Conflion Information Sheet
What Conflion does, how a matter moves through it, how its AI is used, how confidentiality is protected, how it connects to a firm's systems, and how a firm would roll it out.
Version 2.0 · describes Conflion build 3e303ad · 18 October 2026
NEWTONHi, I'm Newton. This sheet is the whole of Conflion on one page. Every firm, person and matter in it is made up, and wherever AI appears, it suggests and a person decides.
01Overview
Conflion is a conflicts-checking and new business intake system for law firms. It replaces email and PDF intake with one place where a request is entered, every party is searched, each hit is decided by the conflicts team, approvals go to the right people, waivers and ethical walls are recorded, and the matter is opened.
Quick checks, intake, pro bono, search, review, approvals, waivers, letters, walls, laterals, opening, the matter workspace and closing, with one audit trail.
Runs on the firm's own server, with sign-in through the firm's Microsoft 365 accounts. Nothing goes outside unless an administrator deliberately turns it on.
An optional model on the firm's own hardware suggests and helps draft. A conflicts analyst or lawyer always decides.
People screened from a matter are never sent it at all. Every change goes into a tamper-evident audit trail.
Waivers, engagement letters and lateral screens follow the conflict rules of the state each matter is in.
Engagement letters and waivers count as signed only when a person uploads the signed copy and records who signed it.
Key facts
| Question | Answer |
|---|---|
| Who uses it | Lawyers and secretaries (requests and their own tasks), approvers (practice group leaders, general counsel, finance), the conflicts team, and administrators |
| Where it runs | On the firm's own server, or as a desktop app for Windows, macOS and Linux that connects to it or runs everything on one computer |
| Sign-in | The firm's Microsoft 365 accounts (Entra ID), so multi-factor and device rules follow the firm's own policy |
| Database | PostgreSQL, the widely used open-source database |
| Billing system | Stays the system of record; Conflion exchanges clients, matters and billing status with it (Aderant is supported, and Clio and spreadsheet exports import) |
| Document management | Creates matter workspaces and folders in iManage or SharePoint when a matter opens |
| AI | Optional; runs on the firm's own hardware by default, with an optional backup model; advisory only |
| Conflict rules | 18 states and D.C. have their own rule profiles; every other state follows the ABA Model Rules |
| Audit | Every change recorded with who, what and when, in a log that shows any tampering |
| Size | Load-tested with a simulated firm of 200 lawyers and up to 250,000 party names |
| Training | Role walkthroughs, Quick answers, a help assistant, a glossary, printable quick-start sheets and a test firm with made-up data |
02How a matter moves
A new matter goes from a lawyer's first question to an open, billable matter in eight steps, and Conflion shows everyone what it is waiting on at each one.
- Quick checkoptional, names only
- New intakethe full request
- Conflicts searchevery party
- Conflicts revieweach hit decided
- Approvalsthe firm's routing
- Matter openednumber, billing, folders
- Billing on holduntil signed copies
- Billablepaperwork complete
- Quick check (optional). A lawyer or secretary sends just the party names, or pastes an email and lets Conflion find the parties in it. The check gets its own number and is searched at once. If the work goes ahead, the same record becomes a full intake, keeping every decision already made.
- New business intake. The requester fills in the client, matter, parties and roles, practice area and records area, offices, lawyers, fee estimate and billing details, plus the firm's own questions. A live preview shows possible conflicts for each party as it is typed. Pro bono matters have their own intake with eligibility questions and no fee fields.
- Conflicts search. Every party is searched against clients, adverse parties, related companies, former and prospective clients, declined matters, pending requests and lawyers' declared relationships. Each search gets a permanent number (S-2026-000123) that can be cited. New parties are also screened against sanctions lists.
- Conflicts review. The conflicts team sees hits grouped by party and ranked by risk, with the reason and any earlier decisions on the same party. They decide each hit, ask responsible lawyers for clearance, record waivers and put up ethical walls. A conflicts summary goes back to the lawyer.
- Approvals. The request follows the firm's route: for example the practice group leader, finance, and the general counsel for restricted, high-fee or high-risk work. Approvers approve, approve with conditions, or send it back. An approver with a declared interest in a party is routed around, and an alternate approves instead.
- Matter opening. The conflicts team opens the matter. It gets its client.matter number (for example 011072.0001), new parties join the database, the billing record is prepared, and the matter's folders can be created in the document system.
