Uprite Services ranks first among the best IT providers for law firms in Dallas for 2026, with a Matter Custody Score of 8.92, ahead of ITECS at 8.45 and GXA at 8.11. 11 providers, 7 weighted criteria, review data pulled live on 14 October 2026.
Quick picks
- Best overall. Uprite Services, which runs IT services for law firms in Dallas with the Texas rules, the legal platforms, the price and the exit terms in writing before you call.
- Best Dallas-headquartered legal specialist. ITECS, with a named Dallas law firm case study and per-endpoint prices on its site.
- Best when a client wants your vendor’s SOC 2 Type II. GXA, audited in 2024 and running a 24/7 SOC.
- Best DFW review record. Reliable Technology Services, 5.0 stars across 78 reviews on its Frisco profile.
- Best published price under $100 a user. Cloudavize, with 3 plans from $75 to $100.
- Best legal-only shop. Juris Fabrilis, a Tarrant County firm that works for nobody but lawyers.
Search for the best IT providers for law firms in Dallas and look at what comes back. On 14 October, the top organic result was a 2021 reprint of a national legal tech vendor list. Further down sat a Facebook answers page, a 2020 CIOReview roundup and 2 generic lists of Dallas IT consultants. None of them was a scored list of Dallas legal IT providers. Google’s AI Overviews for these searches named more than a dozen IT firms. One lists its Dallas address as a virtual office, and another turned out to be a network of member companies rather than a provider.
So we built the list that should have been there. 11 providers with a DFW street address and a real law firm practice, ranked on criteria a managing partner or firm administrator can check in an afternoon. This page is about who to hire. If you want to know what a Dallas firm’s IT should cover in the first place, start with our Dallas legal IT guide and come back.
Star ratings and review counts were scraped from Google Business Profiles through Apify on 14 October 2026, using every Texas profile we could find for each firm. Everything else, from legal software and ethics citations to audits, response figures and prices, came from each provider’s own pages that same week, 25 competitor websites in all, and nothing went into this page that we couldn’t point back to a saved copy of the source. Where we couldn’t find something, we said so.
One more thing before the rankings. This is our website, we’re in the list, and we come first. Keep that in mind the whole way down. Further down we also show 2 reasonable ways of scoring this list where we don’t come first.
How did we score Dallas’s legal IT providers?
Every provider was scored the same way on 7 criteria we researched ourselves, combined into a Matter Custody Score. No provider paid for placement. None supplied its own numbers. We rank ourselves first, then publish 2 scoring choices that would knock us down.
Why “matter custody”? Because a privileged file doesn’t stop being privileged when it lands on a vendor’s server, and the lawyer’s duty under the Texas rules follows that file to whichever data center, laptop or backup appliance the provider keeps it on. What a firm really buys from an IT provider is custody of every matter file, around the clock. The criteria try to measure how much of that custody each provider can prove in public.
| # | Criterion | Weight | What we looked for |
|---|---|---|---|
| 1 | Texas review record | 20% | All of a firm’s Texas Google profiles pooled together, with star rating weighted 60% and review count 40% in volume bands |
| 2 | Legal practice depth | 22% | Whether a dedicated law firm page exists, which legal systems it names, whether it covers wire fraud or e-discovery, and whether a law client is named |
| 3 | Ethics rule literacy | 10% | Whether the provider cites the Texas Disciplinary Rules by number, names them in passing, cites ABA rules by number, or says nothing specific |
| 4 | Detection and security evidence | 14% | A named 24/7 SOC or managed detection service, the provider’s own audit, frameworks it documents, and any published detection commitment |
| 5 | DFW ground presence | 12% | A DFW street address on Google, a DFW headquarters, a DFW law page with a local number, named local leadership |
| 6 | Commercial transparency | 12% | A published price, a numeric response figure, a guarantee or trial, contract terms stated up front |
| 7 | Tenure and named leadership | 10% | Years in business, taking the more conservative figure where a site and its domain records disagree, plus named owners |
Some of those choices help us. Some hurt. A competitor reading this deserves to see which is which.
Reviews use every Texas profile, not just Dallas. This one matters most. Our Dallas Google profile has 0 reviews. It also still shows an older LBJ Freeway suite instead of our office at 5757 Alpha Road. Our 117 reviews sit on our San Antonio profile and our 2 Houston profiles, which is fair evidence of how we treat clients but says nothing direct about how our Dallas team performs. Counting every Texas profile treats a firm with offices in several metros the same as a firm with one, and Aldridge and ITECS get credit for their out-of-town profiles too. On Dallas-only reviews we’d drop to 4th. We show that table further down.
