Client portal for law firms: the best picks for 2026: 6 tools compared
Updated 9 min read
A client portal for a law firm gives each client a secure place to send documents, answer questions and follow their matter without long email chains. The right one depends on your security requirements first. Dora is our top pick for client experience and follow-up, but it publishes no compliance certifications. If a client or regulator requires them, start with Clinked, Moxo or Assembly's Advanced plan with a HIPAA BAA.
Our pick
Dora
Best client experience and follow-up
- Dora, the AI account manager, turns vague requests into clear briefs and asks clients only for what's missing
- Follows up with quiet clients and collects approvals in one click, with optional auto-approve
- Clients can send requests and replies by email or through their own AI agent, so they don't have to learn a new tool
Law firms spend a lot of time waiting: on signed forms, on bank statements, on a one-line answer that unblocks a filing. Clients don't mean to stall, but email makes it easy to lose track of what's needed. A portal fixes that only if clients actually use it.
We compared six portals on security and what each vendor publishes, how documents get collected, how easy the portal is for clients, and price for a small firm. This isn't legal or compliance advice; check any tool against your own professional obligations and client agreements.
The shortlist
- 1DoraBest client experience and follow-upFree, then $10/client/mo
- 2
ClinkedBest secure document portal$11/user/mo - 3
AssemblyBest for HIPAA and billing in one portalFree, then $49/mo - 4
MoxoBest for regulated, multi-party processesContact sales - 5
FuseBaseBest portal templates with a trust centerFree, then $39/mo - 6
SuiteDashBest all-in-one on a budget$19/mo
1. Dora
Best client experience and follow-up
Dora turns each ask into a clear request, calls out what's still missing and nudges a quiet client twice by email before your team hears. Clients reach Dora by email or through their own AI agent, so nobody has to learn new software, and each client sees only their own workspace. Dora doesn't offer SSO or publish compliance certifications, so confirm it meets your requirements before putting sensitive matters in it.
What it is: A client portal with a built-in AI account manager that briefs requests, chases clients and gets work signed off.
Strengths
- Dora, the AI account manager, turns vague requests into clear briefs and asks clients only for what's missing
- Follows up with quiet clients and collects approvals in one click, with optional auto-approve
- Clients can send requests and replies by email or through their own AI agent, so they don't have to learn a new tool
- Sets up from your website in minutes
- Unlimited team seats; you pay only per client
- Monthly allowances, estimates for extra work, weekly client summaries and a delivery record
- 46 built-in integrations plus any MCP Registry server, an MCP server and API, including Slack, Linear, Jira, ClickUp and Notion
Limitations
- No client invoicing or payments built in; use your existing billing tool
- Full custom-domain white label is set up on request rather than self-serve
- Newer than most tools on this list
Pricing: First client free (Every feature, free forever), Each additional client $10/mo (Unlimited team seats). Pricing grows per client.
2. Clinked
Best secure document portal
Clinked names law among the industries it serves and is built for secure document sharing, with role-based permissions, version control and watermarking. It lists AES-256 encryption at rest, audit trails from Standard, and cites ISO 27001, SOC 2, GDPR and HIPAA readiness. DocuSign and Adobe Acrobat Sign connect for signatures.
What it is: A secure, white-label client portal and file collaboration platform with a virtual data room option.
Strengths
- Strong permissions for sensitive documents
- iOS and Android apps
- DocuSign, Power BI and Zapier integrations
Limitations
- Big jump from Start Up to Standard ($299/mo)
- Built around files more than requests and approvals
- No AI features listed
Pricing: Start Up $11/mo (Per user, no custom URL), Standard $299/mo (100 members, own domain), Premium $599/mo (250 members, white-label emails). Pricing grows per user, then by member tier.
3. Assembly
Best for HIPAA and billing in one portal
Assembly lists law among the firms it serves and states SOC 2, HIPAA and GDPR compliance. Its Advanced plan, $599 a month, adds an audit log, enforced MFA and a HIPAA BAA. Every plan keeps e-signature contracts, forms and billing in a branded portal with magic-link sign-in.
What it is: A polished branded client portal, formerly Copilot, with billing, forms and an AI app builder.
