A remote legal assistant can draft correspondence, manage calendars, organize discovery and keep intake moving as well as anyone in your office. Whether the arrangement works depends less on the hire than on the first 30 days: what they sign, what they can open, and how fast they learn your firm's habits. This guide walks through that setup in order.
Know your obligations before day one
Under ABA Model Rule 5.3, lawyers with supervisory authority must make reasonable efforts to ensure that nonlawyer assistants act in a way that fits the lawyer's professional obligations. That includes the duty of confidentiality in Rule 1.6. The rule does not change because your assistant works from Bogotá instead of the next office.
Most states have adopted versions of these rules, and several state bars have issued ethics opinions on outsourcing and remote work. Read your state's guidance or ask ethics counsel before you finalize your setup. This guide is practical, not legal advice.
One administrative note: a foreign independent contractor typically gives you a Form W-8BEN rather than a W-9. Confirm the details with your accountant.
Put confidentiality in writing
Paperwork comes before passwords. Have these signed and filed before the assistant sees a single client name:
- Contractor agreement that defines duties, supervision, and who owns the work product
- Confidentiality agreement covering client information, privileged material and firm business, with no end date on the duty
- Acceptable use policy for devices, accounts, email and software, including AI tools
- Conflicts disclosure listing prior legal employers, so you can screen for conflicts the same way you would for an in-house hire
- Data return and deletion terms for the day the engagement ends
- Acknowledgment of your security policy, signed after they have read it, not before
Grant access in this order
Access should grow with trust and workload. Unlock systems in stages:
- Create firm-owned accounts. Email on your domain, nothing personal. Every file and message should live in systems you control.
- Turn on multi-factor authentication for every account, and issue a firm password manager so credentials are never typed into chat or email.
- Open the practice management system with role-based permissions. Start with the matters they will work on this week, not the full client list.
- Share documents by matter folder. If your platform allows it, block downloads to local devices or use a virtual desktop so files stay on firm infrastructure.
- Add phone and messaging last among the client-facing tools. Set up a firm VoIP line so calls are logged and the assistant never uses a personal number.
- Handle court e-filing carefully. Filing usually runs under an attorney's credentials. Use delegate or filing-agent features where the system offers them, and never share an attorney's login. Check your court's rules on who may submit.
- Review access after 30 days. Remove what they have not used and add what the work now requires.
Grant access by matter, not by mailbox: if they don't need it this week, they don't get it yet.
Secure the workspace
A remote assistant's home office is now part of your firm's security perimeter. Agree on the basics up front: a private room where calls cannot be overheard, a computer used by no one else, full-disk encryption, automatic screen lock, current operating system updates, and no public Wi-Fi without a VPN. Spell out that client documents never go to personal email, personal cloud storage or unapproved AI tools. Ask them to confirm each point on a short video call with their camera showing the space.
Teach the firm, not just the tasks
Skilled legal assistants already know how to format a pleading. What they don't know is how your firm does it. Plan the first month in stages.
Week one: shadow and study. Share your templates, style guide, file-naming conventions and a list of active matters with a one-line summary of each. Have them sit in on internal calls.
Week two: low-risk work. Document formatting, calendar entries, intake forms and records requests. Review everything.
Weeks three and four: client-facing work. Scheduling calls, status updates and follow-ups, with a clear script for what they can and cannot say.
Introduce the assistant to your team by name and role, and tell clients who they will be hearing from. A short note from the attorney prevents confusion when a new voice calls.
Build review into the workflow
Supervision is not a one-time event. Set a fixed daily check-in for the first month, then reduce it as quality holds. Two rules matter most.
First, deadlines get a second set of eyes. Any date the assistant calendars should be confirmed by an attorney or a second staff member until you trust the process.
Second, the assistant never gives legal advice. Give them a line they can use word for word:
"That's a question for the attorney. I'll make sure she gets your message today and calls you back."
Anything leaving the firm under an attorney's name gets reviewed before it goes out.
Plan the offboarding now
Write the exit checklist on day one, when it is easy. On the last day, disable every account at once, revoke e-filing delegations, rotate any shared credentials, transfer the VoIP number, and get written confirmation that firm files have been deleted from any device. Keep that confirmation in the personnel file.
The bottom line
A remote legal assistant is safe and productive when the firm treats onboarding as a controlled process: agreements first, access in stages, a secure workspace, and steady attorney supervision. Skip those steps and the risk lands on your license, not the assistant's.
The hire itself still matters. RemoteVetted runs a tailored search for each role and checks English fluency, hands-on skills, references and background before you meet anyone, so the person you onboard is ready for the structure you build.