A partner asked us last month where his firm’s call recordings were physically stored. He didn’t know. He asked who had access to them. He didn’t know that either. Then he asked how long it would take to put his hands on a recording from earlier in the year if a client raised a fee dispute. He had been with the same provider for nine years and had never thought to ask any of those three questions.
He is not unusual. Most of the Australian law firms we speak to cannot answer them either.
Data sovereignty for law firms sounds like a compliance topic, and in part it is. But it is also a basic operational question about who actually controls one of the more sensitive sources of evidence about how a firm has run its matters. The answer matters more than the question sounds.
Sovereignty and privacy are not the same thing
There is a distinction worth holding clearly. Privacy is who can access your client data. Sovereignty is which country’s laws govern it. They are not the same question and they do not always have the same answer.
A communications platform can be privacy-compliant, with encryption, access controls and audit logs, while still storing the underlying data in a jurisdiction whose laws give a foreign government a legal basis to compel disclosure. Australian firms often assume that an Australian-marketed product means Australian-hosted data. In many systems, it does not. Nobody asked. Nobody was told.
For most legal practices this is not a theoretical question. The data sitting inside a modern business communications platform includes client conversations, internal coordination, advice in train, witness preparation, fee discussions, and increasingly an AI-generated transcript and summary of each one. That is a richer trail of legal work product than most firms realise they are producing, and it is being produced on someone’s infrastructure.
The retrieval moment
The clearest test of the sovereignty question rarely comes from a court order or a regulator. It comes from inside the firm. A new lawyer joining a long-running matter needs to hear what was actually said in a strategy call six months ago. A client raises a fee dispute about an agreement discussed on the phone the previous quarter, and the partner needs the recording to settle it. A member of the team is preparing a witness statement and wants to check a detail mentioned in a phone interview. A professional conduct review asks the firm to produce a specific exchange.
The first question in that moment is whether the recording can be found at all. The second, less obvious question, is who needs to be involved in retrieving it. If the data lives in a jurisdiction the firm does not operate in, retrieval runs on someone else’s timeline. If retention rules were set by the vendor’s defaults rather than the firm’s own policy, the recording you wanted may not exist any longer.
In a legacy or globally-hosted system, this is often the moment a partner learns the answer to all three questions at once. Where the data lives. Who controls access. How long retrieval takes. None of them by choice.
Why this is becoming more pointed for law firms
Two things have shifted under the surface of how Australian firms work. AI transcription has moved from a paid add-on to a default behaviour of the platform. Most modern systems now produce a written record of every call automatically. At the same time, more partners and senior associates are working across home, court and chambers, with calls placed and received from different devices in different locations on the same line.
The combined effect is that the volume of structured client-related data sitting inside the comms platform is larger and more searchable than it was even two years ago. Where that data lives, and under whose laws, becomes a question with operational weight rather than a theoretical one. It is worth asking before the next time it comes up under pressure.
What good looks like in a law firm
What changes when these questions have been asked and answered before they urgently need to be?
Data residency is configured to match the firm’s compliance environment rather than the vendor’s default settings. Retention rules are set to what the firm actually needs, long enough that retrieval at the horizons that matter for legal work is realistic, short enough that the firm is not storing material it has no reason to hold. The team responsible for the platform can answer the sovereignty question in plain English, without having to escalate to a vendor desk in another timezone. And when retrieval is needed, it runs on the firm’s timeline rather than a vendor’s queue.
None of this is unusual technology. Most of it is configuration choices made at setup and maintained as the firm changes shape. The reason it is rare in practice is that nobody asked at the start, and by the time the question becomes urgent, the choices have already been made by default.
Two questions worth asking your current provider
If you cannot answer the three questions we started with, they are worth raising with whoever supports your current platform.
Where are our call recordings and transcripts physically stored, and which country’s laws apply to them? The answer should come back in plain English without delay. If it does not, that is information in itself.
If a fee dispute, a professional conduct review, or an internal matter required us to produce a recording from earlier in the year, how long would that actually take in practice? This is the test of whether retrieval works on your timeline or someone else’s.
Both questions are reasonable to ask. The provider should have ready answers. If they do not, the conversation that follows is usually more useful than any one answer would have been.
The question of where your client call data lives sounds like compliance until you need to act on it. Then it is an operational question, then it is a control question, then it is a continuity question. Most Australian law firms have never been told the answer. The ones who have asked are usually surprised by what they hear back.
If anything on this page is new to you, we would be glad to walk through what good looks like for a firm in your position. We pick up the phone.
Less tangle. More billable hours.
Related Blogs
What Law Firms Should Look For in a Business Phone System
The real cost of an outdated phone system for Australian law firms (it isn’t the monthly bill)
Dialpad Solution Design: Discovery Checklist for a Perfect Fit