Strengths
- Clean, modern portal clients find easy to navigate
- Billing, forms and contracts inside the portal
- AI app builder deploys custom apps into the portal
- Free plan for up to 5 active contacts
Limitations
- Plans capped by active client contacts and internal users
- Custom domain and badge removal need Professional ($139/mo)
- Request briefing and client follow-up stay with your team
Pricing: Free free (5 active contacts, 1 internal user), Starter $49/mo (50 active contacts, 1 internal user), Professional $139/mo (500 contacts, 3 internal users (+$39 each), custom domain), Advanced $599/mo (Unlimited contacts, 5 internal users (+$79 each)). Pricing grows by client contacts.
4. Moxo
Best for regulated, multi-party processes
Moxo runs structured processes with approvals, e-signatures, identity checks and reminders, and lists SOC 2 Type II, SAML SSO, an audit trail and deployment in your own cloud or on premises. Its help center lists connectors for Filevine and DocuSign. It's sold through demos with no public pricing.
What it is: A process platform with branded client portals and AI agents for multi-step, multi-party client workflows.
Strengths
- Strong for repeatable, regulated, multi-party client processes
- AI agents across workflow steps, including in the client portal
- SDKs to embed workflows in your own apps; SOC 2 Type II and SSO
Limitations
- No public pricing; sold through demos
- Sales-led setup rather than self-serve
- Built for fixed processes more than an ongoing flow of requests
Pricing: Quote custom (No public pricing). Pricing grows quote-based.
5. FuseBase
Best portal templates with a trust center
FuseBase offers example portals for finance and legal work, magic-link sign-in and granular permissions, and its trust center covers SOC 2 and HIPAA. It suits firms that deliver documents and knowledge bases. White label needs Advanced at $399.
What it is: A client portal and knowledge workspace with built-in AI agents and automation.
Strengths
- Strong for documents and knowledge bases
- AI agents inside client portals
- Free plan
Limitations
- White label only on Advanced ($399/mo)
- More workspace than request flow
- Extra portals cost $20/mo each
Pricing: Free free (1 portal), Solo $39/mo (1 member, 1 client), Essentials $99/mo (5 members, 100 clients), Advanced $399/mo (50 members, white label). Pricing grows by members, portals and clients.
6. SuiteDash
Best all-in-one on a budget
SuiteDash combines a white-label portal with CRM, file exchange, contracts and e-signing at a flat $19 to $99 a month, with unlimited users and contacts. It doesn't publish compliance certifications in the sources we checked. Setup takes time because it covers so much.
What it is: An all-in-one white-label business suite with a client portal, CRM, projects, invoicing and marketing.
Strengths
- Flat price with unlimited users, contacts and portals on every plan
- White labeling and a branded app included from the $19 plan
- Very broad: portal, CRM, projects, invoicing and marketing in one tool
Limitations
- A lot to configure; setup takes far longer than lighter portals
- Automations, onboarding and tickets only on Pinnacle ($99/mo)
- AI needs a separate AI subscription or your own provider
Pricing: Start $19/mo (100GB, full white label), Thrive $49/mo (Adds proposals, pipelines, client live chat), Pinnacle $99/mo (Adds automations, onboarding, support tickets). Pricing grows flat.
Side-by-side comparison
| Tool | Starting price | Pricing grows | Free plan | Unlimited seats | Integrations | White label | AI |
|---|---|---|---|---|---|---|---|
| Dora | Free, then $10/client/mo | per client | Yes | Yes | 46 + thousands via MCP | Your logo and name; full white label on request | AI account manager on every plan |
| Clinked | $11/user/mo | per user, then by member tier | 14-day trial | No | 7 | Own domain from Standard; white-label app on Enterprise | None listed |
| Assembly | Free, then $49/mo | by client contacts | Yes | No | 2 | Branding on all plans; custom domain from Professional | AI app builder for custom portal apps |
| Moxo | Contact sales | quote-based | No | No | 34 | Your logo, colors and voice; embeddable SDKs | AI agents and an AI concierge in the client portal |
| FuseBase | Free, then $39/mo | by members, portals and clients | Yes | No | 52 | White label and custom domain from Advanced | AI agents in portals, transcription, automation |
| SuiteDash | $19/mo | flat | 14-day trial | Yes | 20 | Full white label and custom domain on every plan | AI Skills, with a separate AI subscription or your own provider |
What to look for
Start with your security requirements, not features
Before comparing anything else, write down what you're required to have: encryption at rest, audit trails, SSO, multi-factor sign-in, a BAA for health information, or a named certification a client contract asks for. That list decides the shortlist.