Ethics rule literacy favors us. Our Dallas law firm page cites Texas Disciplinary Rules 5.03 and 1.05. Of 25 competitor sites, Hudson MSP is the only one we found citing a Texas rule by number. We held the criterion to 10%.
Commercial transparency favors us too. We publish a per-user price, a response figure, a guarantee and exit terms. ITECS and Cloudavize publish prices as well, and Reliable publishes a guarantee and month-to-month terms. Most firms here publish none of it.
Detection evidence hurts us. Our only audit is a SOC 2 Type 1 from 2023, a point-in-time opinion on how our controls were designed on a single day, and we haven’t renewed it since. GXA holds a SOC 2 Type II from 2024. That’s why we gave this criterion 14% instead of 10%.
Awards count for nothing. Our 7 straight years on the MSP 501 would have helped us. Several firms below us would have gained too. None of that tells an office manager whether a departing associate’s mailbox can be put on hold without losing a week of email.
The roster gate. 4 conditions, all checked live. A DFW street address on a Google Business Profile. A published page about serving law firms, not just the word “legal” in an industry list. Managed IT on a recurring agreement. And at least one legal-specific capability, meaning a named legal platform, a wire or legal hold workflow, or a named legal client or case study.
Plenty of good firms failed it. Mentis Group, Velocity IT, Pegasus Technology Solutions, Tower Digital and Rigidnet all have Dallas or Fort Worth offices and a law firm page, but none of those pages names a legal platform, workflow or client. 3 of them carry paragraphs copied from other industry pages, one still written for advertising agencies. Sagiss holds a SOC 2 Type II and counts a Fort Worth firm with more than 30 attorneys among its clients, yet it has no law firm page, only a blog post and a single case study. Neither does Ighty Support, or Axxys Technologies, which does have an anonymous Dallas law firm case study. Cross River Technology and Integrated365 both write for Dallas lawyers but show no street address on Google. CompassMSP’s own Dallas page lists its address as “Virtual Office.” Live Oak IT Partners has an Irving suite on its site and no DFW Google profile we could find. DFW MSP, now trading as Cortalis, lists toll-free numbers and no address. The 20 MSP turned out to be a network of member companies, not a provider. DataStew is mainly a physical security integrator.
How do the 11 providers compare at a glance?
| Rank | Provider | Score | Google, all Texas profiles | DFW base | Legal platforms named | Best for |
|---|---|---|---|---|---|---|
| 1 | Uprite Services | 8.92 | 4.8 / 117 | North Dallas, Alpha Road | 10 | Firms that want the Texas rules, the price and the exit in writing |
| 2 | ITECS | 8.45 | 4.9 / 59 | Far North Dallas, Preston Road | 14 | 30 to 100 user firms that want a Dallas-owned legal specialist |
| 3 | GXA | 8.11 | 4.9 / 138 | Richardson | 9 | Firms answering client security questionnaires |
| 4 | Reliable Technology Services | 7.48 | 5.0 / 78 | Frisco | 0 | 30 to 80 person firms that value service over legal specialization |
| 5 | Velo IT Group | 6.90 | 4.5 / 35 | Downtown Dallas, Arts District | 4 | Entrepreneurial firms of 50 to 150 users |
| 6 | Cloudavize | 6.72 | 5.0 / 28 | Dallas, LBJ Freeway | 3 | Small firms on Clio, MyCase or PracticePanther that want a price today |
| 7 | Galleon IT | 6.64 | 5.0 / 28 | Richardson | 7 | Personal injury firms holding medical records |
| 8 | Aldridge | 6.33 | 4.6 / 204 | Irving and Fort Worth | 0 | Firms that want a large Texas provider with its own SOC 2 |
| 9 | Cynergy IT | 5.84 | 5.0 / 22 | Downtown Fort Worth | 1 | Fort Worth practices that want a fast response figure and a 60-day exit |
| 10 | Hudson MSP | 5.62 | 5.0 / 10 | Plano | 7 | Firms that want a provider fluent in Texas Rule 1.05 |
| 11 | Juris Fabrilis | 4.84 | 5.0 / 1 | Bedford | 1 | Tarrant County firms that want an IT shop serving only lawyers |
Look down the review column and you’ll notice something. Every provider with real volume sits between 4.5 and 5.0 stars, so the criterion that dominates most best-of lists barely separates anyone here, which is one reason we capped it at 20%.

The best IT providers for Dallas law firms, ranked
1. Uprite Services, the provider that puts the Texas rules in writing
Our website, our ranking. Read this section more skeptically than the rest.
