Microsoft just announced an AI model built specifically to cut enterprise cybersecurity costs by automating threat detection and response. If you run a law firm, your first reaction might be “that’s an IT problem.” It isn’t. Client data protection sits at the center of your ethical obligations, your malpractice exposure, and increasingly your ability to win new matters from clients who ask about your security posture before they sign an engagement letter.

The Microsoft announcement matters less as a product story and more as a signal. Big vendors don’t build AI models to automate a function unless the economics of doing that function manually have become untenable. Enterprise cybersecurity teams have been drowning in alert volume for years, and the cost of staffing a 24/7 security operations function has priced most mid-sized organizations out of doing it properly. Law firms in the $1M-$25M range are exactly the kind of business that’s felt this squeeze without necessarily calling it a “cybersecurity budget problem.” You’ve felt it as insurance premium increases, as vendor risk questionnaires that take a paralegal two days to complete, and as the nagging sense that your client data protection story is held together by a firewall you bought in 2019 and a promise that “we take security seriously.”

Here’s the thing worth sitting with. The same automation logic Microsoft is applying to threat detection is the logic we apply every day to the manual work inside your firm that has nothing to do with cybersecurity software and everything to do with how your people spend their hours. Intake calls. Document review. Matter triage. These are pattern-recognition tasks performed by expensive humans, at a volume that keeps growing, with error rates that go up when people get tired. That’s the same problem Microsoft is solving for security operations centers. It’s the same problem we solve for firms like yours.

The manual work hiding inside your overhead

Walk through a typical week at a firm your size and you’ll find three places where cost is leaking out that nobody’s tracking on a P&L line.

Billable-hour leakage. Attorneys spend four to six hours a week, on average for firms of this size, on document review, intake follow-up, and matter administration that never becomes a billable line item. It’s not laziness or inefficiency in the way people usually mean it. It’s just that reviewing a client intake form, drafting a conflict check memo, or chasing a signature isn’t work you can bill at your hourly rate, so it happens in the margins, after hours, or gets pushed onto whoever has five minutes free. Multiply that across a ten-attorney firm and you’re looking at a meaningful chunk of capacity that generates zero revenue every single week.

Intake delays that cost you the client before you ever meet them. Somewhere between 30% and 40% of after-hours intake calls and form submissions never convert into a signed engagement, largely because nobody answered fast enough. A prospective client with a real legal problem doesn’t wait around. They call the next firm on the list. If your intake process depends on a receptionist who leaves at 5pm or a partner who checks voicemail on Monday, you are structurally losing matters you never even knew existed.

Document review that ties up your most expensive junior talent. First-pass review on contracts, discovery batches, and matter files is the kind of work associates dread and clients resent paying for. At $200 to $400 an hour of associate time, a multi-day discovery review isn’t just slow, it’s an expensive way to do work that follows a fairly predictable pattern most of the time. Junior associates aren’t inefficient at this. The work itself is inefficient for the level of talent doing it.

None of this shows up as a “cybersecurity cost” on your income statement. But it’s the same category of problem Microsoft is targeting with its new model: repetitive, pattern-based work currently done by expensive humans at a volume that keeps climbing. The fix is also the same category of solution.

What an AI agent actually looks like doing this work

This is where most partners’ eyes glaze over, because “AI for law firms” has become a phrase that means everything and nothing. So let’s be specific about what this looks like inside a real firm.

Take the Intake Voice Agent. It answers every call, including the ones that come in at 9pm on a Saturday when your associate is at her kid’s soccer game and your receptionist has been gone for six hours. It runs a conflict check against your existing client and matter database before the call ends. It captures the facts of the potential matter in the caller’s own words, not a garbled voicemail transcript. And it books a consultation directly into the relevant partner’s calendar, so the lead is in your pipeline before you’ve even seen the notification. This isn’t a chatbot reading a script. It’s built to handle the actual texture of an intake call, including the caller who isn’t sure they even have a legal problem yet.

Then there’s the Matter Triage Agent. Every form submission and inbound email gets classified by practice area, scored for fit against your firm’s actual book of business, and routed to the right partner with a one-paragraph brief already attached. Instead of a partner opening an email cold and trying to figure out if this is a real matter or a tire-kicker, they open a brief that tells them what they’re looking at and why it landed on their desk. The decision that used to take fifteen minutes of context-gathering now takes ninety seconds.