- Billing hold. Opening does not wait for paperwork, but billing does. Until the signed engagement letter, signed waivers and any required documents are uploaded and every conflicts item is closed, the matter shows Open · billing on hold.
- After opening. The matter workspace holds the team's tasks, notes and timeline. Change monitoring re-checks the matter's parties when the firm's data changes and lists any new hit nobody has reviewed. When the matter ends it is closed with a retention date.
Who does what
| Role | What they do in Conflion |
|---|---|
| Lawyer | Sends quick checks and new matters, answers questions, reviews waiver drafts, works in the matters they are on, and sees their own requests and tasks |
| Secretary | Prepares and converts requests for their lawyers, and works on their lawyers' matters |
| Approver | Approves, conditions or returns requests at their step |
| Conflicts analyst | Reviews hits, runs searches, records waivers and walls, opens and closes matters |
| Administrator | Sets up the firm: people, approval routes, intake questions, templates, connections and AI settings |
Every request shows a next-step line that says in plain words what it is waiting on and who has it. Lawyers get a task list on their home page, and emails go out for approvals, walls and conflicts summaries.
03Features
Conflicts, intake, approvals, waivers, walls, laterals, matter opening and the matter workspace live in one system. NEW marks what arrived in this release.
Conflicts search
- Name matching that catches misspellings, sound-alikes, nicknames (Bill and William), aliases, former names and partly typed words. Rare words count more than common ones.
- Corporate families up to the ultimate parent and back down, and personal links such as spouses and officers.
- One Search page for standard, Boolean and batch searches; switching keeps what was typed, and each batch line is checked as it is typed. NEW
- Permanent search numbers that can be cited and looked up.
- Confidential searches, a duplicate search warning, and a list of earlier searches for any name.
- Sanctions screening against the OFAC list and other lists the firm loads.
Intake
- Guided new business intake in short steps, with a live conflicts preview.
- Quick check, with the parties found in a pasted email or description for the requester to confirm. NEW
- Pro bono intake with eligibility questions and its own numbering.
- Practice area and records area on every new matter form.
- The firm's own questions, added without programming and shown only where they apply.
- Practice screens for health care, cannabis, an insurer as client, public bodies and political work, which ask the right questions and can add approval steps.
- Name suggestions in lawyer and staff fields, accepted with Tab. Nothing fills in by itself.
Review and approvals
- Hits ranked by risk with a plain reason, earlier decisions alongside, and one-click or bulk decisions with notes.
- Clearance requests to responsible lawyers, and lawyer relationship disclosures shown as FYIs.
- Approval routes built from the firm's rules, with deadlines, overdue flags and delegates.
- Routing around an approver's declared interest, with both people told and the audit trail updated.
- A conflicts report for lawyers, with a PDF download.
State conflict rules NEW
- A home state and the other states the firm works in, set once; each office has its own state.
- A request follows its office's state, or a state the conflicts team picks, such as the court's.
- Waiver consent wording, engagement letter checks (including California's and New York's) and non-engagement letters follow the matter's state.
- Lateral screens follow each state's version of Rule 1.10 and name the stricter state.
- 18 states and D.C. are profiled; every other state uses the ABA Model Rules and says so on screen.
Waivers and letters
- Waiver records with informed written consent, sent to clients by a secure link, with reminders.
- Waiver drafts from templates, which a lawyer edits and approves from a task.
- Engagement letters from the firm's editable templates, exported to Word.
- Drafts are edited by typing into the document itself, and every save is logged.
- Letters never name another client unless that client agreed to be named.
- Outside counsel guidelines per client, broken into key terms and flagged on that client's requests.
Ethical walls and laterals
- Walls that keep named people out, or let only the team in, over a matter or a whole client.
- Enforced on the server: a screened person is never sent the walled matter, its files, notes or audit lines.
- Acknowledgments, wall notices, certifications and screened-person lists for other systems.
- A secure questionnaire for a lateral candidate's prior matters, a batch search of what they list, and walls up before the start date.
Matter workspace NEW
- Tasks with an owner, due date and priority, linked to the matter's key dates if wanted.
- Task checklists and document templates set up by administrators; templates fill in from the matter.
- Team notes that keep every earlier wording.
- One timeline of everything that happened on the matter.
- A lead list that follows prospective clients from first contact to hired or declined. A hired lead starts an intake that goes through the ordinary conflicts check.
- Walls and confidentiality hide tasks, notes and timelines from anyone they keep out.