Matter Custody Score 8.92 / 10
What puts us first isn’t our Dallas review record, which is empty. It’s documentation, because before anyone at your firm sits down with us, they can look up the Texas rules our work is built on, the legal systems we already run, our process for a changed wire instruction, the monthly cost of a seat and the way out if we disappoint you.
Key strengths
- We’re one of only 2 providers we found citing a Texas Disciplinary Rule by number. Our Dallas law page works from Rule 5.03, which makes a lawyer answerable for the nonlawyers the firm retains, and Rule 1.05, the confidentiality rule.
- 10 legal platforms named, from iManage, NetDocuments and Worldox through Clio, Aderant, Elite 3E, Tabs3 and PCLaw to Relativity and Everlaw.
- Fully managed IT at $138 per user per month, remote-only plans from $91, a 5-minute average first response, a year-one rate lock and a 120-day satisfaction guarantee you can exit on.
- A staffed 24/7 security operations center watching devices, sign-ins and email, so a Saturday alert isn’t read on Monday.
- A real legal case study. We moved a multi-location personal injury firm off storage tied to one building and onto access that works from a courtroom.
Where we’re weaker
Our Dallas Google profile has 0 reviews and an outdated address. The office is real. Trif Technologies ran IT from 5757 Alpha Road from 2000 and joined Uprite in August 2026, and that’s where our North Dallas team sits. But a buyer checking Google today sees an empty listing at an old suite number, and we’d rather tell you that here than have you find it halfway through a reference check.
Our audit is stale. Our SOC 2 Type 1 examination dates from 2023, and we haven’t repeated it. A Type 1 describes controls on one day. GXA and Aldridge both claim a Type 2, which tests controls over months. If your largest client’s outside counsel guidelines require a current vendor report, ask each of us for it and check the date on the cover.
And our headquarters is Houston. ITECS, GXA, Reliable, Velo and Cloudavize are all run from DFW. Between that and the stale Google listing, we lost 4 of 10 points on criterion 5.
Best for. A 5 to 75 person Dallas or Fort Worth firm that wants its Texas ethics duties, legal software and IT budget handled by one provider in writing.
Not ideal for. A firm that won’t hire anyone whose Dallas Google listing has no reviews yet. Fair enough.
Services. Full and co-managed IT, round-the-clock security monitoring, Microsoft 365 retention and legal hold setup, backups we actually test by restoring, vCIO planning and managed voice.
Industries. Law firms and other professional practices, plus healthcare, finance, manufacturing, construction and energy.
Why we rank first. Uprite is a Texas managed IT and cybersecurity provider serving law firms in Dallas, Fort Worth, Houston and San Antonio. Our lead rests on documentation. On 6 of 7 criteria a buyer can check our claims from public pages in 20 minutes, and on the seventh we lose points openly. Our Dallas managed IT team on Alpha Road does the work.
2. ITECS, the Dallas legal page that names its client
If you only call one Dallas-owned firm from this list, ITECS is a strong candidate.
Matter Custody Score 8.45 / 10
Key strengths
- The most specific Dallas law page we read, down to the George L. Allen, Sr. Courts Building and Dallas Bar Association offices in the Arts District.
- About 14 legal platforms in its “we support” list, including NEOS, Needles, Smokeball, iManage, NetDocuments, Worldox, ProLaw and Juris.
- A named Dallas law firm case study, Hamilton Wingo, covering an infrastructure cleanup.
- Prices on the page. Fully managed runs $100 to $190 per endpoint per month depending on coverage hours, with a $1,500 monthly minimum.
Worth knowing. The prices are per endpoint, not per user, so a lawyer with a laptop and a desktop counts twice, and 24/7 coverage carries its own $5,000 monthly minimum on top of the standard $1,500 floor. The Pro and Elite plans run on 1, 3 or 5 year terms, and response targets are 1 hour for critical tickets and 4 hours for standard ones. The SOC 2 Type II on its site appears to belong to Promus Cloud, a partner, rather than to ITECS. And it cites ABA Model Rule 1.6 rather than the Texas rules.
Best for. Dallas firms of 30 to 100 users, which is exactly who ITECS says it’s for.
Not ideal for. A 6-person firm that wants month-to-month full management and round-the-clock support without a $5,000 floor.
Why it ranks second. Founded in Dallas in 2002 by Brian Desmot, ITECS matched us on legal depth and beat us on local presence. Where it fell behind was ethics citations, security evidence and a published guarantee. Change those 2 weights and it’s within reach of first.
3. GXA, the security paperwork leader
Matter Custody Score 8.11 / 10
GXA’s law firm page is titled “Bar-Compliant,” which is a big claim, and to GXA’s credit, its evidence is the strongest on the list.
