Quick Answer: A typical ten-attorney boutique firm is running 12 to 18 SaaS tools totaling $6,000 to $10,000 per month. An honest audit typically identifies 25 to 40 percent overspend from unused seats, duplicated capabilities, and tools that were bought before AI-native alternatives existed. The audit is not a one-time exercise. It should run every 12 months as the tool landscape and firm needs evolve.
Tech stack sprawl in small law firms is not sloppiness. It is the natural result of a decade of buying point solutions to fix specific problems. Somebody bought DocuSign because a contract needed signing. Somebody bought a CRM because a partner wanted better business development tracking. Somebody bought an intake tool because the web form was manual. Each purchase was rational. The aggregate stack is a mess.
The 2026 landscape adds a wrinkle. AI-native tools now do capabilities that used to require three or four separate subscriptions. Firms that audited their stack in 2023 and concluded it was efficient are probably paying for at least 30 percent of capability that a modern stack would provide in one place.
Here is the honest audit framework.
Step 1: inventory the stack
Every SaaS tool the firm pays for. Include the ones nobody remembers subscribing to. Pull the credit card statement and go line by line. Common categories to check:
| Category | Typical tools | Typical monthly spend for 10-attorney firm |
|---|---|---|
| Practice management | Clio, MyCase, Practice Panther | $600 to $1,300 |
| Document management | NetDocuments, iManage, SharePoint | $300 to $500 |
| Email and calendar | Microsoft 365, Google Workspace | $150 to $300 |
| Accounting | QuickBooks, Xero | $85 to $250 |
| Payment processing | LawPay, ClientPay | $40 plus 2-3 percent per transaction |
| E-signature | DocuSign, Adobe Sign | $250 to $500 |
| CRM | HubSpot, Lawmatics, Salesforce | $300 to $2,000 |
| Intake tools | Typeform, Jotform, Lawmatics intake | $50 to $200 |
| Contract review AI | Spellbook, Kira, LawGeex | $500 to $3,000 |
| Team chat | Slack, Teams | $80 to $150 |
| Video meetings | Zoom, Google Meet | $150 to $250 |
| Project management | Asana, Monday, ClickUp | $100 to $300 |
| Password manager | 1Password, LastPass | $40 to $80 |
| Cybersecurity and backup | Various | $200 to $500 |
| Time tracking (if separate) | Toggl, Harvest | $100 to $200 |
| Marketing tools | Mailchimp, Constant Contact, HubSpot Marketing | $100 to $500 |
Add it up. The ABA TechReport tracks average spend and the numbers have climbed steadily over the past five years.
Step 2: identify unused seats
Most SaaS tools bill per seat. Most firms have seats assigned to people who no longer work at the firm, or to attorneys who never actually use the tool. Common pattern: a firm has 12 Clio seats, 10 active users, and 2 seats billed for months to people who left or who were assigned access they never used.
Every tool should be audited for:
- Active vs assigned seats. Log in and check last-login dates.
- Seats for former employees. Recover these first.
- Seats for attorneys who never use the tool. Redistribute or drop.
- Duplicate accounts for the same person under different email addresses.
Typical recovery: 8 to 15 percent of stack spend from unused seats alone. Zero effort besides asking the question.
Step 3: find duplicated capabilities
Duplication is the biggest source of hidden overspend. Where to look:
Duplicate 1: CRM plus intake tool plus practice management
Many firms have a CRM for business development, a separate intake tool for capturing web leads, and matter records in their practice management platform. The contact data lives in three places and rarely reconciles. Consolidation candidate: one of the three usually can handle 90 percent of what the other two do.
Duplicate 2: project management tools plus practice management task features
Practice management platforms have task management. Firms often add Asana or Monday because the built-in task management is not great. Either turn on and use the built-in features or drop the practice management task functionality. Two systems for the same job is worse than either alone.
Duplicate 3: multiple document storage locations
Files live in NetDocuments, in SharePoint, in Google Drive, in Dropbox, and on individual attorneys' desktops. Every duplicate location is a search problem, a backup problem, and a compliance risk. Consolidate to one primary document management system.
Duplicate 4: multiple AI subscriptions
Firms often have a ChatGPT team subscription plus a Spellbook subscription plus a separate contract review AI plus individual attorney subscriptions to Claude Pro or similar. Consolidate to one AI-native operational platform where the AI has firm context, not three or four disconnected AI subscriptions.
