Business & professional services

Professional services. Expertise cannot be shown, only demonstrated.

Some professions may not advertise at all.

Consultancies, law firms, accounting and audit firms, engineering consultancies and agencies, whose product is people and judgement and whose marketing is often limited by their own professional rules. We build positioning and thought leadership that respect those rules, websites that inform without soliciting, client portals that protect confidential data, and AI that drafts while professionals decide.

The number we move
Qualified enquiries from target sectors
Where we work in professional services
  • Consulting & advisory
  • Law firms
  • Accounting & audit firms
  • Engineering & technical consultancies
  • Marketing & communications agencies
Rules mapped
7 rules · 4 areas
Disciplines that lead
BrandCampaign
Frameworks we build to
ISO/IEC 27001:2022 — Information security management systemsDPDP Act 2023 — Digital Personal Data Protection Act, 2023GDPR — General Data Protection Regulation (EU) 2016/679WCAG 2.2 AA — Web Content Accessibility GuidelinesEU AI Act — Artificial Intelligence Act (EU) 2024/1689OWASP Top 10 for LLM Applications — LLM and generative AI security risks
A hand annotates a printed document with a pen under warm desk light
Professional servicesJudgement is the product.

Where the rules biteMap of all forty-one industries

  • Claims Advertising & claims: Shapes most of the work
  • Regulator Sector regulator: Often shapes the work
  • Payments Payments: Sometimes shapes the work
  • Data Personal data: Shapes most of the work
  • Security Security & incidents: Often shapes the work
  • Access Accessibility: Sometimes shapes the work
  • AI AI governance: Often shapes the work

What is shifting

Expertise is judged before the meeting, within rules some firms cannot break.

Professional bodies enforced their advertising rules online, client data gained a statute, AI use needs disclosing and agencies answer for their creators. Each shift names what it demands, with a fact you can check.

Rows of old leather-bound books on dark wooden library shelves
Expertise is built on what came before.
  1. Lawyers’ online marketing is under active enforcement.

    It demandsWebsites and profiles that inform within the rules, without soliciting work.

    SignalIn July 2024 the Bar Council of India directed state bar councils to send cease-and-desist notices to online platforms over advocates’ advertising, citing Rule 36.

  2. Client confidentiality now has a statute behind it.

    It demandsPortals, retention and access controls that show how client data is protected.

    SignalFrom 13 May 2027 the DPDP Rules require reasonable security safeguards, including access logs kept for a year and security clauses in contracts with processors.

  3. AI in client work has to be disclosed and supervised.

    It demandsAI-assisted drafting with review, logs and client disclosure built in.

    SignalUnder the EU AI Act, people must be told when they are interacting with an AI system, from 2 August 2026.

  4. Agencies answer for their creators’ disclosures.

    It demandsBriefs, approvals and posts with the disclosure designed in.

    SignalASCI’s influencer guidelines require an upfront, prominent disclosure label on any post with a material connection to the advertiser; virtual influencers must also say they are not human.

The rulebook

Some professions may not advertise; all of them must keep secrets.

The Bar Council and ICAI rules, influencer disclosure, the data law, security frameworks and the EU AI Act, read for a professional firm. Your counsel and ethics partner keep sign-off.

Frameworks we build to

  • ISO/IEC 27001:2022 — Information security management systems
  • DPDP Act 2023 — Digital Personal Data Protection Act, 2023
  • GDPR — General Data Protection Regulation (EU) 2016/679
  • WCAG 2.2 AA — Web Content Accessibility Guidelines
  • EU AI Act — Artificial Intelligence Act (EU) 2024/1689
  • OWASP Top 10 for LLM Applications — LLM and generative AI security risks

Frameworks we design and build to — not a claim of certification.

Advertising & claims

Shapes most of the work

  1. Bar Council of India

    Bar Council of India Rules — Rule 36

    Advocates may not solicit work or advertise, directly or indirectly; in July 2024 the BCI directed action against advertising through online platforms. A website may carry limited information such as contact details, enrolment and practice areas.

    We designLaw-firm sites inform within the permitted list, with no testimonials, rankings or calls to hire.

    BCI Rules, Part VI, Chapter II, Section IV, Rule 36 · BCI directions of 8 July 2024 Official text: Bar Council of India Rules — Rule 36

  2. Institute of Chartered Accountants of India

    ICAI rules on solicitation and advertisement

    Chartered accountants may not solicit clients or advertise except as the Council permits, including under its guidelines for members’ and firms’ websites.

    We designFirm sites follow the website guidelines, and thought leadership informs without soliciting.