Key strengths
- A SOC 2 Type II, announced in August 2024 with an annual audit, plus ISO 9001. Only 3 DFW providers we checked claim their own Type 2. Sagiss has no law firm page, and Aldridge’s announcement dates from 2020 to 2022.
- 9 legal platforms named, from iManage and Worldox to ProLaw, Elite 3E and Time Matters.
- A 24/7 SOC with managed detection and response, and a 24/7 help desk with a 15-minute average response.
- The biggest DFW review base on the list, 4.9 stars across 135 reviews on its Richardson profile.
The tradeoff. No price, no guarantee and no contract terms on the site. GXA names the Texas Disciplinary Rules but cites only ABA Model Rule 1.6 by number. And we found no legal case study. Its case studies cover real estate, healthcare, churches and manufacturing.
Best for. A mid-size firm whose corporate clients send vendor security questionnaires and want an audit report attached.
Not ideal for. A firm that wants to know the monthly cost before the first call.
Why it ranks third. Take away the 2 criteria that favor us and GXA wins this list outright at 9.07. We think price and Texas rule fluency belong in a Dallas legal buyer’s checklist, and GXA’s score shows exactly what happens to this list if you look at both and decide they don’t.
4. Reliable Technology Services, the review leader from Frisco
Matter Custody Score 7.48 / 10
78 Google reviews on a single Frisco profile, averaging 5.0 stars. Hard to argue with.
Key strengths
- A law page that says plainly who it’s for, firms of 30 to 80 people, and quotes ABA Model Rule 1.6(c) on preventing unauthorized access.
- A named attorney client, Adam Plunk of Plunk Smith, PLLC.
- A 30-minute average response, a 100% satisfaction guarantee, and mostly month-to-month agreements.
- Huntress managed detection and response on every device, alongside Microsoft Defender.
What’s missing is the legal software. The law page names security tools and no practice management or document systems, there’s no e-discovery content, and while plans are priced per user, the numbers themselves aren’t published anywhere we could find.
Best for. A 30 to 80 person firm that rates responsiveness above legal specialization.
Not ideal for. A litigation shop that needs someone fluent in Relativity on day one.
Why it ranks fourth. Founded in 2007 by Jason and Melinda Denton, Reliable has the best combination of review strength and service terms on this list. A legal software list would move it up.
5. Velo IT Group, the downtown firm with the best ABA citations
Matter Custody Score 6.90 / 10
Velo moved its headquarters to the Dallas Arts District and writes for “entrepreneurially led law firms with 50 to 150 users.”
Key strengths
- The deepest ABA citations we found, Model Rule 1.6 and Formal Opinion 477R on the law page and Formal Opinion 498 on its blog.
- A named Dallas law client, Macdonald Devin, quoted on Velo’s page as having no “stop-down event” during the switch.
- iManage, NetDocuments, Clio and Relativity support, plus wire transfer verification controls.
The gap. One fixed fee per user, and no published number. No response figure or contract term either. The law page also has a stray sentence about running IT for energy companies “from Lafayette to the Permian,” a reminder that Velo spent a decade serving energy clients out of Louisiana before moving its headquarters to Dallas.
Best for. A growing 50 to 150 user firm that wants co-managed help and a 24/7 SOC behind its own IT lead.
Not ideal for. Anyone comparing prices before taking a meeting.
Why it ranks fifth. Velo scored a full 10 on legal depth and 0 on commercial transparency. Publish a price and a response figure and it passes Reliable for 4th.
6. Cloudavize, the price list on LBJ Freeway
Matter Custody Score 6.72 / 10
Cloudavize does what most of this list won’t. It tells you what it costs.
Key strengths
- 3 published plans at $75, $85 and $100 per user, plus law firm budget bands of $2,000 to $3,000 a month for up to 20 employees.
- No onboarding fees and no lock-in contracts.
- Clio, MyCase and PracticePanther installed and maintained, and e-discovery integration in its FAQ.
- 24/7 endpoint detection and response priced openly at $8.99 per device a month.
The law page’s compliance answer is the weak spot. It says IT support must ensure compliance with GDPR, HIPAA and FINRA, none of which is the rulebook a Texas lawyer is actually disciplined under, and we found no mention of the Texas Disciplinary Rules anywhere on it. Founded in 2019, it’s also one of the younger firms here.
Best for. A small firm on a cloud practice management system that wants a known monthly number.
Not ideal for. A firm that needs its IT provider to talk ethics opinions with the managing partner.
Why it ranks sixth. Transparent and well reviewed, but thin on the legal and ethics criteria that carry a third of the score.
7. Galleon IT, built for practices that hold medical records
Matter Custody Score 6.64 / 10
Here’s an odd one. Galleon’s footer calls it a healthcare-focused IT company, yet its law firm page is one of the best written on this list.
