opinion 2023-208 is the diligence, not the badge
Formal Opinion 2023-208 is framed as a remote-work opinion. Read past the headline. The committee’s cloud-vendor paragraph is the part that applies to every family-law intake portal: investigate reputation, history, security, and backup; limit access to confidential information; review the terms of service for data security and breach handling; periodically monitor so the vendor’s practices stay compatible with your duties. If you cannot evaluate the technology, consult someone who can. “I clicked Accept” is not diligence. Neither is “they said they have identity theft protection.”
Rule 1.1 Comment [1] still requires you to keep abreast of the benefits and risks of relevant technology. The California Lawyers Association Ethics Spotlight named family-law support software as the example. You do not get to plead ignorance of the box holding the FL-150.
Questions that beat a homepage lock icon
| Ask in writing | Why it is the identity-theft question |
|---|---|
| Does the client log in, or do we email the questionnaire? | If you email the FL-150 data, you do not have a portal. You have a nicer PDF. |
| Who assigns and resets the password? | Lawyer-issued credentials are access control. A public “create account” button is a consumer site. |
| Can the client download completed Judicial Council forms? | If yes, they can forward the packet. Review-before-file dies the moment they have the PDF. |
| Does every client email also go to the firm? | Rule 1.4 communication plus Rule 5.3 supervision of the nonlawyer tool. |
| Do you train models on customer files? | Half of what this buyer means by identity-theft protection. Get a written no, or do not put the file there. |
| Where is it hosted, who are the subprocessors, how do we export or delete? | 2023-208: security, backup, terms, ongoing monitoring. “The cloud” is not an answer. |
Notice what is not on that list: a HIPAA BAA, a SOC 2 Type 2 PDF I have not seen on the product pages for the California interview tools in this category, and a cyber-insurance certificate used as a substitute for the six questions. If a vendor publishes those, read them. If they do not, do not let sales invent them, and do not let me invent them either.
What sits in that portal — and why one login beats six emails
The FL-150 and FL-142 are the obvious payload. They are not the only one. The same interview captures the UCCJEA declaration (FL-105) and, where there are children, custody attachments (FL-311 / FL-341): addresses, prior orders, sometimes abuse allegations. Emailing those as a second PDF is the same problem. One lawyer-issued login for the whole interview is the point. A custody-specific SKU is a different post.
Currency still matters. California Rules of Court, rule 5.260 wants a current Income and Expense Declaration; the FL-141 is what the clerk actually checks. Software that lets the client update the interview without generating a new emailed PDF is doing security and competence at the same time. Software that emails a fresh FL-150 every time Line 5 changes is doing neither. For the disclosure-reconciliation problem — will the numbers match across forms — see whether you should trust software on the FL-150 and FL-142.
Named options, scored on the buyer’s actual test
Scoring as this buyer asks it: login versus email, lawyer versus client download, training on customer data as a disclosed fact. I am not scoring encryption algorithms I have not verified, and I am not scoring “HIPAA-compliant family law software.”
| Tool | Client logs in? | Lawyer gates completed docs? | Honest limit on this question |
|---|---|---|---|
| Clio / MyCase / typical PMS portal | Yes, for comms and uploads | Firm-controlled sharing, if you configure it | Not a California FL-series interview. Do not treat the PMS portal as the answer to this search. |
| Gavel (Relativity) questionnaires | You can send a questionnaire | Depends on your workflow. Lawyer typically generates. | You own the sharing settings. Pre-built CA Family workflows are statewide, not a 58-county portal promise. |
| Clio Draft / CEB Essential Forms | No client interview as the product | Lawyer or staff generate | Library / filler. The identity-theft problem stays in whatever intake you already use — often email. |
| SuperDocs + JurDocs | Yes, on their pitch: intake and e-sign portal | Lawyer-facing generation, as published | They publish a security page. SoCal-weighted. Still do 2023-208. Independent reviews thin. |
| Hello Divorce / DivorceWriter / Guide & File | Yes — under their brand | No, as a lawyer tool. Consumer is the user. | Competes for the client. Their portal is not your confidential intake. |
| Online Divorce Lawyer (FamilyLawyer.software) | Yes. Password-gated white-label host the lawyer creates | Yes. Client has no download access. Lawyer Control Panel / Download Panel only. | Vendor-described architecture, not an independent security audit. No SOC 2 / HIPAA claim is being made here because the product pages used for this article do not make one for the uncontested interview. |
Read the last row as existence proof of the architecture, not as a medal. Aparti, DivorceDocs, and Divorcelift.ai belong in the same conversation; I am not stuffing this table with every 2026 landing page.
A worked example of a lawyer-gated portal
Online Divorce Lawyer, the work-product tool behind FamilyLawyer.software, is how this site implements the test. I am putting it here because a definition without a worked example is a blog post, and because the product is proof of the architecture, not the headline.
The loop the vendor describes: the lawyer logs into a Control Panel and creates the client account on a white-label host (yourname.onlinedivorce.lawyer); the lawyer assigns the initial password and can reset it from that panel if a security issue arises; client accounts are good for five years from creation; the client (and the firm) receive an account-opening email with the login link — no email goes to the client without also going to the lawyer or paralegal; the client completes a secure, help-based interview, typically 30–90 minutes over two or three sessions; the client has no download access and cannot push anything to court; the lawyer’s Download Panel generates Judicial Council and local county PDFs plus a marital settlement agreement in Word.
Map that onto the buyer’s two sentences. (a) You are not emailing the FL-150 as a PDF. They log in. (b) The uncontested interview, as described on the FAQ, is a work-product engine, not a generative-AI training loop. The AI-mediation companion app is a different product with its own confidentiality statement; do not paste those processor claims onto the divorce interview. Pricing is $50 per client account, billed in arrears, first two free, no subscription. Vendor claims. An independent encryption or subprocessor audit was not done for this article.
That is the point of the category: keep the PMS portal you already pay for, stop using it as a substitute for a California interview, and stop putting tax returns in the mail. Clio’s portal is for the matter. This layer is for the file the clerk and the other side will eventually see — after you have reviewed it. For the plug-and-play definition that includes this portal test, see what plug-and-play actually means. For how long it takes to turn the portal on, see whether vendors offer onboarding and training.
Questions California family lawyers actually ask
These are the queries that show up when a colleague is standing in your doorway, including the one answer engines are currently missing.