How Our Law Firm Protects Client Data
Every document, communication, and payment you entrust to Ronald S. Cook, P.C. is protected by attorney confidentiality obligations, independently audited technology, and layered office security.
Ronald S. Cook, P.C. represents clients across all 62 New York counties in matters that involve sensitive financial records, tax filings, estate documents, medical information, and litigation files. Attorney Ronald S. Cook holds a J.D., dual LL.M. degrees in Bankruptcy and Taxation, and an MBA, and has spent over 25 years handling matters where discretion and data protection are not optional. This page explains, in plain terms, how the firm safeguards what you share with us.
Call toll-free: (888) 275-2620. Available 24/7.
Confidentiality Is a Professional Obligation, Not a Feature
Attorneys are bound by law to protect your information. Under Rule 1.6 of the New York Rules of Professional Conduct, a lawyer may not knowingly reveal confidential client information and must take reasonable steps to prevent unauthorized access to it. This duty attaches the moment you consult us and continues after your matter ends. No technology company, bank, or accounting firm operates under an equivalent professional obligation enforced by the courts and the attorney disciplinary system.
The duty extends to how we choose and use technology. The New York State Bar Association and court disciplinary committees have made clear that reasonable efforts to protect client data include vetting the software and vendors a firm relies on. Every system described on this page was selected with that obligation in mind.
Audited Practice Management Infrastructure
Client matters are managed in Clio, the leading practice management platform for law firms. Clio maintains independently audited security controls, including SOC 2 Type 2 and SOC 1 Type 2 examinations conducted by third-party auditors, HIPAA compliance, and GDPR compliance. These certifications belong to Clio and cover the systems where our client files, calendars, and case records are stored. Clio publishes its audit reports, penetration testing summaries, and security documentation publicly at its Trust Centre, where you can review the details yourself.
What that means in practical terms: data stored in Clio is encrypted in transit and at rest, hosted on enterprise cloud infrastructure with distributed denial-of-service protection, backed up continuously, and monitored for intrusion. Clio is trusted by bar associations across the country, including the New York State Bar Association. Rather than asking you to take our word for our vendor’s security, we point you to the third-party audits that verify it.
| Standard | What It Verifies |
| SOC 2 Type 2 | Independent auditors tested Clio’s security, availability, and confidentiality controls over a full audit period — not just on paper, but in operation. |
| SOC 1 Type 2 | Controls relevant to financial data handling were examined and verified by outside auditors. |
| HIPAA | The platform meets federal standards for protecting health information — relevant to our healthcare law and medical litigation matters. |
| GDPR | Data handling meets the European Union’s privacy regulation, among the strictest data protection standards in the world. |
The certifications above are held by Clio and apply to Clio’s systems and infrastructure. Source: trust.clio.com.
Secure Document Intake and Payment Processing
Documents you send us go into protected systems, not a shared inbox free-for-all. Client documents sent to Docs@RonCookLawFirm.com — and traffic ticket photos texted to (631) 678-8993 — are moved into the matter management system described above, where access is limited to firm personnel working on your matter.
Payments are processed through LawPay, the payment platform built for law firms. LawPay is PCI-compliant, which means it meets the payment card industry’s data security standards, and it is designed around attorney trust accounting rules. The firm never stores your full card number on its own computers — payment data is handled entirely within LawPay’s secured environment.
Network and Office Security
The firm’s own computers sit behind dedicated protection. All firm workstations operate behind a current-generation, enterprise-grade firewall and network security appliance that inspects traffic entering and leaving the office network, blocks known threats, and shields firm systems from outside intrusion. Firm devices are maintained with current security updates and malware protection.
Access to client information is limited to the people who need it. Staff access firm systems through individual credentials, and access to matter files is limited to personnel working on those matters. Physical files at our Smithtown and Garden City offices are kept in secured office space.
What This Means for You as a Client
You can send us what your matter requires without hesitation. Tax returns for an IRS controversy, financial schedules for a bankruptcy filing, medical records for a healthcare matter, estate documents listing your assets and beneficiaries — these are exactly the materials our systems are built to protect. The combination of attorney confidentiality under RPC 1.6, independently audited software, protected payment processing, and office network security means your information is guarded at every point it touches the firm.
If you have questions about how a specific document or communication will be handled, ask. We will tell you exactly where your information goes and who can see it. Transparency about data handling is part of how the firm approaches technology generally — you can read more about the firm’s approach to responsible technology use on our AI in Legal Services page and our About the Law Firm page. Existing clients can also access their matter securely through our Client Portal.
Contact Us
Call toll-free: (888) 275-2620. Available 24/7.
Our law firm has over 3,000 client testimonials across Google, BBB, Trustpilot, and other platforms. View our verified client reviews.
Client reviews and ratings reflect individual experiences and do not guarantee a similar outcome. Prior results do not guarantee future results.
Last reviewed by Attorney Ronald S. Cook — August 2026
This page is for informational purposes only and does not constitute legal advice.
