The verdict in three sentences
A secure extranet for sharing confidential files and documents costs between EUR 22,000 and 55,000 (ex. VAT) in 2026, regional hosting and audit log included. For a law firm, security is not optional: MFA, encryption and traceability underpin professional secrecy and data protection compliance. A good quote prices development, the security audit and maintenance separately, without burying them in a vague lump sum.
The security requirements to demand in the quote
A law firm extranet handles ultra-sensitive data. Here are the requirements to state explicitly, with their budget impact.
| Requirement | Expected detail | Indicative price impact 2026 |
|---|---|---|
| Strong authentication (MFA) | App-based or SMS 2FA, SSO optional | Included – EUR 2,000 |
| Encryption | In transit (TLS 1.3) and at rest (AES-256) | Included in the base |
| Audit log | Traceability of every access and download | EUR 2,000 – 4,000 |
| Regional hosting | Local/regional servers, data sovereignty | EUR 100 – 400/month |
| Granular permissions | Access by file, by client, by fee earner | EUR 3,000 – 6,000 |
| External security audit | Penetration test before go-live | EUR 3,000 – 8,000 |
Reject any quote that doesn't separate these lines. A blanket "secure extranet EUR 20,000" almost always hides the absence of an audit and an audit log.
Data protection and professional secrecy checklist
The firm remains the data controller. Here are the points to validate before signing.
| Compliance / ethics point | To check | Expected status |
|---|---|---|
| Data location | Regional/local servers only | Mandatory |
| Processing register | Provider documents the flows | Provided |
| Processor agreement | Signed DPA with the host | Mandatory |
| Retention period | Configurable automatic purge | Configurable |
| Backup encryption | Encrypted and tested backups | Mandatory |
| Access / deletion rights | Native functions in the admin | Provided |
| Professional secrecy | Strict file-by-file segregation | Mandatory |
Custom build or off-the-shelf platform?
| Criterion | Off-the-shelf platform | Custom extranet |
|---|---|---|
| Upfront cost | EUR 8 – 40/user/month | EUR 22,000 – 55,000 |
| File-by-file segregation | Often generic | Tailored to your structure |
| Detailed audit log | Variable | Complete and exportable |
| Sovereign hosting | Rarely guaranteed | Regional/local of choice |
| Business tool integration | Limited | Bespoke |
| Ethics adaptation | Low | Full |
Mini case study
Me Diop is a partner at a 9-lawyer firm in Dubai specialising in business law. Today she exchanges submissions and documents by email and WeTransfer, exposing her on professional secrecy. A confidentiality incident could trigger a disciplinary sanction and a client loss estimated in the tens of thousands of euros.
Need a professional website?
Kolonell builds websites that attract clients, optimized for the Sénégalese market. Free quote in 2 minutes.
She invests EUR 38,000 in an extranet with MFA, audit log and file-by-file segregation, plus EUR 5,000 of security audit. The result: no more unsecured email transfers, full traceability, and a strong commercial argument with large corporate clients who now demand secure document sharing. The firm won two corporate mandates in the first year, comfortably covering the investment.
FAQ
How long for a secure law firm extranet?
Count 4 to 6 months. Security blocks (MFA, encryption, audit) and penetration testing extend the schedule compared with a standard portal.
Is the security audit really necessary?
Yes. A penetration test (EUR 3,000 to 8,000) before go-live is the only way to objectively validate robustness. It's also a trust argument with clients.
Where is the data hosted?
On regional or local sovereign servers, with a processor agreement (data protection). It's essential to reconcile compliance with professional secrecy.
Can we set different permissions per fee earner and per file?
Yes, granular permissions (EUR 3,000 to 6,000) let you segregate each file and grant precise access, a condition of professional secrecy.
What is the annual maintenance cost?
Between 12 and 18 % of the project cost, i.e. EUR 3,000 to 10,000/year, including security monitoring, updates and regional hosting.
Let's scope your project. Tell us your headcount, case volume and ethics requirements, and we'll frame a compliant extranet to a suitable budget. Detailed quote within 48 h. WhatsApp +221 77 596 93 33.
Mohamed Bah
Fondateur, Kolonell
Passionate about digital and entrepreneurship in Africa, Mohamed has been helping Sénégalese businesses with their digital transformation since 2020. Founder of Kolonell, he believes every SME deserves a professional and accessible online présence.
