What a legal CRM is and why your firm needs one in 2026

The word “CRM” has a bad reputation in law firms. It sounds like sales software — funnels, pipelines, teams chasing “opportunities” rather than handling matters. And yet behind the acronym sits a question every firm asks itself weekly: where is everything we know about this client? A legal CRM is, at bottom, the tool that answers that question in one place. And in 2026 it has stopped being a luxury and become something genuinely hard to avoid.

What a legal CRM is (and how it differs from Salesforce)

A generic CRM — Salesforce, HubSpot and their kind — is built for selling. Its basic unit is the sales opportunity: a contact enters at the wide end of the funnel, moves through stages and ends in a sale or in nothing. That’s an excellent model for a sales team and a fairly useless one for a law firm, because the relationship with a legal client is not a funnel. It’s a long relationship, made of matters that open and close, of deadlines that forgive nothing, and of duties — of confidentiality, of record-keeping, of invoicing — that no sales CRM was designed to carry.

You can bend one of these platforms into shape for a firm, but it tends to be expensive: you contort the data model, pay for the customisation and then maintain it. And even then the matter file — the actual unit of a lawyer’s work — still lives elsewhere, in another tool, so the promised “single view of the client” only ever covers half the picture.

A legal CRM turns the model around. Its basic unit is not the opportunity but the client with their matters: a single record from which the cases, the communications, the deadlines, the documents and the invoicing of that relationship all hang. There’s no funnel to force, because the model is already the firm’s own.

It isn’t (just) a case-management tool either

The opposite confusion exists too. Many firms already run a case-management tool and assume it covers the same ground. Not quite. A classic case-management system knows a great deal about the matter and very little about the client: when the file is closed and archived, the relationship disappears with it.

You notice this when the same client comes back three years later with a new matter. Who dealt with them last time? What identification documents were collected? What was billed, and how? If the tool only thinks in matters, all of that has to be reconstructed by hand or requested again — with the impression that leaves. A legal CRM keeps the whole relationship: matters come and go, the client record stays.

The practical distinction is simple. A case-management tool answers “how is this matter going?”. A legal CRM also answers “who is this client, what history do we have with them, and what do we owe them?” — and a firm needs both answers.

Why 2026 is the year it stopped being optional

Until recently, all of this could be filed under internal housekeeping. Three things have changed.

The first is regulatory. Since 1 January 2026, companies subject to Spanish corporate income tax have been required to invoice through software that complies with the VeriFactu regulation (Royal Decree 1007/2023, with deadlines as amended by Royal Decree 254/2025), and since 1 July 2026 the obligation reaches everyone else, self-employed professionals included. A firm’s invoice can no longer come out of a Word template: it has to be generated by a system that produces invoicing records meeting the regulation’s requirements. And if invoicing has to live in a system, the sensible place is the same system where the client and the matter being billed already live — not yet another island.

The second is expectations. The client of 2026 runs their bank, their insurer and their accountant from a phone, and doesn’t understand why their lawyer should be the exception. They expect to know how their matter stands without calling, to receive documents without asking twice, and to write through whichever channel suits them. None of that can be improvised with email and folders: it requires the client’s information to be organised and reachable.

The third is geographic. More and more Spanish firms serve clients who aren’t in Spain: foreign property buyers, investors, relocated residents. A client in another time zone and another language needs service that is asynchronous and documented — not a relationship that depends on catching each other by phone during office hours.

What a legal CRM gathers into a single record

Brought down to earth, a legal CRM worthy of the name pulls five things together around each client.

The matters, first: every case linked to its client, with its history and its deadlines in view, so that anyone at the firm with access understands the state of the relationship without asking around.

The communications, next. Emails, logged calls and messages should sit on the matter they belong to, not scattered across personal inboxes. We’ve written at length about why this matters so much: channel fragmentation is among the most expensive problems a firm can afford to ignore.

Deadlines and the calendar, third — because in a law firm a forgotten date is not an administrative slip: it can be professional liability.

Invoicing, integrated with the matter and compliant with current regulation, so that issuing an invoice doesn’t mean leaving the system or retyping data that already exists.

And compliance, last. Lawyers are obliged entities under Law 10/2010 on the prevention of money laundering for certain operations — real estate, corporate, management of funds — which means identifying the client and documenting due diligence. If that documentation lives on the client’s record, it’s collected once and reused on the next matter; if it lives in loose folders, it gets requested all over again each time, with the cost and the impression that carries.

Client data, the GDPR and professional secrecy

There’s a less comfortable reason to put all this in order. Today, in many firms, part of the clients’ information lives in a partner’s personal WhatsApp and in individual Gmail accounts. That isn’t just untidiness: it’s a legal problem for the firm itself.

The firm is the data controller for its clients’ data under the GDPR and Spain’s data protection act (LOPDGDD), and it can hardly honour an access or erasure request — or evidence what data it processes and where — if that data is spread across personal devices it doesn’t control. On top of that sits the duty of professional secrecy under the Spanish legal profession’s General Statute: a client’s conversation on the private phone of a lawyer who leaves the firm is a leak waiting for a date.

A legal CRM doesn’t solve this by magic, but it changes the terrain: client data lives in a system the firm owns, with access controlled per matter, and not in anyone’s pocket.

What to look for when evaluating one

If your firm is weighing the step, a few questions separate wheat from chaff quickly. Is the matter the system’s native unit, or an add-on bolted to a sales CRM? Do communications land on the matter, or keep living apart? Does invoicing comply with VeriFactu out of the box, or does it depend on yet another tool? Can the client follow their matter in their own language? Where is the data hosted, and what security guarantees does the provider offer? And can you export your data if one day you want to leave?

None of these questions is really technical. They are all the same question: is this system built around how a firm works, or will I have to think like the system?

How Mandato solves it

Mandato is built on exactly that idea: the client record and their matters at the centre of everything. Each matter keeps its history automatically and its deadlines tracked, so the relationship with the client doesn’t depend on anyone’s memory. The firm’s email lands in a single inbox where every message is linked to its matter, instead of scattering across personal mailboxes.

For the international client, the client portal is bilingual: the client follows their matter and their documents in their own language, with no calls and no time zones in the way. And invoicing is designed for VeriFactu, so the obligation that came into force this year is met from the same system where the rest of the relationship lives.

The single record as a management decision

A legal CRM is not a technological indulgence or a fashion imported from the sales world. It’s the decision that everything the firm knows about a client — their matters, their conversations, their deadlines, their invoices, their compliance documentation — should live in one place the firm controls. In 2026, with invoicing regulated, clients used to digital service and a good share of the clientele a time zone away, carrying on without that single record isn’t caution. It’s simply a decision not yet taken.