Key strengths
- It names the Texas Disciplinary Rules and cites ABA Formal Opinions 477R and 483.
- A written out-of-band verification procedure for any change to payment instructions, and litigation hold readiness built into backup retention.
- 7 legal platforms, including Clio, NetDocuments, iManage, Worldox and LawPay.
- A 15-minute initial response under its SLA, with after-hours coverage included.
Why does the healthcare angle matter? Look at the breach data further down. Personal injury firms hold medical records, and 24 of 35 law firm breach filings with the Texas AG involved them. A provider fluent in HIPAA isn’t a bad fit for that practice.
Limitations. Galleon was founded in 2017, names no leadership on its site, names no legal clients and publishes no price, so most of what a buyer can learn about its legal work comes from that one page.
Best for. A personal injury or workers’ comp practice whose files look a lot like a clinic’s.
Not ideal for. A transactional firm that wants a provider with deep legal references.
Why it ranks seventh. The legal writing is strong. The track record and transparency haven’t caught up.
8. Aldridge, the big Texas provider with a thin Dallas law page
Matter Custody Score 6.33 / 10
Aldridge is the first name in Google’s AI Overview for Dallas law firm IT, and on size alone you can see why. 204 Google reviews across 5 Texas profiles, offices in Irving and Fort Worth, roots back to 1984.
Key strengths
- Its own SOC 2 Type 2 and 24/7/365 threat detection and response.
- Legal experience at scale, including the IT wind-down of Howrey LLP during that international firm’s bankruptcy.
- Hourly rates published, from $175 to $300 by technician level.
Where it falls short for this list. The Dallas law firm page runs about 150 words and names no legal software. The SOC 2 page dates from 2020 to 2022, so ask for the current report. Headquarters is Houston, like ours. And its 2 DFW profiles alone average 4.2 stars across 36 reviews, well below the 4.8 it holds across 133 reviews in Houston, which matters if your support will come out of Irving.
Best for. A firm that wants a large Texas provider with audited controls and multiple offices behind it.
Not ideal for. A firm that expects legal fluency from the first meeting.
Why it ranks eighth. Plenty of strength, little of it pointed at law firms.
9. Cynergy IT, fast and Fort Worth
Matter Custody Score 5.84 / 10
Cynergy writes for Fort Worth legal professionals and backs it with 2 numbers. A 10-minute average response, and SLAs met 99.5% of the time.
Key strengths
- A 60-day promise to cancel the contract and refund your money if you’re unhappy.
- A managed SOC service, and encrypted email on the law page.
- 5.0 stars across 22 reviews from its downtown Fort Worth profile.
The catch. The law page names one legal platform, PracticeMaster. Its homepage law firm testimonial is labelled with a property management company’s name. And while the site says “Since 2008,” the domain was registered in February 2025 and the footer reads 2023, so we scored tenure from the most conservative date we could document rather than from the claim on the homepage.
Best for. A small Fort Worth firm that cares most about speed and an easy exit.
Not ideal for. Dallas firms, which its law page doesn’t address.
Why it ranks ninth. Good terms, thin legal content, and a history we couldn’t confirm.
10. Hudson MSP, the best Texas ethics writing with the newest name
Matter Custody Score 5.62 / 10
Credit where it’s due. Hudson MSP is the only competitor we found citing Texas Rule 1.05 by number.
Key strengths
- Trust account fraud and out-of-band verification covered properly, plus litigation holds and e-discovery obligations.
- 7 legal systems named, from NetDocuments and iManage to Tabs3 and eFileTexas.
What held it back. Support hours are Monday to Friday, 9:00 AM to 5:30 PM Central, and its own case study says monitoring isn’t the same as help at any hour. That case study is also labelled “an illustrative scenario, not a report of a verified client engagement.” Honest of them. The site claims 20 years of family-led experience, but the domain dates from April 2025, no founding year or leader is named anywhere we looked, and its Plano office takes visits by appointment only.
Best for. A small firm that wants a provider who already speaks the Texas rules and keeps business hours.
Not ideal for. A litigation practice working weekends before a trial setting.
Why it ranks tenth. Excellent writing, very little track record behind it yet.
11. Juris Fabrilis, lawyers only since 2009
Matter Custody Score 4.84 / 10
Juris Fabrilis is the only firm here that serves nothing but law firms, across the Metroplex, and has since Jeff Sanford founded it in 2009. One client, a chief operating officer, has been with them almost 9 years.
Key strengths
- Exclusive legal focus, and support for the Tarrant County Bar Association and the county’s criminal defense and family law bar groups.
