Show the reasonable steps your rules ask for
Law and accounting firms answer to their own professional rules on client confidentiality. Those rules ask for reasonable steps, and name no checklist. We give you a dated outside view of your firm, and put each finding in the terms your rules use.
Attackers now use AI to read a firm from outside the way a search engine does: the website, directories, search results and what AI assistants say. We read it first, and every finding is human-verified before your assessment is released.
What the rules ask, and what the outside view can show.
Law society and bar conduct rules name no specific control. They ask what a reasonable firm would do, so the question is what you can show, not whether you broke a rule.
The Rules and Insurance Briefing names the rules that apply to a firm like yours in your country, such as your law society or state bar conduct rules, your CPA body’s rules of professional conduct and, for US tax preparers, the FTC Safeguards Rule, and sets each finding beside them.
The Assessment Record dates what was open from outside on the day. It is a record you can show when a client, an insurer or your regulator asks.
An outside reading puts dated evidence behind your confidentiality duty. It is evidence toward the duty, never proof of it, because much of the duty sits inside your firm.
Attackers read businesses with AI. LeakTrace reads them first. Every finding carries its evidence.
Your regulator decides. You decide with the facts.
We do not tell you that your firm meets its rules, or that a finding breaks them. Your regulator and your counsel decide those. What we give you is the outside view, dated, and the steps to change it.
A different job from the people you already work with.
Excellent at running your systems. We read what the outside world sees and give you the exact fix for each finding, with the check that proves it. Different job, and independent: we are paid by no one who sells the fixes.
Tries to break in and needs access. We are not a pen test: nothing attacked, nothing installed, no access given. We read only what is already public, from outside, and log into nothing.
It can feed your premium and eligibility, and we do not see it. We show you what anyone can see of your firm from outside first, in plain words, so you walk into renewal knowing your own answers.
On a paid assessment, our AI agents work your firm from outside, stage by stage:
- the Discover AI agent reads what your firm shows the public internet with fixed checks
- the Close AI agent gives you each fix and re-checks it from outside
- on monitoring fixed checks re-check every hour and every day
Every paid assessment is human-verified before release. After you buy, AI chooses follow-up checks, picks when to re-check from outside, and sorts new changes by which needs you first.
No AI agent can state a finding without a fixed outside check behind it.
The assessment comes with an AI security agent on your dashboard: ask it about any finding in plain English and it answers from your own firm's findings.
Our AI agents work from outside only. They never log in, never install anything, and never touch your internal systems.
The one change they can make, to your email records, happens only when you approve it.
See what your firm shows from outside, dated, in the terms your rules use.
The External Exposure Check: your outside reading, the openings a stranger can see on your firm today, with the proof for the lead finding. Read-only, from outside.