Assembly states SOC 2, HIPAA and GDPR compliance, and its Advanced plan adds an audit log, enforced MFA and a HIPAA BAA. Moxo lists SOC 2 Type II, SAML SSO, an audit trail and deployment in your own cloud or on premises. Clinked lists AES-256 encryption at rest and audit trails, and cites ISO 27001, SOC 2, GDPR and HIPAA readiness. FuseBase's trust center covers SOC 2 and HIPAA. Dora publishes no compliance certifications and doesn't offer SSO.
Know where client data goes
Ask every vendor which providers process your data and where. That matters more for a firm than for most businesses, and AI features add one more party to the list.
Dora names its providers: Vercel hosts the app, Convex stores the database and files, Anthropic runs Dora's AI, Resend handles email and Stripe handles payments. Data is encrypted in transit and mainly processed in the United States, and Dora says it doesn't train AI models on your content. To delete your firm's data, you email Dora's team, and it's removed within 30 days and from backups after that.
Make document requests specific
Matters stall on vague asks. 'Send us your documents' gets a partial reply; a named list of what's still missing gets finished. Check whether the portal turns an ask into a list the client sees every time they look.
Dora calls out what's still missing on each request and opens each client's portal to a short 'Needs you' list. A recurring request can open itself every 1 to 12 weeks or months for routine documents. Assembly's document requests work as a checklist the client uploads against, and Clinked organizes everything in permissioned folders with version control.
Keep signatures and billing where they belong
Engagement letters need signatures, and fees need invoices. Decide whether those happen in the portal or in tools you already use.
Assembly includes e-signature contracts and billing in the portal. Clinked connects to DocuSign and Adobe Acrobat Sign, Moxo includes e-signatures in its process steps and lists a DocuSign connector, and SuiteDash lists e-signing. Dora has neither e-signatures nor invoicing, so firms using it keep their signing and billing tools.
Make it easy for clients who never log in
Many clients will never open a portal on purpose. A portal that only works when they log in collects documents no faster than email.
Dora clients can reply to any update by email and attach files up to 100 MB each, and the reply lands on the right request. Mail from anyone outside that client's workspace or your team isn't filed. Assembly, Moxo and FuseBase use magic links instead of passwords, which also removes a common reason clients give up.
What it costs
Assume a 6-person firm with 30 active clients and about 60 client contacts, billed monthly. SuiteDash is $19 to $99 flat, with unlimited users and contacts. Clinked's Start Up plan is $66 for six users if client logins don't count; its pricing page doesn't say, and if they do, 66 users passes Start Up's 25-user limit, so Standard at $299 for 100 members is the safer budget. Sixty contacts pass Assembly Starter's 50, so Assembly starts on Professional at $139 with 3 internal users, plus three at $39, or $256.
If you need Assembly's HIPAA BAA, Advanced is $599 with 5 internal users, plus $79 for the sixth, or $678 a month. FuseBase Essentials includes 5 members, so six people means Advanced at $399. Dora is $290 a month for 30 clients with every staff member included, and clients you only serve occasionally can be archived so they drop off at your next renewal. Moxo is quoted after a demo.
How to choose
- Your requirements allow it and your bottleneck is clients who don't send documents or answer on timeDora
- Your portal is mainly secure document sharing with strict permissions, audit trails and mobile appsClinked
- You need a HIPAA BAA and want e-signatures and billing in the same portalAssembly
- A contract requires SSO, SOC 2 Type II or on-premises deployment for a multi-party processMoxo
- You want a portal from a legal template, with a SOC 2 and HIPAA trust centerFuseBase
- You want a portal, CRM and e-signing at a flat price and can invest setup timeSuiteDash
Common mistakes
- Choosing on client experience before checking requirements. A portal you later have to leave costs more than one that's harder to love.
- Assuming a vendor is compliant because the site says secure. Ask for the specific report, certification or BAA you need.