Duplicate 5: multiple communication channels
Email plus Slack plus Teams plus SMS plus WhatsApp plus phone. Some of these are necessary. Most firms have accumulated more than they need. Pick your primary channels and communicate the rules.
Step 4: identify AI-replaceable stack
This is the 2026 question that did not exist a few years ago. What in the current stack does an AI-native operations platform replace?
For most boutique firms, MiOpsAI's Command Center replaces:
- Standalone CRM tools used mainly for business development touchpoints
- Standalone intake tools that capture leads but do not manage the follow-up
- Standalone AI drafting tools like Spellbook or Harvey (for boutique-scale use)
- Standalone project management tools used for matter and deal workflow
- Custom-built automation scripts, Zapier workflows, and other stack duct tape
What it does not replace: practice management platform (typically), document management, email and calendar, accounting, payment processing, e-signature, video meetings, trust accounting tools, court filing integrations, specialized practice-area tools.
The math for a typical firm: $2,000 to $4,000 per month in existing SaaS spend gets replaced by MiOpsAI at $1,750 per month for the full seven-chair Command Center ($250 per chair). Net savings of $250 to $2,250 per month plus significant capability gain from AI drafting and coordination that the old stack did not have. See /pricing.
Step 5: assess the tools you keep
For every tool you decide to keep, ask:
- Are we on the right tier? Many firms are on higher tiers than they need because they added seats or features and never re-evaluated.
- Are we paying month-to-month or annual? Annual commitments usually save 10 to 20 percent but lock you in. Right answer depends on tool stability.
- Is the vendor still the market leader in this category or has the landscape shifted? Sometimes staying on an old tool is more expensive than migrating.
- Are the integrations we depend on still working? Vendors sometimes deprecate integrations quietly.
- Are we using the AI features the vendor added? Most 2024-2026 releases added AI features that could reduce reliance on separate AI tools.
Step 6: build the transition plan
Do not cancel everything on Monday. Build a phased plan.
| Phase | Actions | Timeline |
|---|---|---|
| Immediate (week 1) | Cancel unused seats, cancel unused subscriptions, downgrade over-provisioned tiers | Same billing cycle |
| Short term (weeks 2 to 8) | Consolidate duplicated capabilities. Migrate data from tools being retired. | 1 to 2 billing cycles |
| Medium term (weeks 8 to 16) | Introduce AI-native platform. Run parallel with tools being replaced. | 2 to 4 billing cycles |
| Long term (months 4 to 6) | Retire replaced tools. Full audit of new stack. | 4 to 6 months from start |
The parallel period is critical for anything touching billing, matter management, or client comms. Do not cut over cold. Run parallel until you trust the new system.
The hidden costs beyond subscription fees
Subscription fees are the visible cost. The hidden costs are usually larger.
- Administrative time. Every tool needs someone to add and remove users, reset passwords, manage integrations, and troubleshoot when something breaks. Multiply by number of tools.
- Training time. New employees learn each tool. Existing employees relearn when tools update their UI.
- Integration maintenance. When one tool releases an update that breaks an integration with another, someone has to fix it.
- Data reconciliation. When contact records disagree between the CRM and the practice management platform, someone has to sort out which is right.
- Security audit surface. Every tool is a potential vulnerability. Every tool needs its own security review during due diligence for new clients.
- Compliance surface. Every tool that touches client data needs a business associate agreement, a data processing agreement, or equivalent depending on jurisdiction and practice area.
- Vendor management. Renewals to negotiate, invoices to approve, contact changes at vendors to track.
For a ten-attorney firm running 15 tools, the hidden costs typically add another $30,000 to $60,000 per year on top of subscription fees. Consolidation reduces the hidden cost line even more dramatically than it reduces the subscription line.
Signs your stack needs an audit right now
Not every firm needs to run an audit today. Some signs it is overdue:
- Nobody at the firm can list every tool the firm pays for from memory.
- The credit card statement has monthly SaaS charges you cannot identify.
- Multiple attorneys use different tools to do the same job because each has a preference.
- Data has to be manually reconciled between systems on a recurring basis.
- New clients ask what systems you use for their data and the answer takes ten minutes to explain.
- You are subscribing to an AI tool that has not been touched in 30 days.
- Onboarding a new attorney takes more than one day of pure system training.
