Professional services. Expertise cannot be shown, only demonstrated.
Some professions may not advertise at all.
Consultancies, law firms, accounting and audit firms, engineering consultancies and agencies, whose product is people and judgement and whose marketing is often limited by their own professional rules. We build positioning and thought leadership that respect those rules, websites that inform without soliciting, client portals that protect confidential data, and AI that drafts while professionals decide.
ISO/IEC 27001:2022 — Information security management systemsDPDP Act 2023 — Digital Personal Data Protection Act, 2023GDPR — General Data Protection Regulation (EU) 2016/679WCAG 2.2 AA — Web Content Accessibility GuidelinesEU AI Act — Artificial Intelligence Act (EU) 2024/1689OWASP Top 10 for LLM Applications — LLM and generative AI security risks
ClaimsAdvertising & claims: Shapes most of the work
RegulatorSector regulator: Often shapes the work
PaymentsPayments: Sometimes shapes the work
DataPersonal data: Shapes most of the work
SecuritySecurity & incidents: Often shapes the work
AccessAccessibility: Sometimes shapes the work
AIAI governance: Often shapes the work
What is shifting
Expertise is judged before the meeting, within rules some firms cannot break.
Professional bodies enforced their advertising rules online, client data gained a statute, AI use needs disclosing and agencies answer for their creators. Each shift names what it demands, with a fact you can check.
Expertise is built on what came before.
01
Lawyers’ online marketing is under active enforcement.
It demandsWebsites and profiles that inform within the rules, without soliciting work.
SignalIn July 2024 the Bar Council of India directed state bar councils to send cease-and-desist notices to online platforms over advocates’ advertising, citing Rule 36.
02
Client confidentiality now has a statute behind it.
It demandsPortals, retention and access controls that show how client data is protected.
SignalFrom 13 May 2027 the DPDP Rules require reasonable security safeguards, including access logs kept for a year and security clauses in contracts with processors.
03
AI in client work has to be disclosed and supervised.
It demandsAI-assisted drafting with review, logs and client disclosure built in.
SignalUnder the EU AI Act, people must be told when they are interacting with an AI system, from 2 August 2026.
04
Agencies answer for their creators’ disclosures.
It demandsBriefs, approvals and posts with the disclosure designed in.
SignalASCI’s influencer guidelines require an upfront, prominent disclosure label on any post with a material connection to the advertiser; virtual influencers must also say they are not human.
The rulebook
Some professions may not advertise; all of them must keep secrets.
The Bar Council and ICAI rules, influencer disclosure, the data law, security frameworks and the EU AI Act, read for a professional firm. Your counsel and ethics partner keep sign-off.
Frameworks we build to
ISO/IEC 27001:2022 — Information security management systems
DPDP Act 2023 — Digital Personal Data Protection Act, 2023
GDPR — General Data Protection Regulation (EU) 2016/679
WCAG 2.2 AA — Web Content Accessibility Guidelines
EU AI Act — Artificial Intelligence Act (EU) 2024/1689
OWASP Top 10 for LLM Applications — LLM and generative AI security risks
Frameworks we design and build to — not a claim of certification.
Advertising & claims
Shapes most of the work
Bar Council of India
Bar Council of India Rules — Rule 36
Advocates may not solicit work or advertise, directly or indirectly; in July 2024 the BCI directed action against advertising through online platforms. A website may carry limited information such as contact details, enrolment and practice areas.
We designLaw-firm sites inform within the permitted list, with no testimonials, rankings or calls to hire.
Chartered accountants may not solicit clients or advertise except as the Council permits, including under its guidelines for members’ and firms’ websites.
We designFirm sites follow the website guidelines, and thought leadership informs without soliciting.
Chartered Accountants Act, 1949 · First Schedule, Part I, clauses (6) and (7) · ICAI Code of Ethics, 2020
Advertising Standards Council of India
ASCI guidelines for influencer advertising
Posts with a material connection to an advertiser carry an upfront, prominent disclosure label in the language of the post; virtual influencers must also disclose that they are not real people.
We designBriefs, approvals and posting tools require the disclosure before anything goes live.
Firms holding clients’ personal data keep reasonable security safeguards, including access logs for a year and security clauses in contracts with processors, and report breaches, from 13 May 2027.
We designSecure portals, access logs, retention rules and processor contracts with security clauses.
