Law Firm Hosting

Law firm hosting where the intake form is treated as evidence.

Most of a law firm site is publishing. The part that matters is the enquiry form, which routinely collects documents and details that should never have been sitting in a public upload directory or an unread inbox.

Uploads never publicly listableSubmissions stored before sendingFree migration
Private file handlingRetention configuredForm-safe cachingDaily backupsFree SSL24/7 support
Built for confidential intake

Everything a firm's website asks of a host.

A fast brochure site with one high-stakes workflow running through it, and the workflow is where the configuration goes.

Uploaded documents are not public files

A contract, a letter or a scan attached to an enquiry lands in a path that cannot be listed or guessed, and is retrieved through a signed link rather than a permanent URL.

Not listableSigned retrieval

Submissions recorded before they are emailed

The database entry is written first and the notification follows. A mail provider having a bad hour delays the alert rather than discarding the enquiry.

Forms excluded from the cache

A cached form page serves an expired nonce, and the visitor sees a rejection with no explanation. Form URLs stay dynamic while the rest of the site serves from the edge.

Nonces stay validArticles still cached

A retention window that exists

Old submissions and their attachments are not kept forever by default. Retention is a setting rather than an accident of nobody having deleted anything yet.

Publishing that stays quick

Articles, guides and practice-area pages are static once rendered and served from the edge, which is most of the site and most of the traffic.

Staging for a rebrand

A firm redesign changes navigation and every practice-area URL at once. Do it on a clone and check the redirects before anything moves.

Operations

Know where the sensitive data is.

On a firm's site the risk is rarely the theme. It is a directory of attachments nobody remembers configuring and a form plugin that was never given a retention rule.

  • One-click admin login, no shared passwords
  • Per-site resource and storage view
  • Plugin and core updates with per-item status
  • Restore any daily backup from the dashboard
Enquiry uploads
Not publicly listable
private
Submission storage
Written before send
0 lost
Retention
Configured window
set
Nightly backup
Replicated offsite
01:30
Performance

A practice-area page, served from the edge.

The public half of a firm's site is entirely cacheable, which is why the tuning that matters is all on the form rather than on the pages.

Private
attachment paths
Configured
retention window
14
edge regions
MagicWP110 ms
Untuned shared host780 ms
Uncached, per-request rendering460 ms

Illustrative comparison of a practice-area page. Your numbers depend on page weight and how much of the site is genuinely static.

Configuration

What we change for a law firm site

These differ from a standard WordPress site on the same plan, and each follows from one form collecting material that the rest of the site never touches.

SettingWhat we doWhy
Attachment storageOutside the publicly listable upload paths, retrieved through signed linksThe default upload directory is a web-readable folder, so a client's scanned document is one guessed filename away from being public and nothing in WordPress warns about it.
Submission orderingDatabase record written before the notification email is attemptedWhen the send is what commits the enquiry, an unreachable mail provider does not delay the lead, it deletes it and leaves no record that it existed.
Form page cachingExcluded, while articles and practice-area pages stay cachedA cached form carries a nonce that has already expired, which rejects genuine submissions and is indistinguishable from a broken site to the person filling it in.
RetentionAn explicit window for submissions and attachmentsForm plugins keep everything by default, so a firm accumulates years of confidential attachments that nobody decided to keep and nobody knows are there.
Redirect handlingPractice-area URL changes mapped before launchFirm rebrands rename every service page at once, and the traffic those pages earned is lost at the moment the old addresses stop resolving.
Plans

Simple, transparent pricing.

Every plan includes free migration, daily backups, SSL and 24/7 support.

MonthlyYearly
Starter
For personal sites, blogs, and portfolios.
$20/mo
Billed $240 yearly · save $60
  • 1 WordPress site
  • 10 GB NVMe disk
  • Free SSL
  • Daily backups
  • One-click deployment
  • Support tickets
Start free trial
Pro★ Most popular
For growing businesses and busy stores.
$80/mo
Billed $960 yearly · save $240
  • 5 WordPress sites
  • 50 GB NVMe disk
  • Free SSL
  • Daily backups
  • One-click deployment
  • Priority support tickets
Start free trial
Enterprise
For agencies and high-traffic platforms.
$250/mo
Billed $3000 yearly · save $600
  • 20 WordPress sites
  • 200 GB NVMe disk
  • Free SSL
  • Daily backups
  • One-click deployment
  • Dedicated support
Start free trial
FAQ

Questions, answered.

Where do documents attached to an enquiry actually go?
By default, into a web-readable upload folder. Here they go somewhere that cannot be listed or guessed and are retrieved through signed links, because a client's scanned contract should not be one filename away from public.
We lost an enquiry when our email provider had an outage. Can that be prevented?
Yes, by writing the record before attempting the notification. If the send is what commits the submission then any mail failure destroys the enquiry rather than delaying it.
Why do some form submissions get rejected for no reason?
Usually a cached form page serving an expired security token. Excluding form URLs from the cache fixes it while leaving the articles and practice-area pages fully cached.
How long are old submissions kept?
As long as you decide. Form plugins default to keeping everything, which is how a firm ends up holding years of confidential attachments that nobody chose to retain.
We are rebranding. What breaks?
The URLs. A rebrand renames every practice-area page at once, so the redirect map has to be built before launch rather than reconstructed afterwards from a drop in traffic.

A fast site, and an intake form you can defend.

Start in minutes, or let our team move your firm's site across - no card, no commitment.