- A Clio partnership and a Bedford base with 817 numbers for sales and support.
So why last? Because almost none of it is written down. No street address on its own site, no legal software beyond Clio, no security evidence, no price, no response figure, and exactly 1 Google review, attached to a Bedford address we could only confirm through Google itself. The homepage still mentions “your medical facility” and “healthcare IT,” which looks like template copy nobody caught.
Best for. A Tarrant County practice that values an IT partner who knows the local bar by name.
Not ideal for. A firm that has to document its vendor’s security controls for a client.
Why it ranks eleventh. The model rewards what a buyer can verify. A legal-only shop that publishes almost nothing scores low here, and might be excellent in person.
Does the winner change under different weights?
Yes, 2 of them would. Count only Dallas-area Google reviews and we fall to 4th. Drop the 2 criteria that favor us most and GXA wins. Across 10,000 random weightings we still finish first 68% of the time.
Here’s every version we ran, for the top 5 and Aldridge, the firm with the most reviews.
| Provider | Published score | DFW-only reviews | Without ethics and transparency | First place in 10,000 random weightings |
|---|---|---|---|---|
| Uprite Services | 8.92 | 7.10 (4th) | 8.61 (3rd) | 6,828 |
| ITECS | 8.45 | 8.45 (1st) | 8.84 (2nd) | 1,429 |
| GXA | 8.11 | 8.11 (2nd) | 9.07 (1st) | 1,743 |
| Reliable Technology Services | 7.48 | 7.48 (3rd) | 7.90 (5th) | 0 |
| Velo IT Group | 6.90 | 6.90 | 8.08 (4th) | 0 |
| Aldridge | 6.33 | 6.00 | 7.73 | 0 |
The random test draws every weight at random, 10,000 times, so no single choice of ours decides it. Only 3 firms ever finished first. ITECS made the top 3 in 96% of the draws and we did in 93%.
So how should you read our first place? As the result of criteria we believe in, stated in public, with the alternatives printed next to it. If you think Dallas-only reviews are the fairer test, the answer is ITECS. If security paperwork matters more to you than published prices, call GXA first. Both are good answers.
What do 35 law firm breach filings tell a Dallas buyer?
Texas publishes breach notices reaching 250 or more Texans. Between 22 September 2025 and 12 October 2026, 35 came from law firms, touching 272,352 Texans. 4 came from firms listing a DFW city, and the slowest went 238 days before anyone noticed.
We pulled the full Texas Attorney General data security breach list on 14 October 2026, 654 filings in all, and read every entity name by hand. The AG’s form has no category for law firms, so a filter on “LLP” or “PLLC” drags in CPA firms, medical practices and dental offices. We removed those one by one.
What’s left is 35 filings from 33 law firms. 23 came from firms based outside Texas, mostly large national firms that hold some Texans’ records. 12 came from Texas firms, and those 12 alone reached 104,492 Texans.
| Firm on the filing | City listed | Texans notified | Days from start to discovery | Data involved |
|---|---|---|---|---|
| Herrman & Herrman PLLC | Dallas | 13,424 | 238 | Names, SSNs, driver’s licenses, medical and health insurance information |
| Bailey & Galyen (Phillip Galyen P.C.) | Bedford | 11,038 | Same day | Names, SSNs, driver’s licenses, government IDs, medical and health insurance information |
| MAS Law (Modjarrad & Associates, PC) | Richardson | 6,220 | 14 | Names, addresses, SSNs, driver’s licenses, government IDs, medical and health insurance information, dates of birth |
| The Reecer Law Firm PLLC | Denton | 897 | 194 | Names, addresses, SSNs |
31,579 Texans across 4 DFW filings. 4 firms, 1 metro, about 13 months.
Now look at the last column. 3 of the 4 DFW firms reported medical information, and across all 35 law firm filings, 24 involved medical records. That’s the signature of personal injury and workers’ comp work. A PI practice holds treatment records for every client it represents, which brings it under Texas Health and Safety Code Chapter 181 whether or not anyone at the firm thinks of it as a healthcare business. Social Security numbers showed up in all 35.
Then there’s the detection gap. 27 of the 35 filings gave both a start date and a discovery date, and the median gap was 36 days. 11 filings reported 90 days or more. 11 caught the problem within a week. Only 5 landed in between. The dates are self-reported, and some filers enter the day they confirmed which records were touched rather than the day an alert fired, so treat the median as rough. The split still says something.
Either somebody was watching or nobody was.

