Last updated: June 2026. Reviewed by the BespokeCRMs team, subject matter experts in CRM systems for regulated UK businesses. Sources: the Solicitors Regulation Authority, gov.uk legislation, the Information Commissioner's Office, and the Law Society. Full citations appear at the end of this article. Part of our CRM by Industry series.
TL;DR: UK law firms need software that organises work around matters, not contacts. A CRM (Customer Relationship Management system) manages client relationships and intake, while case management software runs the matter itself. Most firms need both. A bespoke legal CRM earns its place once SRA compliance, conflict checking and anti-money-laundering duties outgrow off-the-shelf products.
Choosing a CRM is rarely a routine software decision for a law firm. The system sits where client relationships, regulatory obligations and fee-earner productivity meet, so the wrong choice quietly costs billable time, weakens compliance evidence and frustrates partners at month-end. This guide explains what a CRM actually does for a law firm, how it differs from case management software, the regulatory obligations any legal system has to respect, and how to decide between an off-the-shelf product and a bespoke build.
Do law firms need a CRM?
Most growing UK law firms do need a CRM, but the answer depends on what you are trying to manage. A CRM manages the client relationship: enquiries, intake, referral sources, communication history and repeat instructions over time. Case and practice management software manages the matter: deadlines, documents, time recording, billing and legal accounting. These are different jobs, and one tool rarely does both well.
The case for a CRM strengthens as a firm grows. Law Society research found that only 32% of solicitors used legal technology daily as of 2023, and more than a third used it rarely or not at all.[9] That gap matters commercially, because the same research and later trend data show firms increasingly investing to close it: more than a third of UK firms planned to invest £100,000 or more in technology over the year ahead.[10]
A small firm running standard transactional work may not need a dedicated CRM at all. A spreadsheet, a shared inbox and a mainstream practice management product can be enough. The need becomes pressing when referral relationships, cross-selling between practice areas, regulated onboarding and partner-level oversight stop fitting into a contact list.
CRM vs case management software: the key difference
The single most useful distinction for a law firm is contact-centric versus matter-centric. A CRM is built around the person or organisation. Legal case and practice management software is built around the matter. A client can have many matters over many years, so the two systems answer different questions.
| Dimension | CRM | Case / practice management software |
|---|---|---|
| Primary unit | The client or contact | The matter (the individual instruction) |
| Core job | Intake, relationships, marketing, repeat business | Deadlines, documents, time recording, billing |
| Typical question answered | "What is our whole relationship with this client?" | "What is the status of this matter and what is due next?" |
| Compliance role | Onboarding, conflict screening at intake, consent | SRA Accounts Rules, matter-level retention, audit trail |
| Examples in market | Clio Grow, Lawmatics, adapted Salesforce or HubSpot | Clio Manage, LEAP, Actionstep |
A clean way to summarise it: a CRM tracks the relationship across all of a client's matters, while case management software runs each matter in turn. Most UK firms need both layers, or an integrated system that covers both, because neither alone covers the full picture.
Is Clio a CRM? Partly. Clio sells two distinct products: Clio Manage is matter-centric practice management software, and Clio Grow is the CRM component for intake and relationship management. The two are different tools, which is why "is Clio a CRM" is such a common search. The same logic applies to most legal software suites: the CRM and the matter engine are separate concerns, even when one vendor sells both.
Why generic CRMs struggle in a law firm
General-purpose CRMs such as Salesforce, HubSpot or Microsoft Dynamics are built for businesses that sell products to contacts and track deals through a pipeline. A law firm does not sell to a contact, it takes instructions on a matter, and the relationships around that matter are complex. A litigation matter alone can involve the client, the opponent, the opponent's solicitor, counsel, experts, witnesses and the court.
When that structure is flattened into "contacts linked to a deal", the relationships fee earners actually work with are lost. Worse, the compliance concepts that a regulated firm depends on, such as conflict checking, client money handling and customer due diligence, simply do not exist in a generic CRM. Firms end up bolting on spreadsheets and manual checklists, which is exactly where regulatory risk accumulates.
