Business & professional services
Consultancies, law, accounting and audit firms, engineering consultancies and agencies sell judgement, often under rules that limit marketing. Within those rules we build positioning, thought leadership and websites, plus secure client portals and AI that drafts for professionals to approve.
Where the rules biteMap of all forty-one industries
What is shifting
The Bar Council enforces advertising rules online, client data has statutory protection, AI use must be disclosed and agencies answer for influencer posts. Each shift names what it demands, with a fact you can check.
What it requiresWebsites and profiles that inform without soliciting work.
EvidenceIn July 2024 the Bar Council of India directed state bar councils to send cease-and-desist notices to online platforms over advocates’ advertising, citing Rule 36.
What it requiresPortals, retention and access controls that show how client data is protected.
EvidenceFrom 13 May 2027 the DPDP Rules require reasonable security safeguards, including access logs kept for a year and security clauses in contracts with processors.
What it requiresAI-assisted drafting with review, logs and client disclosure built in.
EvidenceUnder the EU AI Act, people must be told when they are interacting with an AI system, from 2 August 2026.
What it requiresBriefs, approvals and posts with the disclosure designed in.
EvidenceASCI’s influencer guidelines require an upfront, prominent disclosure label on any post with a material connection to the advertiser; virtual influencers must also say they are not human.
The rulebook
Bar Council and ICAI rules, influencer disclosure, the data law, security frameworks and the EU AI Act, summarised for professional firms. Your counsel and ethics partner sign off.
Frameworks we build to
We design and build to these frameworks; this is not a claim of certification.
Shapes most of the work
Bar Council of India
Advocates may not solicit work or advertise, directly or indirectly; in July 2024 the BCI directed action against advertising through online platforms. A website may carry limited information such as contact details, enrolment and practice areas.
We designLaw-firm sites inform within the permitted list, with no testimonials, rankings or calls to hire.
BCI Rules, Part VI, Chapter II, Section IV, Rule 36 · BCI directions of 8 July 2024 Official text: Bar Council of India Rules — Rule 36
Institute of Chartered Accountants of India
Chartered accountants may not solicit clients or advertise except as the Council permits, including under its guidelines for members’ and firms’ websites.
We designFirm sites follow the website guidelines, and thought leadership informs without soliciting.
Chartered Accountants Act, 1949 · First Schedule, Part I, clauses (6) and (7) · ICAI Code of Ethics, 2020
Advertising Standards Council of India
Posts with a material connection to an advertiser carry an upfront, prominent disclosure label in the language of the post; virtual influencers must also disclose that they are not real people.
We designBriefs, approvals and posting tools require the disclosure before anything goes live.
ASCI · Guidelines for Influencer Advertising in Digital Media (ASCI Code and Guidelines) Official text: ASCI guidelines for influencer advertising
Shapes most of the work
Ministry of Electronics and IT
From 13 May 2027, firms holding clients’ personal data keep reasonable security safeguards and report breaches. Safeguards include access logs kept for a year and security clauses in processor contracts.
We designSecure portals, access logs, retention rules and processor contracts with security clauses.
DPDP Act, 2023 · section 8 · DPDP Rules, 2025, rules 6 and 7 (from 13 May 2027) Official text: DPDP Act, 2023 and DPDP Rules, 2025
Often shapes the work
ISO/IEC
The information-security management standard behind many client security reviews; certificates are issued by accredited certification bodies.
We designPortals and internal tools are built with the controls and evidence an ISO/IEC 27001 audit looks for.
ISO/IEC 27001:2022 Official text: ISO/IEC 27001
Indian Computer Emergency Response Team
Companies in India report listed cyber incidents, including data breaches and leaks, within six hours of noticing them. They keep ICT logs for a rolling 180 days within India.
We designClient portals keep logs and follow an incident plan written for the six-hour deadline.
CERT-In · Directions under section 70B(6) of the IT Act, 28 April 2022 Official text: CERT-In Directions, 2022
Often shapes the work
European Union
From 2 August 2026, people must be told when they are interacting with an AI system, and AI-generated content is marked. High-risk duties for Annex III uses follow from 2 December 2027.
We designClient-facing assistants say they are AI, and AI-assisted work is reviewed and recorded as such.
