Client PDFs sat on a shared drive with a handful of shared passwords. Former staff could still reach more than they should, and lawyers emailed files because the drive was a hassle.
We built a document web app: named accounts, MFA, and folders by matter. Lawyers share a link with a client instead of attaching the file. Access is cut when someone leaves.
The office still works in the browser. The files are no longer a shared dump.