This is the wedge for a tailored system. A CRM designed for a UK law firm models matters as first-class records, links every party to the matter, and builds the firm's regulatory obligations into the data model rather than leaving them to a fee earner's memory. For a fuller view of what that looks like in practice, see our practice management CRM for UK law firms.
The compliance obligations a legal CRM has to respect
A CRM cannot replace a firm's compliance function, and no software can decide a question of professional judgement. What well-designed software can do is make specific obligations cheaper and more reliable to meet every day. The four areas below are where UK law firms most often ask for help.
SRA Accounts Rules and client money
Firms that hold client money operate under the SRA (Solicitors Regulation Authority) Accounts Rules, which came into force on 25 November 2019. Rule 8.3 sets out the reconciliation obligation in plain terms.[1]
You complete at least every five weeks, for all client accounts held or operated by you, a reconciliation of the bank or building society statement balance with the cash book balance and the client ledger total, a record of which must be signed off by the COFA or a manager of the firm.
The rule's reference to sign-off by the COFA (Compliance Officer for Finance and Administration) is the part software directly supports.[13] A system that tracks client ledger balances, flags aged or residual balances, and produces a signed reconciliation record turns a fragile spreadsheet process into a repeatable one. This article describes Rule 8.3 as published by the SRA. Firms should verify the current rules with the SRA and consult their COFA or a qualified legal accounts specialist to confirm their own processes are compliant.
Conflicts of interest
Conflict checking is one of the strongest arguments for structured software in a law firm. The SRA Principles require that you act "in the best interests of each client" (Principle 7), and the Code of Conduct for Solicitors sets the conflict rules.[2] Paragraph 6.1 is unambiguous on own-interest conflicts.[3]
You do not act if there is an own interest conflict or a significant risk of such a conflict.
The SRA confirms there are no exceptions to paragraph 6.1, so a missed own-interest conflict cannot be cured by client consent. Paragraph 6.2 allows acting in a conflict between clients only where strict conditions are met, including informed written consent. Software can search every party, matter and historical record at intake and store a timestamped audit trail of each check and decision, but it cannot determine whether a conflict actually exists. Whether a given situation is a conflict under paragraphs 6.1 or 6.2 is a matter for professional judgement, and firms should consult their COLP (Compliance Officer for Legal Practice).
Anti-money-laundering and customer due diligence
Law firms doing work in scope of the Money Laundering Regulations 2017 carry significant onboarding duties. As of April 2021 the SRA supervised roughly 6,516 firms for anti-money-laundering purposes, around two-thirds of all SRA-authorised firms at the time.[8] Regulation 28 sets out the core customer due diligence (CDD) measures: identify the client, verify their identity, and assess the purpose and nature of the relationship.[4] The same regulation requires ongoing monitoring of the relationship, including scrutiny of source of funds where necessary.
A CRM that enforces CDD as a workflow, rather than a paper checklist, captures identity verification, source-of-funds evidence, risk assessment and politically-exposed-person screening against the client record, then tracks when refresh reviews are due. The authoritative guidance is the Legal Sector Affinity Group (LSAG) anti-money-laundering guidance, approved by HM Treasury and current as of 2025.[5] Because the regulations apply a risk-based approach, the specific obligations vary by firm and matter type, so firms should consult their COLP or a qualified anti-money-laundering specialist before designing CDD processes.
UK GDPR and data retention
Every law firm processes personal data, so the UK GDPR (General Data Protection Regulation) and the Information Commissioner's Office (ICO) apply to the CRM directly. Two obligations matter most for system design. First, subject access requests have a statutory deadline: the ICO states you must comply "without undue delay and at the latest within one month of receiving the request".[6] A CRM that can assemble everything held about an individual in one place makes that month manageable.
Second, retention. It is a common myth that UK GDPR requires law firms to keep files for six years. It does not. The ICO's storage limitation principle simply requires that you do not keep personal data longer than you need it and that you can justify the period you choose.[7] The familiar six-year and twelve-year figures come from the Limitation Act 1980, and firms use them as the professional justification for how long a matter file remains necessary. A CRM with configurable, matter-level retention schedules lets a firm document and enforce that justification. UK data protection law has also been amended by the Data (Use and Access) Act 2025, so firms should take specialist data protection advice when setting lawful basis and retention schedules.