Texas then starts its own clocks. Under Business and Commerce Code Section 521.053, affected Texans must be told within 60 days of the firm determining a breach occurred, and the Attorney General within 30 days once 250 or more Texans are involved. Neither clock waits for the forensic report. A firm that finds out 238 days late still has 30 days to file. The AG’s breach reporting guidance spells out what goes in the notice.
Which providers put a detection promise in writing?
So we went back to every ranked provider’s site with one narrow question. What do they publicly commit to about watching for an attack, as opposed to answering the phone once you’ve noticed one? Our own row is in the grid. It isn’t the strongest.
| Provider | Named 24/7 monitoring | Published response figure | Published detection-time commitment |
|---|---|---|---|
| Uprite Services | Staffed 24/7 SOC | 5-minute average first response, an average not a contract term | None |
| ITECS | Sophos MDR, 24/7 security monitoring | 1 hour critical, 4 hours standard, as targets | None |
| GXA | 24/7 SOC and MDR | 15-minute average, 24/7 help desk | None |
| Reliable Technology Services | Huntress MDR on every device | 30-minute average | None |
| Velo IT Group | 24/7 SOC in its co-managed offer | None published | None |
| Cloudavize | 24/7 endpoint detection, $8.99 per device | “Guaranteed,” no number | None |
| Galleon IT | 24/7 SOC, tuned for healthcare | 15-minute initial response under SLA | None |
| Aldridge | 24/7/365 threat detection and response | None found | None |
| Cynergy IT | Managed SOC service | 10-minute average, 99.5% SLA attainment | None |
| Hudson MSP | Threat hunting, business hours support | None, Monday to Friday 9:00 AM to 5:30 PM | None |
| Juris Fabrilis | None published | None published | None |
Last column. Every row says none, ours included. Not one provider in Dallas publishes how quickly it expects to spot an intruder, and that’s the number the AG data says matters most. Response times measure how fast someone answers once you’ve noticed a problem. They tell you nothing about the 238 days before anyone did.
Ask for it anyway. A provider running a real security operations center can tell you its mean time to detect from last quarter’s incidents, even if it won’t print that number on a website where competitors and prospects can read it. If the answer is a blank look, you’ve learned something.
What do the Texas rules ask of the IT provider you hire?
A Texas lawyer can hand the IT to someone else, never the responsibility for it. Rule 5.03 covers the people you retain, Rule 1.05 covers the information they touch, and 2 State Bar ethics opinions say what reasonable care looks like in the cloud and with AI.
Most legal IT marketing quotes ABA Model Rule 1.6. That’s a model. Texas wrote its own Texas Disciplinary Rules of Professional Conduct, and those are what a Dallas lawyer answers to. Of 25 competitor sites, Hudson was the only one we found citing one by number. GXA, Galleon and Cross River name the Texas rules in passing, and the rest mostly don’t mention them.
Rule 5.03 is the one buyers overlook. It makes a supervising lawyer answerable for the conduct of nonlawyers the firm brings in, and an IT provider with administrator rights to every matter file is about as nonlawyer as it gets. So the provider’s controls are, in practice, the firm’s controls. Choose with that in mind.
Rule 1.05 defines confidential information broadly enough to cover nearly everything on the firm’s systems, privileged or not, so a practice management database, a billing export and a paralegal’s inbox all count equally.
Then the 2 opinions that turn those duties into IT work. The Professional Ethics Committee’s Opinion 680 lets Texas lawyers use cloud storage if they take reasonable precautions, and lists 6 of them, from understanding how the service works to training staff. We mapped all 6 to provider deliverables on our San Antonio legal IT rankings. Opinion 705, from February 2025, applies the same reasoning to generative AI. Ask your provider which Copilot and AI features are turned on in your firm’s Microsoft 365 tenant today. It should know without checking. Our legal and professional services hub covers the rest of the Texas framework.
How should a Dallas law firm pick its IT provider?
Before signing, check 4 things. Does the provider already support your practice management and document systems? What does it do with a changed wire instruction? What will it commit to on detection? And how do you get out if it fails?
Size comes first, because it changes which firms on this list even fit. In 2025 Dallas County had 2,187 private law offices with 20,453 people on payroll between them, according to the Bureau of Labor Statistics Quarterly Census of Employment and Wages. That’s 9.4 people per office. Almost none of them can carry a full-time systems administrator, which makes the IT provider the firm’s whole security program, not just a vendor.
Under 15 people. Look hard at a published price and an easy exit. Cloudavize and Cynergy IT both fit, and our 120-day guarantee was written for exactly this buyer. ITECS’s $1,500 monthly minimum may be more than a 6-person office needs, though it’s worth asking what that floor actually buys before you rule the firm out on price alone.