    Chartered Accountants Act, 1949 · First Schedule, Part I, clauses (6) and (7) · ICAI Code of Ethics, 2020

  3. Advertising Standards Council of India

    ASCI guidelines for influencer advertising

    Posts with a material connection to an advertiser carry an upfront, prominent disclosure label in the language of the post; virtual influencers must also disclose that they are not real people.

    We designBriefs, approvals and posting tools require the disclosure before anything goes live.

    ASCI · Guidelines for Influencer Advertising in Digital Media (ASCI Code and Guidelines) Official text: ASCI guidelines for influencer advertising

Personal data

Shapes most of the work

  1. Ministry of Electronics and IT

    DPDP Act, 2023 and DPDP Rules, 2025

    Firms holding clients’ personal data keep reasonable security safeguards, including access logs for a year and security clauses in contracts with processors, and report breaches, from 13 May 2027.

    We designSecure portals, access logs, retention rules and processor contracts with security clauses.

    DPDP Act, 2023 · section 8 · DPDP Rules, 2025, rules 6 and 7 (from 13 May 2027) Official text: DPDP Act, 2023 and DPDP Rules, 2025

Security & incidents

Often shapes the work

  1. ISO/IEC

    ISO/IEC 27001

    The information-security management standard behind many client security reviews; certificates are issued by accredited certification bodies.

    We designPortals and internal tools are built with the controls and evidence an ISO/IEC 27001 audit looks for.

    ISO/IEC 27001:2022 Official text: ISO/IEC 27001

  2. Indian Computer Emergency Response Team

    CERT-In Directions, 2022

    Companies in India report listed cyber incidents, including data breaches and leaks, within six hours of noticing them, and keep ICT logs for a rolling 180 days within India.

    We designClient portals are logged and covered by an incident runbook that meets the six-hour clock.

    CERT-In · Directions under section 70B(6) of the IT Act, 28 April 2022 Official text: CERT-In Directions, 2022

AI governance

Often shapes the work

  1. European Union

    EU AI Act — transparency

    From 2 August 2026, people must be told when they are interacting with an AI system, and AI-generated content is marked; high-risk duties for Annex III uses follow from 2 December 2027.

    We designClient-facing assistants say they are AI, and AI-assisted work is reviewed and recorded as such.

    Regulation (EU) 2024/1689 · Article 50, as amended by Regulation (EU) 2026/1744 Official text: EU AI Act — transparency

Compiled 3 October 2026. Our reading of typical programmes, not legal advice. Rules change; your counsel confirms how each one applies to you.

Challenges

Your customers’ problems, and your own.

What we hear in almost every professional services brief — on the customer’s side of the screen, and on yours.

Your customers

  1. Find the right expert

    Clients want the person, the experience and the conflict check, quickly.

  2. Confidential by default

    Documents shared through secure channels, not email attachments.

  3. Advice I can act on

    Clear scope, timelines and next steps, without jargon.

Orange upholstered chairs around a wooden meeting table
Clients meet the people before the firm.

Your operation

  1. Marketing within the rules

    Bar Council, ICAI and other codes limit what firms may say, and how.

  2. Partners as the brand

    Expertise lives in people who are busy with client work.

  3. AI that stays in its lane

    Drafting tools that never send advice no professional has reviewed.

What we build

Six disciplines, weighted for professional services.

A typical programme here draws on each discipline in this mix. Every line names what it builds for the industry and links to the capability that does the work.

Leads Core Supports Share of a typical programme, by role · illustrative
  1. 01

    Brand Design

    Leads

    Positioning and identity for firms whose brand is their people.

  2. Points of view, reports and events that demonstrate expertise within the profession’s rules.

  3. Websites, expert directories and secure client portals.

  4. 04

    AI Design

    Core

    Drafting and research assistants grounded in the firm’s own knowledge, with review built in.

  5. Relationship and event journeys that keep partners close to clients, on consented data.

  6. Client portals and engagement journeys designed around confidentiality.

Programmes

Check the rules first, then show the expertise.

The way in tests every page and profile against your profession’s rules and shows how clients find you. Lengths are typical, never promised.

The way in

Professional-rules and positioning audit

We check your site, profiles and content against your profession’s rules, and show how clients find and judge your expertise.

Package
Sprint · Fixed fee
Typical length
2–3 weeks
It sets
Qualified enquiries from target sectors, as a baseline
  • Brand audit & diagnostic
  • AI search visibility (AEO & GEO)

What it hands over

  • A rules register with fixes for every page and profile
  • A positioning brief by sector and practice
  • A plan for a secure client portal
Start here
  1. 02Project · 8–12 weeks

    Positioning, identity and site

    A practice-led positioning, an identity and a website with expert profiles that stay within the rules.