Opening, monitoring and reports
- Client.matter numbering, with chosen numbers for the conflicts team (with a reason, checked to be free).
- An opening checklist split into what opening needs and what billing needs.
- Change monitoring that re-checks open matters when data changes and each night, listing only new hits.
- Company families from public registers (GLEIF, SEC EDGAR, OpenCorporates) and the firm's own data exports. Nothing is added until an analyst picks it.
- Standard reports, a report builder and an ethics pack; reports fold away until opened, and every table sorts by any column. NEW
Help and ease of use NEW
- Quick answers to everyday questions, each with a Take me there button.
- An assistant that answers questions in plain words from Conflion's own help, using the firm's AI model. Its answers are marked as drafts.
- Role walkthroughs that point at things but never click, submit or decide.
- A command palette (Cmd or Ctrl + K) to jump to any page, request, matter, party or search number.
- Day or night mode, text size, font choice including an easy-reading font, and color schemes checked against the WCAG AA contrast standard.
- Newton the help cat, if the firm wants him.
04AI assistance
Conflion's AI is optional, runs on the firm's own hardware by default, and only suggests or helps draft. A conflicts analyst or lawyer reviews everything and makes every decision.
| Task | What the AI does | What a person does |
|---|---|---|
| Hit triage | Suggests whether a hit is likely the same entity and likely a conflict, with a one-line reason, marked ✦ | The analyst decides; the suggestion never records a decision |
| Finding parties | Suggests parties and roles from a pasted email or matter description | The requester accepts or rejects each one; names not in the text are thrown out |
| Conflicts memo | Helps draft a memo from the decisions already recorded | The analyst edits it |
| Import columns | Suggests which column of an export feeds each field | The administrator confirms |
| Letters and guidelines | Lists key terms from a letter or a client's outside counsel guidelines | A lawyer checks them |
| Waiver first drafts | Helps fill a waiver template, using the rules of the matter's state | A lawyer edits and approves it |
| Help questions | Answers from Conflion's own help pages, marked as a draft | The person follows the steps themselves |
Search results, risk levels, reports, approvals, walls and signed documents never depend on the AI. With no model connected, Conflion works fully.
Where it runs
- On the firm's own hardware (default). The model runs on a server or workstation inside the firm through standard local model software such as Ollama or LM Studio. Client names stay on the firm's network.
- One-click model setup. NEW An administrator picks the model from a list of the ones installed, and Conflion checks it before using it.
- A backup model. NEW A second local model can take over only when the main one can't be reached. It is never an outside provider.
- The server decides where AI calls go. Every call goes to one address the firm sets, and a model outside the firm's private network is refused unless an administrator deliberately allows it.
An outside provider, only if the firm chooses
A firm can choose its own account with an outside provider instead, such as Anthropic directly, Claude through its AWS or Google Cloud account, or any provider with a standard chat interface. It takes two separate steps, IT configuring it on the server and an administrator accepting a written data-handling notice, and both are recorded. Even then, Conflion never sends:
- restricted or highly confidential requests, or confidential ones unless an administrator allows it;
- requests someone marked "Keep this request away from outside AI services";
- anything with a hit behind an ethical wall;
- anything for a client whose outside counsel guidelines bar AI use, or its corporate family;
- health information requests and matters, or import files.
Each task sends a fixed, minimal set of fields, and the server writes "Sent to external AI" with the fields sent to the audit trail before anything leaves.
Safeguards
- Documents and emails are treated as untrusted text, so instructions hidden in them are not followed.
- The model has no internet access, and its answers must fit a fixed format or they are discarded.
- AI notes follow the same walls and confidentiality rules as everything else.
- Every AI use is recorded with the task and model name, and every suggestion is marked ✦ on screen.
- Optional add-on tools, such as Party Finder for listing every party to search and Guideline Guard for checking a prebill against a client's guidelines, each stay off until an administrator turns them on.
05Security and confidentiality
Conflion is built around one rule: a person screened from a matter must never receive it. The server decides what each person is sent, every change is recorded in a tamper-evident log, and the firm keeps its data on systems it controls.
NEWTONHiding isn't done by the screen. If you're walled from a matter, your browser never gets it, so there's nothing to peek at.
Who can see what
- Each person gets only their own view. Lawyers, secretaries and approvers get their own requests, the matters they work on and the records their tasks need. The conflicts team and administrators see what their work needs, still subject to confidentiality levels.