Companies in India report listed cyber incidents, including data breaches and leaks, within six hours of noticing them, and keep ICT logs for a rolling 180 days within India.
We designClient portals are logged and covered by an incident runbook that meets the six-hour clock.
From 2 August 2026, people must be told when they are interacting with an AI system, and AI-generated content is marked; high-risk duties for Annex III uses follow from 2 December 2027.
We designClient-facing assistants say they are AI, and AI-assisted work is reviewed and recorded as such.
Compiled 3 October 2026. Our reading of typical programmes, not legal advice. Rules change; your counsel confirms how each one applies to you.
Challenges
Your customers’ problems, and your own.
What we hear in almost every professional services brief — on the customer’s side of the screen, and on yours.
AYour customers
A1
Find the right expert
Clients want the person, the experience and the conflict check, quickly.
A2
Confidential by default
Documents shared through secure channels, not email attachments.
A3
Advice I can act on
Clear scope, timelines and next steps, without jargon.
Clients meet the people before the firm.
BYour operation
B1
Marketing within the rules
Bar Council, ICAI and other codes limit what firms may say, and how.
B2
Partners as the brand
Expertise lives in people who are busy with client work.
B3
AI that stays in its lane
Drafting tools that never send advice no professional has reviewed.
What we build
Six disciplines, weighted for professional services.
A typical programme here draws on each discipline in this mix. Every line names what it builds for the industry and links to the capability that does the work.
The number we moveQualified enquiries from target sectors
Qualified enquiries from target sectors
Proposal win rate
Time to publish a point of view
Client documents exchanged through the portal
AI, under the rules
AI drafts from your precedents, professionals sign.
Each use case cites its sources, keeps client data inside the firm, has an evaluation set and a log, and no model sends advice to a client.
Use case 01
Precedent drafting assistant
Measured byDrafts accepted with minor edits
Tested forOWASP LLM02 · Sensitive information disclosure
agent / precedent-drafting-assistantGuarded
TaskDrafts first versions of letters, memos and reports from the firm’s approved precedents and the matter file.
GuardrailCites every precedent it uses; drafts are marked as drafts and cannot be sent from the tool.
HumanA qualified professional reviews and signs every document.
LogSources used, drafts and reviewer.
✓Ships only with its evaluation set, its guardrail and an owner
Use case 02
Research summariser
Measured byCitations verified without correction
Tested forOWASP LLM09 · Misinformation
agent / research-summariserGuarded
TaskSummarises statutes, judgments, standards and circulars, with links to the official text.
GuardrailLinks every statement to its source and flags anything it cannot find.
HumanThe professional checks every citation before use.
LogQueries, sources and summaries.
✓Ships only with its evaluation set, its guardrail and an owner
Use case 03
Conflict-check helper
Measured byTime from enquiry to conflict decision
Tested forOWASP LLM01 · Prompt injection
agent / conflict-check-helperGuarded
TaskPrepares a conflict search from a new enquiry and lists possible matches for review.
GuardrailNever clears a conflict, only lists matches; enquiry text is treated as untrusted input.
HumanThe risk or compliance partner clears every new matter.
LogSearches run and decisions.
✓Ships only with its evaluation set, its guardrail and an owner
Work and insights
The work, anonymised until clients approve.
Projects in this industry are published once a client approves the write-up. Until then, here is what we have written on the rules that apply.
A typical programme · composite
A mid-sized law firm rebuilt its website around the information the Bar Council permits — practice areas, qualifications and contact details — and moved client documents onto a secure portal with access logs.
Anonymised and illustrative: the shape a programme takes, never a named client.
Related reading
Nothing published on professional services yet. Ask us what we are seeing in the industry.
Within the Bar Council’s rules: Rule 36 bars solicitation and advertising while allowing limited information on a website. We design sites that inform within that list — no testimonials, rankings or calls to hire — and your counsel confirms the content.
Q.02Do you work with CA firms?
Yes, within the ICAI’s rules on solicitation and advertisement and its website guidelines. Thought leadership informs; it does not solicit.
Q.03Can AI draft our client work?
It can prepare first drafts from your own precedents and research, with citations. A qualified professional reviews and signs everything that reaches a client.
Q.04How do you protect client confidentiality?
Secure portals instead of email attachments, access logs, retention rules and processor contracts with security clauses, aligned with the DPDP Rules and ISO/IEC 27001.
Keep exploring
More in business & professional services, and every other industry.