Lynda ArtesaniLegal Accountant and Data Migration Specialist at The Proper Trust

Email Breaches and Liscio

25 Jul 2023 · 2 min

Watch on YouTube

2:26

The speakers discuss the widespread issue of email and texting breaches that expose personally identifiable information (PII), especially when employees leave a firm and no solution exists to manage their communications. Companies often resort to repeatedly wiping entire email accounts to stay compliant, which is inefficient and risky. The conversation then introduces Liscio’s approach: the platform automatically pulls client emails from Outlook or Gmail, matches them to the correct client record, and stores the content behind two-factor authentication. Once associated, users can delete the original email from their mailbox, ensuring that even if the email account is compromised, the data remains secure within Liscio. The system also allows users to attach sensitive communications—such as those from attorneys—to relevant client records, preserving a complete history while keeping the email account clean. Overall, Liscio aims to eliminate the need for risky email retention practices by providing secure, searchable, and centrally managed client communications.

Chapters

People who have been breached, had their email breached, and there's been more than a couple of firms that's had this happen to, you know, whether it's a whole firm or some of their employees. The first thing they do when they come out of the process is they say, no more PII and email. We are going to make sure our emails are fully deleted. They'll wipe their entire email account, right, every, every couple of days just to stay in compliance, right? Wow. Because you can't have this treasure trove of stuff out there. Same thing with the personal phones, with texting, etc. Right? You can talk to any firm in America, you know, from the largest to the smallest. And if they have employees who are texting, none of them have a solution when that employee leaves the company.
No. Yeah, that's the problem.
I mean, it's crazy. You know, the same thing with email. You gotta get it, get the PII in. PII comes in email, it's fine. Match it to the right account in Liscio so everybody can see it. You don't have to worry about CCing and BCCing and forwarding so much anymore. So what we do at Liscio is the client email exists in Liscio. So we have john.doe@acme.com. We know that's a client. If John Doe sends an email in, we recognize it came from John Doe. We automatically pull it from Outlook or Gmail and associate with John Doe in our system. Okay. Okay. So now what— so what happens then is when that association is made, You can see it in Licio, and you can delete that email from your email account. So if your email account is compromised, there's nothing there.
Okay.
It's all behind the 2FA Licio account.
Okay.
Because it's going to happen.
And it's going to remain in the Licio, but it's off that server. It's off that—
yeah. That's right. Because the same thing is going to happen. You're going to have things that are— you're going to be working with an attorney. The attorney might send you something related to a client that has Extraordinarily sensitive information that comes over email. You can't control that. But again, what will happen is, even though that Listio contact might not exist for that attorney, you say, okay, this is for John and Jane Doe. It's related to Acme. It comes from the attorney. It's coming from some attorney that has, you know, affects multiple clients. You'll go into Listio. You'll attach that email to Jane and John Doe and Acme. Just pick it, relate it to them. Then you delete it out of your email. So now everybody can see the entire history in one place, and your email stays secure.