Industry guide · Salesforce Experience Cloud

Experience Cloud for legal.

Secure portals where clients open matters, exchange documents and check progress, and where business colleagues bring requests to in-house counsel through one front door.

What Salesforce Experience Cloud does for legal

Experience Cloud gives law firms and corporate legal departments a secure, branded site where clients or internal stakeholders interact with legal work directly. Prospective clients complete intake questionnaires that feed conflict review. Existing clients upload documents, answer information requests, see matter milestones and message their team without relying on unencrypted email. In-house teams use the same technology as a legal front door, where business colleagues submit contract, advice and compliance requests that route to the right lawyer with the context already attached. Everything sits on the matter record the legal team works from.

Why it fits

Why legal is different.

Legal work carries confidentiality obligations that most portals never have to consider. Attorney-client privilege, ethical walls between matters and client-specific security requirements mean access must be precise at the matter level, not just the account level. A single corporate client may have many matters handled by different teams, and its own general counsel, paralegals and business contacts should each see only what is relevant to them. Experience Cloud adapts through sharing sets, matter-based access and permission sets tied to external roles, with files stored under clear retention rules. Lawyers are also reluctant adopters of new tools, so the portal must save them time, not create a second place to update matter status.

Use cases

How legal teams use Salesforce Experience Cloud.

Matter intake and conflicts

Prospective clients answer a guided questionnaire covering parties, adverse interests, deadlines and the nature of the issue. Responses create an intake record that routes to conflicts staff, who check parties against existing clients and matters before anyone responds substantively. Declined inquiries receive a consistent non-engagement message, and accepted ones become matters with the intake details already in place. Intake volume by practice area becomes reportable.

Secure document exchange

Clients upload records, signed engagement letters and discovery materials to the matter instead of attaching them to email. The legal team posts drafts and final documents for review, with access logged. Retention settings follow the firm's records policy, and closing a matter can change what remains visible to the client, keeping the file orderly for the entire engagement. Large productions can use a dedicated transfer path.

Client matter status updates

Clients want to know where things stand without scheduling a call that will appear on their invoice. A status timeline shows milestones, upcoming deadlines and outstanding requests for the client to complete. Updates come from fields lawyers and paralegals already maintain, so publishing progress takes no separate effort, and general counsel can review status across every matter the firm handles for them.

In-house legal front door

Corporate legal departments can offer employees a single site for contract reviews, advice requests, subpoenas and policy questions. Forms capture the business context, value and urgency, then route requests by type and region. Self-service templates and knowledge articles resolve routine questions, and the department finally sees demand by business unit, which supports staffing and outside counsel decisions. Requesters can track their own items too.

Design

The data model decisions.

Most legal portal designs rest on three decisions. First, the matter as the central record, related to the client account, the responsible attorneys and the external contacts permitted to see it. Second, the boundary with the practice management system: which system owns matter numbers, time, billing and documents, and what Salesforce only displays. Third, access classification, where each matter carries a confidentiality level or ethical wall flag that controls both internal and external visibility, rather than relying on individual sharing decisions made case by case.

Practice management system

Matter numbers, responsible attorneys and key dates synchronize from practice management, so the portal and internal records never disagree about who handles what.

Document management system

Documents can remain in the firm's document management system and surface in the portal through integration, preserving version control, profiling and existing retention practices.

Billing and e-billing

Invoices and payment status can appear in the portal for client convenience, while time entry and billing guidelines remain in the systems built for them.

Plan for it

What to get right first.

01

Design for privilege and walls

Confidentiality duties under professional conduct rules extend to portal design. Test that ethical walls block both internal and external access, that shared links cannot leak to unintended recipients and that audit logs show who viewed each document. Involve the firm's general counsel or risk team early.

02

Match client security requirements

Corporate clients often send outside counsel guidelines and security questionnaires covering encryption, access controls, multi-factor authentication and data location. Review those requirements before designing identity and storage, because meeting them after launch can require significant rework. Keep a record of each client's commitments and who owns them.

03

Avoid a second status system

If lawyers must update the portal separately from their normal matter records, status will go stale quickly and clients will lose confidence. Drive client-facing updates from fields the team already maintains, and limit what the portal shows to information that stays reliably current.

FAQ

Salesforce Experience Cloud for legal: questions.

Is a Salesforce portal secure enough for privileged documents?

Salesforce provides strong security controls, including encryption options, multi-factor authentication, detailed sharing and event monitoring. Whether a specific portal is secure enough depends on configuration, testing and your own policies. We design access around matters and confidentiality levels, review the configuration with your risk team and document the controls for client security questionnaires. Security remains a shared responsibility.

Will the portal integrate with the software we use to run matters?

Generally it can, using the vendor's APIs or an integration platform. The typical pattern synchronizes matter and client data into Salesforce, displays billing information and links to documents held elsewhere. We check the available interfaces during discovery, since integration options vary widely between systems and hosting models. Hosted and on-premises systems differ considerably. Test data access early.

Does an in-house legal department need Experience Cloud?

Not always. If every requester is a Salesforce user, internal request forms may be enough. Experience Cloud makes sense when most employees do not have Salesforce licenses, when requesters include affiliates or outside parties, or when the department wants a branded self-service site with knowledge articles and templates that reduce routine requests. Licensing costs factor into that choice.

Can AI help with legal intake?

An Agentforce agent can guide people through intake, ask follow-up questions, summarize submissions and suggest routing. It must not give legal advice or imply an attorney-client relationship before conflicts are cleared and an engagement is accepted. Clear disclaimers, narrow scope and attorney review of anything substantive are essential design requirements. Every conversation should be retained for review.

Planning Salesforce Experience Cloud for legal? Let’s talk it through.

One onshore team with 150 Salesforce certifications, a Salesforce Consulting Partner since 2017.

Tech Talk

A monthly brief for the people who own Salesforce, AI and revenue technology

What changed in Salesforce and AI this month, and what to do about it.

One email a month. Written by the consultants who deliver the work, not by a marketing team, for the leaders who make the technology decisions.

  • What changed in Salesforce, AI, integration and RevOps, and what it means for your org
  • At least one framework, checklist or reference architecture you can take into a meeting
  • Honest opinions, including when we disagree with what a vendor is selling
  • No sales sequence. We do not sell from this list

Consultant analysis, not vendor recaps. One click to leave.

One email a month. Your industry and your address, nothing else. We never share either, and you can unsubscribe from the bottom of any issue. See what’s in Tech Talk →

Call (314) 916-4095 Book a consultation
Call (314) 916-4095 Book a call