- Walls are enforced before data leaves the server, in every screen, search, export, timeline and AI note.
- Confidentiality levels. Any client, matter or request can be normal, confidential or highly confidential, with named people allowed in. A matter takes the higher of its own level and its client's.
- What others see of a hidden record is only "Match on a confidential record. Contact the conflicts team," with no name, matter or count.
- Every opening of a walled or confidential record is logged, including blocked attempts.
- Losing access takes effect at once. Disabling an account or changing a role ends that person's sessions and live updates immediately.
Sign-in and the audit trail
- Sign-in through Entra ID, so multi-factor and conditional access follow the firm's policy. Accounts are created by an administrator.
- Sessions end after 30 minutes idle and 12 hours in total (both adjustable).
- Every change is appended to a log the database itself refuses to edit or delete. Each entry is linked to the one before by a keyed fingerprint, checked at start-up and every 15 minutes, and the log alone can rebuild all of the firm's data.
Protecting the data
| Area | How it is protected |
|---|---|
| In transit | HTTPS only, with strict browser security settings; the app loads no third-party content |
| Database | PostgreSQL on the firm's server, reached only by the app over a private network, with an app account that cannot change the database's structure |
| Uploaded files | Encrypted with AES-256 before they are stored, with virus scanning that can be found and turned on in one click NEW |
| Keys | The file encryption key can be rotated, re-encrypting every stored file NEW |
| Backups | Every copy encrypted; an unencrypted backup is refused; restore steps tested |
| Logs | Ids, timings and error codes only, never party names, search terms or document text |
| Waiver links | Long random secrets stored only as fingerprints, with expiry and revocation |
| Software supply | A full list of the software components (SBOM) built with every change, plus dependency and code scanning on every change NEW |
| Alerts | Bursts of failed sign-ins are flagged, and failed health checks can post to the firm's own alerting NEW |
| Leaving | A full export of the firm's data, then a destructive clean-up that runs as a dry run first NEW |
Support without client data
An administrator can produce a support bundle in which every name, email, id and piece of free text is replaced by a placeholder. Conflion checks it against every name in the firm's records before it can be saved, and nothing is sent automatically. When support needs to see a problem happen, Conflion can build a test firm of made-up records the same size and shape as the firm's data.
How it is tested
- Over 1,000 automated tests, including tests that inspect everything each kind of user is sent and check that no walled or highly confidential name, number or file appears in it.
- Tests that feed the AI hostile documents designed to trick it, and confirm nothing but the advisory note changes.
- Security testing of a production-mode install covering walls, confidentiality, sign-in, file handling and attempts to act as another user.
06Data and integrations
A firm's existing conflicts records come in through a checked import, the billing system stays the system of record, and the document system can receive matter folders and walls.
Bringing in existing records
- Choose the file. Presets recognise Aderant and Clio layouts; any other CSV or Excel export is matched by its column headings.
- Match the columns. Conflion suggests which column feeds each field, and a person confirms each one.
- Match the role values. The old system's words for client, adverse party and so on are mapped to Conflion's roles.
- Dry run. Before anything is saved, Conflion shows the new parties, the matches to existing records, possible duplicates and any warnings.
- Import, with undo. A recent import can be undone while nothing else depends on it, and an import can be tried first in the test firm.
The billing system
Conflion never changes billing data. With Aderant it can work from uploaded reports, a shared folder read each night, or a live connection. Client, matter and entity names come in, along with each matter's billing status, which only the conflicts team sees. Newly opened matters go back with their client, matter number, office and lawyers, and whether they are on billing hold. A nightly pull never merges records on its own; a close name is listed for review.
Document management and Microsoft 365
- Matter folders. When a matter opens, Conflion can create its workspace and the folders its records area calls for in iManage or SharePoint. It is off until an administrator turns it on.
- Filing. Documents attached in Conflion can be filed to iManage or SharePoint. Confidential and walled records are not filed unless an administrator allows each case.
- Walls in other systems. Conflion can apply its walls to iManage workspaces, SharePoint folders and Microsoft 365 groups, in plan, read-only or enforce mode.
- Outlook. An add-in can start an intake from an open email, sending it only to the firm's own Conflion server.
- Email goes through the firm's own mail server. Emails about sensitive requests name them by number only.
07Running it
Conflion runs on one server inside the firm, alongside a PostgreSQL database and, if wanted, a local AI model. A firm of 200 lawyers was load-tested on a modest four-core, 15 GB machine.