What to look for when choosing a CRM for your firm
Use the following checklist to assess any system, off-the-shelf or bespoke, against the realities of UK legal practice:
- Matter-centric data model that treats matters, not contacts, as first-class records and preserves the relationships between every party
- Conflict checking across all parties, matters and historical records, with a stored audit trail of checks, decisions and waivers
- Client money and reconciliation support that aligns with Rule 8.3, ideally integrated with your legal accounting system
- Customer due diligence workflow covering identity verification, source of funds, risk rating, politically-exposed-person screening and refresh dates
- Configurable retention and subject-access tooling so UK GDPR obligations are enforced rather than tracked by hand
- Integrations with your accounting, document management, email and e-signature tools, since integration scope is usually the largest cost driver
- Ownership and exit terms that keep your data and, for a bespoke build, your code under your control with no vendor lock-in
If a firm is weighing whether to adapt an existing product or commission something new, our guide to building or buying a CRM walks through the decision in general terms, and the CRM and GDPR compliance guide covers the data protection detail.
Build or buy: off-the-shelf versus bespoke for law firms
For many firms, an off-the-shelf legal product is the right commercial answer, and an honest adviser will say so. Firms with one to five fee earners running standard transactional work are usually best served by established platforms such as LEAP, Clio or Actionstep. A bespoke CRM earns its place when practice areas, client service models or compliance obligations do not map cleanly onto a packaged product, or when a firm has outgrown the point where the product supports it without expensive customisation.
| Consideration | Off-the-shelf legal product | Bespoke CRM |
|---|---|---|
| Best for | 1-5 fee earners, standard transactional work | Established or multi-office firms with complex or regulated workflows |
| Time to value | Days to weeks | Typically 10-32 weeks depending on scope |
| Workflow fit | Good where your work fits the product | Designed around your exact practice areas |
| Compliance fit | Generic, configurable within limits | Built into the data model from the start |
| Ownership | Vendor-controlled, subscription | You own the code and the data |
| Cost shape | Lower upfront, ongoing per-user fees | Higher upfront build, then support retainer |
A bespoke legal CRM is a meaningful investment. Indicative UK build ranges run from around £25,000 to £45,000 for a single focused workflow, £50,000 to £95,000 for a full practice management CRM with several integrations, and £110,000 or more for a multi-office platform with departmental workflows and a full SRA Accounts Rules engine. For the wider cost picture across sectors, see our bespoke CRM pricing guide. Where a build is the right path, data migration from a legacy system and the bespoke development process itself are usually the two areas firms want to understand first, and system integration with accounting and document management is where most of the effort goes.
A real-world scenario
Consider an anonymised example based on common patterns. A 30-fee-earner firm with conveyancing, private client and commercial teams was running client relationships in Outlook, conflict checks across three disconnected systems, and client account reconciliations in Excel. Conflict searches were under-recorded, time recording lagged by days, and the COFA spent the night before each inspection assembling reconciliations by hand.
The firm did not need a wholesale rip-and-replace. It needed a CRM layer that modelled matters and parties properly, ran a structured conflict check at intake, enforced customer due diligence as a workflow, and produced a signed reconciliation record on the five-week cycle. The measurable wins were recovered billable time, a defensible audit trail for SRA inspection, and a partner-level view of the whole client relationship rather than a fragmented contact list. The lesson is that the value of a legal CRM is rarely a single feature; it is the removal of the manual joins between systems where risk and lost time accumulate.
Productivity headroom is real here. Clio's 2025 benchmarking data put the average law firm utilisation rate at 38%, roughly three billable hours captured in an eight-hour day, with a 12% gap between time worked and time invoiced.[12] The same firm's UK research found 96% of UK firms now use AI in some form and 54% expect a significant shift toward fixed-fee billing, both of which raise the premium on accurate, structured client and matter data.[11]
Frequently asked questions
Do law firms need a CRM?
Growing UK law firms usually benefit from a CRM, but it depends on the job. A CRM manages client relationships, intake and referrals, while case management software runs the matter itself. Small firms on standard work may manage without one, but referral-driven or multi-practice firms gain the most from a dedicated client relationship system.