If any three of these apply, the audit is overdue. If any five apply, the audit will pay for itself immediately.
What the finance chair does during an audit
Firms running MiOpsAI's Command Center use Mac (the finance chair) to keep the SaaS spend map current. Mac tracks every recurring vendor, categorizes by function, flags anomalies (renewal rate increase, seat count drift, tools with no recent activity), and drafts the monthly SaaS summary for partner review. Mac does not make cancellation decisions. Mac surfaces the data for the partners to decide. Julia handles vendor contract review for renewals worth reviewing. Julia produces first-pass drafts and flags risk. A licensed attorney reviews and executes. Privileged case files stay with the attorney. MiOpsAI does not practice law.
What to protect during any transition
Regardless of what changes in the stack, these three things stay protected:
Client confidentiality
Every vendor that touches client data needs a confidentiality agreement and, for AI vendors specifically, terms that prohibit training foundation models on tenant content. MiOpsAI does not train foundation models on tenant content. Data stays inside your tenant.
Attorney privilege
Julia produces first-pass drafts and flags risk. A licensed attorney reviews and executes. Privileged case files stay with the attorney. MiOpsAI does not practice law. Any tool change has to preserve the boundary between attorney-client privileged material and general operational material.
Trust accounting compliance
Trust accounting rules do not change because your tools change. If you switch practice management platforms, verify trust accounting handling before cutover. If you consolidate, keep dedicated trust accounting separate from general operational tools.
Frequently Asked Questions
How often should we do a stack audit?
Every 12 months. The tool landscape shifts fast enough that a stack that was optimal in 2024 is probably not optimal in 2026. Annual audits catch drift before it becomes expensive.
What if partners refuse to give up their favorite tools?
This is common. The compromise pattern that works: partners can keep individual-use tools (their preferred note-taking app, their preferred password manager) as long as they pay for their own subscription or the firm's cost stays flat. Firm-wide tools are firm decisions.
Does consolidating to fewer tools create risk?
Some. Consolidation means more work depends on fewer vendors. Mitigate by choosing vendors with strong track records, ensuring data export options, and maintaining backups. The risk from consolidation is usually lower than the risk from stack sprawl (integration failures, data inconsistency, security gaps across too many surfaces).
How much can a typical firm save?
For a ten-attorney boutique firm spending $8,000 per month on SaaS, a good audit typically identifies $1,500 to $3,000 per month in savings from unused seats, duplicated capabilities, and tier reductions. Adding AI-native consolidation can extend that. Every firm is different.
What about SOC 2 for tools we keep?
For law firm work, prefer vendors that are SOC 2 Type II certified or that have equivalent security certifications. MiOpsAI is working toward SOC 2 certification. Underlying AWS infrastructure is SOC 2 Type II. Encryption in transit and at rest, role-based access controls, and audit logs are available today.
Who inside the firm should own the audit?
The managing partner or COO should sponsor the audit. The actual work of pulling data, interviewing users, and building the recommendation is a delegated task, often to an operations manager or a paralegal with technology aptitude. The final decisions on what to keep and what to cut are partner-level. Do not delegate the decisions to the person doing the analysis.
How long does a full audit take to complete?
Two to three weeks for the analysis. Another 30 to 60 days to implement the changes (cancellations, consolidations, phased migrations). The full transition from audit to steady state on the new stack is typically 90 days.
What if we discover we are missing capabilities we should have?
This is common and often more valuable than the savings. Audits regularly surface gaps like missing document version control, missing conflict check discipline, missing time-capture rigor, or missing client communication tracking. Fixing these gaps often justifies the audit even before considering the savings. Add the missing capability to the stack roadmap and prioritize by risk and revenue impact.
Do vendors give discounts when we consolidate away from them?
Sometimes, if you ask early. A vendor whose renewal is 90 days out and who knows you are evaluating alternatives will often offer meaningful discounts to retain the account. Have the conversation before you decide, not after. The vendor is generally more willing to negotiate when there is still time to save the relationship.
Where to go from here
A tech stack audit is not glamorous work. It is the kind of thing that happens when a managing partner finally looks at the SaaS line on the P&L and decides it has grown enough to justify the effort. The good news is that the effort typically pays back within one billing cycle. Book a walkthrough at Request Access and see M&A and legal practice for the industry overview. Pricing is $250 per chair per month with 60-day cancellation notice at /pricing.