15 to 75 people. This is where legal software depth starts to pay. A provider that already supports iManage or NetDocuments, your billing system and your e-discovery platform saves you months of teaching a generalist how a matter-centric document system, conflict checks and a month-end billing close are supposed to behave. ITECS, Velo and Uprite are strongest here.
Firms facing client security questionnaires. Ask for the provider’s own SOC 2 report and read the date. GXA’s is a 2024 Type II. Ours is a 2023 Type 1. That difference may decide it for you.
Personal injury and workers’ comp practices. Your files carry medical records, and the breach data above shows that’s what gets taken. Give extra weight to a provider fluent in HIPAA-grade controls, which is where Galleon and Uprite both spend a lot of their time, because so much of the healthcare work each of us does involves the same kinds of records.

Then the wire question, because email fraud is how most firms actually lose money. The FBI’s 2025 Internet Crime Report logged 24,768 business email compromise complaints and $3,046,598,558 in losses, an average of $123,006 a complaint, and Texas ranked second nationally, with 97,912 complaints and $1,825,636,181 in losses. Ask every provider on your shortlist what happens when a client emails new wire instructions the afternoon before a settlement closes. The right answer involves a phone call to a number already on file, made by someone who isn’t relying on the email. Galleon, Hudson and Uprite describe that procedure in writing, and Velo lists wire transfer verification controls.
Last, cost. Most Dallas firms pay $165 to $250 per user per month for managed IT in 2026, before the legal software stack is added. The full breakdown, including the second invoice nobody quotes, is in our guide to what Dallas law firms pay for managed IT.
Where that leaves a Dallas firm
We rank first because we put the Texas rules, the legal systems, the price and the exit in writing, and because we told you exactly where that lead comes from. It isn’t from our Dallas reviews, which don’t exist yet. It isn’t from our audit, which is old.
If local track record matters most, call ITECS. If an audit report decides it, call GXA. If you just want the best-reviewed provider in DFW, Reliable is hard to beat. All 3 are good firms, and we’d say so to your face.
And if you want to see what the Texas rules and a straight price look like in practice, we’ll walk you through it with your own systems on the table.
Speak to a legal IT expert in Dallas
Send us your current IT agreement and tell us which practice management system you run and how many people you have. We’ll tell you what it should cost, where your Rule 5.03 exposure sits, and how quickly someone would notice an intruder today.
Speak to a Legal IT ExpertWhat Dallas attorneys ask before switching IT providers
What should a Dallas law firm budget for managed IT in 2026?
$165 to $250 per user per month is where most Dallas firms land for fully managed IT in 2026, and firms answering outside counsel guidelines can reach $300.
That figure covers the IT provider only. Microsoft 365, document management and practice management add a second invoice of roughly $101 to $246 per seat. Of the providers on this list, ITECS, Cloudavize and Uprite publish their prices, so you can check the first invoice yourself.
Does an IT provider need to cite the Texas rules to be any good?
Not necessarily, since plenty of capable providers never mention them on their websites.
But Texas Rule 5.03 makes the lawyer answerable for the people the firm retains, and an IT provider with access to every client file is one of them. A provider that already knows Rule 1.05 and Opinion 680 will spend less of your time learning what reasonable care means for a law firm.
How can a Houston-based company top a Dallas list?
Fair question. A Houston headquarters and a stale Dallas listing cost us 4 of 10 points on DFW ground presence.
Our North Dallas office on Alpha Road is real, and Trif Technologies ran IT from that address for 26 years before joining Uprite in August 2026. Our Dallas Google profile has no reviews yet, though. Count only DFW reviews and we drop to 4th, behind ITECS, GXA and Reliable. We printed that table so you can decide which version you trust.
How fast should an IT provider spot a breach at a law firm?
Nobody in Dallas publishes a detection-time number, so ask for one in writing.
In 35 law firm breach filings with the Texas AG over roughly the past 13 months, the median gap between a breach starting and someone discovering it was 36 days. 11 took 90 days or more. A provider with a staffed security operations center should be able to tell you its average time to detect from recent incidents.
Is a legal-only IT firm better than a general provider with a law practice?
Sometimes, if it can show its work.
Juris Fabrilis serves nothing but law firms and has for years, yet it publishes almost nothing a buyer can verify. ITECS, GXA and Uprite serve many industries and document their legal practice in detail. Focus matters less than evidence. Ask any provider for 2 law firm references of your size and call both.
What should we ask before signing with a new IT provider?
Ask for the security report, the price, the response figure and the exit terms, all in writing.
Then ask what happens when a client emails new wire instructions, which of your legal systems they already support, and who on their team has administrator access to your matter files. Rule 5.03 makes that last answer your responsibility.