What is the difference between a CRM and case management software?
A CRM is contact-centric: it manages leads, intake, communication history and repeat business across the client relationship. Case and practice management software is matter-centric: it manages deadlines, documents, time recording and billing for each instruction. A client can have many matters, so most firms need both layers or an integrated system covering both.
Is Clio a CRM?
Partly. Clio sells two products: Clio Manage is matter-centric practice management software, and Clio Grow is the CRM component for client intake and relationship management. Treating the whole platform as a single CRM is inaccurate, which is why the distinction matters when comparing legal software for a UK firm.
What CRM do law firms use in the UK?
UK firms use a mix of dedicated legal CRM tools such as Clio Grow and Lawmatics, practice management suites like LEAP and Actionstep, and general-purpose CRMs such as Salesforce or HubSpot adapted for legal use. Firms with complex or heavily regulated workflows often commission a bespoke CRM built around their specific obligations.
How long must a law firm keep client files?
UK GDPR does not set a fixed retention period. The ICO requires only that you keep data no longer than needed and can justify the period chosen. Firms typically align retention with the Limitation Act 1980, commonly six years for contract claims and twelve for deeds, as the justification for how long a matter file remains necessary.
Can a CRM help with SRA Accounts Rules compliance?
A CRM or accounts-integrated system can support compliance by tracking client ledger balances, flagging residual balances and producing the signed reconciliation record that Rule 8.3 requires at least every five weeks. It does not replace your legal cashier or COFA, but it makes their work more reliable and reduces the risk of findings on inspection.
How does a legal CRM handle conflict checks?
A conflict engine searches across all parties, open and closed matters, and historical records when a new instruction arrives, then stores a timestamped record of each check, decision and waiver. The software flags potential conflicts and routes them for partner sign-off, but it cannot decide whether a conflict exists under the SRA Code. That judgement rests with the firm's COLP.
Ready to talk it through?
BespokeCRMs is a UK-based custom CRM development consultancy that builds and maintains systems for law firms and other regulated sectors, including financial services. We design against the SRA, ICO and anti-money-laundering obligations described in this article, and we will tell you honestly when an off-the-shelf product is the better commercial choice for your firm.
To discuss the right approach for your practice, book a discovery call with our team or request a bespoke CRM proposal. We will send a short pre-call questionnaire so the conversation focuses on your practice areas, regulatory priorities and integration needs.
The information in this article is general guidance on UK regulation and market practice. It is not a substitute for qualified legal, compliance, accounting or data protection advice specific to your firm's circumstances. Firms should consult their COLP, COFA or a qualified adviser before making CRM decisions with regulatory implications.
Sources
- Solicitors Regulation Authority, SRA Accounts Rules (Rule 8.3, effective 25 November 2019). Accessed 3 June 2026.
- Solicitors Regulation Authority, SRA Principles (Principle 7, effective 25 November 2019). Accessed 3 June 2026.
- Solicitors Regulation Authority, Code of Conduct for Solicitors (paragraphs 6.1 and 6.2). Accessed 3 June 2026.
- Money Laundering, Terrorist Financing and Transfer of Funds Regulations 2017, Regulation 28 (customer due diligence). Accessed 3 June 2026.
- Solicitors Regulation Authority, Anti-money-laundering guidance and the LSAG Guidance 2025. Accessed 3 June 2026.
- Information Commissioner's Office, A guide to subject access requests. Accessed 3 June 2026.
- Information Commissioner's Office, Principle (e): Storage limitation. Accessed 3 June 2026.
- Solicitors Regulation Authority, Scope of the money laundering regulations. Accessed 3 June 2026.
- The Law Society, Attitudes towards lawtech adoption (survey of 656 solicitors, 2023). Accessed 3 June 2026.
- The Law Society, Key trends shaping the legal industry in 2025. Accessed 3 June 2026.
- Clio, UK Legal Trends Report (Censuswide survey of 500 UK solicitors, September 2024). Accessed 3 June 2026.
- Clio, Law Firm KPIs and benchmarks (2025 platform data, global). Accessed 3 June 2026.
- Solicitors Regulation Authority, Responsibilities of COLPs and COFAs. Accessed 3 June 2026.