- Making clients log in to answer a one-line question. Accept email replies or expect delays.
- Forgetting that AI features send data to another provider. Ask which one, and whether it trains on your content.
How we compared
- Security and compliance: What the vendor publishes: encryption, audit trails, SSO, certifications and BAAs.
- Document collection: How clients send what you asked for, and how the firm knows what's still missing.
- Client experience: Whether clients can respond without a password, an app or a training call.
- Follow-up: Whether reminders run on their own or someone at the firm writes them.
- Price for a small firm: What a 6-person firm with 30 active clients pays.
Rankings weight what decides whether a portal works day to day: the client's experience, how much follow-up it takes off the team, and how pricing behaves as you grow. Feature counts come last. Read the full method.
The verdict
Start with your security requirements. If a client contract or regulator names a certification, SSO or a BAA, shortlist Clinked, Moxo or Assembly's Advanced plan and confirm details with the vendor. If your bottleneck is clients who don't send documents or answer questions on time, and your requirements allow it, Dora is the strongest choice for getting replies without anyone at the firm writing reminders.
Frequently asked questions
What's the best client portal for law firms?
It depends on your security requirements. Dora is our top pick for client experience and follow-up, because it chases missing documents and lets clients answer by email. If you need published certifications or a BAA, Clinked, Moxo and Assembly's Advanced plan are the stronger starting points.
Is Dora secure enough for a law firm?
Dora keeps each client to their own workspace, signs people in with a link or code that expires after 15 minutes, encrypts data in transit and mainly processes it in the United States. It doesn't offer SSO or publish compliance certifications like SOC 2. Whether that's enough depends on your obligations and your clients' requirements, so check before you move sensitive matters.
Which client portals offer a HIPAA BAA?
Assembly offers a HIPAA BAA on its Advanced plan at $599 a month, along with an audit log and enforced MFA. FuseBase's trust center covers HIPAA, and Clinked describes itself as HIPAA-ready. Confirm BAA terms directly with any vendor before sharing health information.
Which portals have SSO and audit trails?
Moxo lists SAML SSO and an audit trail. Clinked includes audit trails from Standard and SSO on Enterprise, and Assembly adds an audit log on Advanced and custom SSO on Enterprise. Dora doesn't offer SSO.
Can clients e-sign engagement letters in a portal?
In some. Assembly includes e-signature contracts, SuiteDash lists e-signing, and Moxo includes e-signatures in its process steps. Clinked connects to DocuSign and Adobe Acrobat Sign. Dora doesn't list e-signatures, so firms using it keep their signing tool for engagement letters.
How do law firms get clients to send documents on time?
Name each document, set one deadline and let reminders run without someone tracking them. Dora lists what's still missing on each request and nudges a quiet client twice by email, then tells your team, with timing you set in Settings. Clients can reply with attachments up to 100 MB each, so a statement can come straight from their inbox.
Does Dora train AI on client documents?
No. Dora's AI runs on Claude, made by Anthropic, and Dora says it doesn't train AI models on your content; under Anthropic's commercial terms, Anthropic doesn't either. When Dora works on something, the content she needs is sent to Anthropic to write her answer, which is worth noting in your own data review.
Can a client portal replace practice management software?
Usually not. Practice management tools handle matters, time, billing and trust accounting, while a portal handles the client's side: documents, questions and approvals. Dora has no invoicing, and Moxo's help center lists a Filevine connector for firms that want the two linked.
How much does a client portal cost for a small law firm?
For 6 people with 30 active clients and about 60 contacts, SuiteDash is $19 to $99 flat and Dora is $290. Assembly is $256 on Professional, or $678 on Advanced with the HIPAA BAA, and Clinked's Standard plan is $299 for 100 members. FuseBase needs Advanced at $399 for 6 members, and Moxo quotes on request.
Why is Dora the top pick?
Dora is our top pick for client experience, because clients answer from their inbox, see a short list of what's missing and get reminded without anyone at the firm writing a nudge. It's not the pick when your requirements include SSO, published certifications or a BAA. In that case, use Clinked, Moxo or Assembly Advanced.
Related guides
Prices and features come from each vendor's own site, checked November 8, 2026. They change often, so confirm on the vendor's site before you buy.