And for the discovery problem specifically, the Document Review Agent performs first-pass review on contracts and discovery batches, flags the clauses that matter, summarizes each party’s position, and produces a memo written at associate grade. Your associate still reviews it. They still apply judgment. But they’re starting from a structured first pass instead of a blank stack of PDFs, which turns a three-day slog into an afternoon of verification and refinement.

None of these agents replace your lawyers’ judgment. They replace the hours your lawyers currently spend doing work that doesn’t require their judgment in the first place. That distinction is the whole point, and it’s also exactly the same distinction Microsoft is drawing with its cybersecurity model: automate the detection and triage layer so your expensive, trained people spend their time on the decisions that actually need them.

If you want a deeper look at how the voice side of this works specifically for inbound calls, Omni’s voice product is worth a look. For the operational side, including triage and document workflows, Omni’s ops layer covers the agents that sit inside your existing systems rather than replacing them.

The dollar reality for a firm your size

We’ve looked at enough firms in this revenue band to see a consistent pattern. For a law firm doing $1M to $25M in revenue, the combined cost of missed intake, unbilled attorney hours, and slow document review typically lands somewhere between $80,000 and $250,000 a year. That’s not a hypothetical efficiency gain. That’s money that’s already leaving your firm right now, every month, distributed across enough small inefficiencies that no single line item ever looks alarming enough to fix.

The Microsoft news is a useful prompt here, not because your firm needs a new cybersecurity vendor, but because it’s a reminder that the cost of doing repetitive, high-volume work manually keeps rising while the cost of automating it keeps falling. Cybersecurity teams figured this out first because alert volume made the manual approach mathematically impossible. Law firms are reaching the same point with intake volume and document volume, just on a longer timeline.

Where the audit fits

This is usually where a partner asks a fair question: how do we know which of these problems is actually costing us the most, versus which one just feels the most annoying?

That’s what the Omni Audit is for. It’s 60 minutes, no deck, and it produces three things you can act on immediately: a map of where your specific leakage is concentrated, a rough dollar estimate tied to your actual call volume and matter mix, and a short list of which agent would close the biggest gap first. We don’t come in with a pre-built pitch. We look at your intake numbers, your associate hours, and your document workflows, and we tell you what we actually see.

If you want to see how this looks specifically for firms in your industry, the AI audit for law firms walks through the exact scope of what we cover and what you walk away with. Most partners are surprised by which problem turns out to be the biggest one. It’s rarely the one they called us about.

Book a 60-min Omni Audit and bring whatever intake or billing data you have handy. We’ll work with what’s there, even if it’s messy.

A practical starting point before you talk to anyone

If you’re not ready to book a call yet, start smaller. We put together an AI Client Intake Checklist for Law Firms that walks through the specific points in your intake process where leads typically slip away, from the first ring to the signed engagement letter. It’s a working document, not a sales piece, and it’s built for firms exactly in your revenue range. You can download it directly here and run it against your own intake log this week. Most firms find at least two or three gaps in the first pass.

For a broader view of how other professional service firms are approaching this same shift, our insights section has a running set of pieces on where AI actually earns its keep versus where it’s just noise, and our guides library breaks down specific workflows in more depth if you want to go deeper before making a decision.

The bigger picture

Microsoft building an AI security model to cut enterprise costs isn’t really news about cybersecurity. It’s news about where the economics of manual, repetitive work are heading across every industry, including yours. The firms that get ahead of this aren’t the ones buying the most software. They’re the ones that took an honest look at where their people’s time actually goes and fixed the two or three things that were quietly costing the most.

For most law firms we talk to, that’s intake response time, unbilled admin hours, and the first pass on document review. If that sounds like your firm, the fastest way to find out how much it’s actually costing you is to look at the numbers directly rather than guess.

Start with Omni for law firms to see the full scope, or go ahead and book my Omni Audit and we’ll walk through your specific numbers together. No deck, no pitch, just an honest look at where the $80,000 to $250,000 is likely hiding in your firm this year.