    MovesQualified enquiries from target sectors

    Services: Brand foundation & positioning · Logo & identity system · Website

    Enquire about Positioning, identity and site
  2. 03Retainer · Ongoing, 6-month minimum

    Thought-leadership programme

    Research, articles and events that demonstrate expertise, written with partners and checked against the rules.

    MovesTime to publish a point of view

    Services: Content strategy & editorial plan · Founder & executive presence · PR & media relations programme

    Enquire about Thought-leadership programme
  3. 04Project · 8–12 weeks

    Secure client portal with drafting assistant

    Document exchange, matter status and an assistant that drafts from the firm’s own precedents, with professional review.

    MovesClient documents exchanged through the portal

    Services: Custom CRM or operations platform · AI knowledge assistant · AI assistant experience design

    Enquire about Secure client portal with drafting assistant

How success is measured

The number we moveQualified enquiries from target sectors

  • Qualified enquiries from target sectors
  • Proposal win rate
  • Time to publish a point of view
  • Client documents exchanged through the portal

AI, under the rules

AI drafts from your precedents, professionals sign.

Each use case cites its sources, keeps client data inside the firm, has an evaluation set and a log, and no model sends advice to a client.

Use case 01

Precedent drafting assistant

Measured byDrafts accepted with minor edits

Tested forOWASP LLM02 · Sensitive information disclosure

agent / precedent-drafting-assistant Guarded
  1. TaskDrafts first versions of letters, memos and reports from the firm’s approved precedents and the matter file.
  2. GuardrailCites every precedent it uses; drafts are marked as drafts and cannot be sent from the tool.
  3. HumanA qualified professional reviews and signs every document.
  4. LogSources used, drafts and reviewer.

Ships only with its evaluation set, its guardrail and an owner

Use case 02

Research summariser

Measured byCitations verified without correction

Tested forOWASP LLM09 · Misinformation

agent / research-summariser Guarded
  1. TaskSummarises statutes, judgments, standards and circulars, with links to the official text.
  2. GuardrailLinks every statement to its source and flags anything it cannot find.
  3. HumanThe professional checks every citation before use.
  4. LogQueries, sources and summaries.

Ships only with its evaluation set, its guardrail and an owner

Use case 03

Conflict-check helper

Measured byTime from enquiry to conflict decision

Tested forOWASP LLM01 · Prompt injection

agent / conflict-check-helper Guarded
  1. TaskPrepares a conflict search from a new enquiry and lists possible matches for review.
  2. GuardrailNever clears a conflict, only lists matches; enquiry text is treated as untrusted input.
  3. HumanThe risk or compliance partner clears every new matter.
  4. LogSearches run and decisions.

Ships only with its evaluation set, its guardrail and an owner

Work and insights

The work, anonymised until clients approve.

Projects in this industry are published once a client approves the write-up. Until then, here is what we have written on the rules that apply.

A typical programme · composite

A mid-sized law firm rebuilt its website around the information the Bar Council permits — practice areas, qualifications and contact details — and moved client documents onto a secure portal with access logs.

Anonymised and illustrative: the shape a programme takes, never a named client.

Related reading

Nothing published on professional services yet. Ask us what we are seeing in the industry.

Ask us

Questions

What managing partners, marketing and risk leads ask us first.

Something else on your mind? Ask us directly

Q.01Can a law firm have a marketing website?

Within the Bar Council’s rules: Rule 36 bars solicitation and advertising while allowing limited information on a website. We design sites that inform within that list — no testimonials, rankings or calls to hire — and your counsel confirms the content.

Q.02Do you work with CA firms?

Yes, within the ICAI’s rules on solicitation and advertisement and its website guidelines. Thought leadership informs; it does not solicit.

Q.03Can AI draft our client work?

It can prepare first drafts from your own precedents and research, with citations. A qualified professional reviews and signs everything that reaches a client.

Q.04How do you protect client confidentiality?

Secure portals instead of email attachments, access logs, retention rules and processor contracts with security clauses, aligned with the DPDP Rules and ISO/IEC 27001.

Let’s build what happens next.

Tell us what you’re building. We’ll answer straight.

Book a discovery call

Three ways to start

  1. 01About 2 minutes

    A quick question

    You get A reply from a lead, not a sales queue

  2. 02About 8 minutesMost useful

    A project brief

    You get Options and a first scope after one call

  3. 03About 15 minutes

    A formal RFQ or RFP

    You get Receipt confirmed and a named bid lead

Every engagement starts with a written scope and a quote agreed before work begins. How each package is priced