Regulation (EU) 2024/1689 · Article 50, as amended by Regulation (EU) 2026/1744 Official text: EU AI Act — transparency
Compiled 3 October 2026. Our reading of typical programmes, not legal advice. Rules change; your counsel confirms how each one applies to you.
Challenges
The problems we hear in most professional services briefs, from customers and from your own teams.
Clients want the right person, their experience and a quick conflict check.
Documents shared through secure channels instead of email attachments.
Clear scope, timelines and next steps, without jargon.
What we build
A typical programme here uses each discipline in this mix. Each line says what it builds for the industry and links to the capability behind it.
Positioning and identity for firms whose brand is their people.
Points of view, reports and events that demonstrate expertise within the profession’s rules.
Websites, expert directories and secure client portals.
Drafting and research assistants that work from the firm’s own documents, with professional review built in.
Relationship and event journeys that keep partners close to clients, on consented data.
Client portals and engagement journeys designed around confidentiality.
Programmes
The audit covers every page and profile and shows how clients find you. Lengths are typical, never promised.
The way in
We check your site, profiles and content against your profession’s rules, and show how clients find and judge your expertise.
What you get
02Project · 8–12 weeks
Positioning by practice area, an identity and a website with expert profiles, all within your profession’s rules.
MeasureQualified enquiries from target sectors
Services: Brand foundation & positioning · Logo & identity system · Website
Enquire about Positioning, identity and site03Retainer · Ongoing, 6-month minimum
Research, articles and events that demonstrate expertise, written with partners and checked against the rules.
MeasureTime to publish a point of view
Services: Content strategy & editorial plan · Founder & executive presence · PR & media relations programme
Enquire about Thought-leadership programme04Project · 8–12 weeks
Document exchange, matter status and an assistant that drafts from the firm’s own precedents, with professional review.
MeasureClient documents exchanged through the portal
Services: Custom CRM or operations platform · AI knowledge assistant · AI assistant experience design
Enquire about Secure client portal with drafting assistantHow success is measured
Main measureQualified enquiries from target sectors
AI, under the rules
Each use case cites its sources, keeps client data inside the firm and is tested on your own examples. Every step is logged, and no model can send advice to a client.
Use case 01
Measured byDrafts accepted with minor edits
Tested forOWASP LLM02 · Sensitive information disclosure
Goes live only with its evaluation set, automatic checks and a named owner
Use case 02
Measured byCitations verified without correction
Tested forOWASP LLM09 · Misinformation
Goes live only with its evaluation set, automatic checks and a named owner
Use case 03
Measured byTime from enquiry to conflict decision
Tested forOWASP LLM01 · Prompt injection
Goes live only with its evaluation set, automatic checks and a named owner
Work and insights
Projects in this industry are published once a client approves the write-up. Until then, here is what we have written on the rules that apply.
A typical programme · composite
A mid-sized law firm rebuilt its website around what the Bar Council permits: practice areas, qualifications and contact details. Client documents moved onto a secure portal with access logs.
Anonymised and illustrative: the shape a programme takes, never a named client.
Nothing published on professional services yet. Ask us what we are seeing in the industry.
Ask usQuestions
Something else on your mind? Ask us directly
Yes, within the limits of the Bar Council’s rules. Rule 36 bars soliciting work and advertising but allows limited information on a website. We design sites within that list, with no testimonials, rankings or calls to hire, and your counsel confirms the content.
Yes, within the ICAI’s rules on solicitation and advertisement and its website guidelines. Thought leadership informs readers without soliciting clients.
Yes, for first drafts from your own precedents and research, with citations. A qualified professional reviews and signs everything that reaches a client.
With secure client portals, access logs and retention rules. Contracts with processors carry security clauses, and the controls are aligned with the DPDP Rules and ISO/IEC 27001.
Keep exploring
You will speak to a lead who would run the work, and get a straight answer on fit.
01About 2 minutes
You get A reply from a named lead
02About 8 minutesRecommended
You get Options and a first scope after one call
03About 15 minutes
You get Receipt confirmed and a named bid lead
Every engagement starts with a written scope and a quote agreed before work begins. How each package is priced