System status and one-click setup NEW
Administrators get one System status page that puts every part of Conflion, and every system it talks to, on one map marked Working, Needs attention, Down or Not set up, checked again every 30 seconds. Each part has its own setup block: one click where Conflion can do the job itself (the AI model, the backup model, virus scanning), the right settings page where a person must choose, or a ready-made request to copy for IT. "Set up what I can" does every one-click step at once. A trace follows any request, search or matter through every step and out to each connected system.
What firm IT provides
- A Linux server or virtual machine with Docker, behind an HTTPS reverse proxy with a certificate.
- An Entra ID app registration for sign-in, a mail relay, and encrypted backup storage off the server.
- If AI is wanted, a machine for the local model. As an estimate, one modern desktop-class machine with a capable graphics processor or Apple silicon keeps up with a firm of about 200 lawyers, because triage runs in the background.
Performance at size
The load test played all 229 people of a simulated 200-lawyer firm at once, each with their own sign-in and live screen.
| Party names | Changes per second | Change reaches every screen (typical / slow) | Server memory |
|---|---|---|---|
| 50,000 | 1 | 0.4 s / 0.5 s | 1.0 GB |
| 50,000 | 10 | 0.4 s / 0.7 s | 1.2 GB |
| 250,000 | 1 | 0.7 s / 1.0 s | 2.4 GB |
| 250,000 | 5 | 0.9 s / 1.6 s | 3.0 GB |
One change a second is about 29,000 changes in an eight-hour day. Every run had no failed requests, every simultaneous edit was resolved correctly, and the audit log rebuilt the data exactly.
Day to day
| When | Job |
|---|---|
| Every 5 minutes | Health check: server up, audit chain intact, latest backup recent |
| Nightly | Encrypted database backup |
| Daily | Record the audit log's latest fingerprint outside the database |
| Monthly | Security updates through a normal release |
| Quarterly | Restore drill on a scratch server |
Trying changes safely
A separate test firm with made-up data lets the conflicts team and administrators try approval routes, intake questions, imports, templates and AI settings without touching real records. Test data never reaches live data, never sends email and never calls an outside AI. When a change works, an administrator reviews the differences and promotes it, and the promotion is recorded.
08Rollout and FAQ
The safest path is a pilot that shows Conflion finds what the firm's current process finds, on the firm's own past searches, before anyone relies on it.
- IT and security review. Firm IT reviews this sheet and the security documentation, and installs Conflion on a test server inside the firm.
- Load a copy of the records through the checked import, and connect the billing system by report upload.
- Side-by-side test on past searches. Past searches with known outcomes are run again in Conflion, and the conflicts team labels each hit without knowing which system found it. A built-in pilot page measures the time from intake to cleared and the hits each system found that the other missed.
- Parallel running. For a set period, new requests go through both the current process and Conflion.
- Go-live decision. Leadership decides on go-live, which features to switch on, and the firm's approval routes and templates.
A pilot can also start with names only, or entirely on made-up data in the test firm.
Frequently asked questions
Does Conflion replace the billing system?
No. The billing system stays the source of client, matter and billing records. Conflion reads from it and sends opened matters back.
Who owns and holds the data?
The firm. On a firm server, the data never leaves the firm's systems. It sits in a standard PostgreSQL database and can be exported in full at any time.
Does the AI make conflicts decisions?
No. It suggests and helps draft, every suggestion is marked ✦, and a person decides. The firm can run Conflion with no AI at all.
Does client information go to an outside AI company?
Not unless the firm deliberately turns that on, in two separate steps. Even then, walled, restricted, highly confidential and health information records are never sent, and every call is logged.
What if the firm works in several states?
Each office and request follows its own state's conflict rules for waivers, letters and lateral screens, and the request shows which state applies and why.
Can a lawyer see a matter they are walled from?
The server never sends it to them, in any screen, search, export, timeline or AI note. Attempts to open walled records are logged.
Does Conflion sign engagement letters or waivers?
Never. People upload signed copies and record who signed.
What if the server stops?
Every change is saved with its audit entry before anyone sees it, so a restart loses nothing. Nightly encrypted backups and a tested restore cover the loss of the server itself.
How are new people trained?
Each role gets a short walkthrough the first time, plus Quick answers, the help assistant, a glossary, printable quick-start sheets, and a test firm to practise in.