
Catherine Whitfield
Chief Risk Officer at Hartwell & Mason

Thirty years of accumulation
Hartwell & Mason is a 600-attorney international law firm with offices in twelve countries. Its matter data had accumulated through three major mergers over thirty years, each bringing its own document management system, classification scheme, and ethical wall configuration. Privileged communications, client confidential information, and conflicts data lived across overlapping systems that had never been fully reconciled.
Why the risk was structural
The risk wasn't theoretical. The firm had absorbed two ethics complaints in the prior decade tied to inadvertent disclosure across matter boundaries — incidents that would have been preventable with better visibility into where sensitive data actually lived.
Before Argus, classification was matter-level metadata maintained in the document management system. The metadata was reliable for documents created within current systems but degraded for older content, content moved between systems during mergers, and content stored outside the document management system entirely — collaboration platforms, email archives, departed-attorney repositories.
What changed
Argus runs continuous classification across the firm's storage systems regardless of where matter content originated. Privileged communications, conflicts data, and client confidential information get identified at the content level and reconciled with matter ownership rather than assumed from metadata that may not have followed the data.
The ethical wall infrastructure now operates against live classification. When attorneys move between practice groups or take on matters with conflicts implications, access changes propagate against current data rather than relying on attorneys to remember which legacy systems hold relevant content.
Where the firm sits now
The firm has measurably reduced false-positive conflicts that previously generated friction during matter intake. More importantly, the firm has visibility into the actual surface area of sensitive data it holds — including content from the merger-acquired systems that had been operating in semi-managed limbo for years.
The risk team uses Argus output during new business intake, internal investigations, and outside counsel guideline compliance work. Classification stopped being a quarterly exercise and started being infrastructure.
Protect YOur Data