Chapter 3 · Technological capability

Technological capability:
infrastructure and tools

This chapter describes what legal organizations have to operate: the infrastructure that supports them, the tools they actually use and the training with which they prepare their teams. It is the material foundation on which everything else is built.

The idea in one sentence

The foundation is reasonably covered (good infrastructure, everyday communication tools), but there are two clear gaps: advanced management software is rarely contracted and used even less, and training in key digital competencies is scarce.

Technological infrastructure

We assessed infrastructure with five statements about access to technology, the capacity of existing systems, the traceability of decisions, the compatibility between tools and the difficulty of contracting specialized software.

Technological infrastructure (law firms vs. legal departments)
Law firmsLegal departments
Limited access to technology hinders our digitalization
3.36
3.15
Nuestra infraestructura soporta servicios legales digitales
3.34
3.59
Our systems ensure traceability of decisions
3.26
3.11
Compatibility problems slow down our digital transformation
2.73
3.23
It is difficult to procure specialized legal software
2.64
3.11

The dotted line marks the neutral point (3 = neither agree nor disagree).

The greatest concerns (in both audiences) are those that measure barriers: the difficulty of contracting specialized legal software and the compatibility problems between tools. By contrast, most perceive that their infrastructure does support digital work.

What accompanies good infrastructure

What relates to the perception of infrastructure (Spearman's ρ)

Law firms

Ethical practices
0.44
Training
0.40
Adoption Index
0.37
Efficiency
0.36
Team knowledge
0.32
Client experience
0.31
KPI maturity
0.31
Perceived impact
0.30
Tool usage
0.23
Professional adaptation
0.21
AI usage
0.19
Digitalization (%)
0.19

Legal departments

AI usage
0.36
Ethical practices
0.28
Training
0.25
Team knowledge
0.24
Client experience
0.23
Perceived impact
0.14
Adoption Index
0.13
Efficiency
0.11
KPI maturity
0.09
Tool usage
0.07
Professional adaptation
0.05
Digitalization (%)
-0.02

Strength of the relationship (Evans, 1996): very weak (0–0.19), weak (0.20–0.39), moderate (0.40–0.59), strong (0.60–0.79), very strong (0.80–1). The gray bars indicate relationships that the study does not distinguish from zero (not significant).

Here appears one of the clearest structural findings of the study:

  • In law firms, infrastructure goes hand in hand with everything else (management practices, training, efficiency, knowledge). It does not operate in isolation: the firms with better infrastructure have more mature ecosystems overall.
  • In legal departments, infrastructure relates to almost nothing. Corporate legal departments inherit the infrastructure of the IT area of the company, so this perception does not necessarily reflect their actual level of adoption or technological maturity.

What was tested and what did we find?

  • Does the technology access gap hold back digitalization? In law firms, yes, it is a perceived barrier. In legal departments, no (they inherit corporate infrastructure). Confirmed in law firms.
  • Does existing infrastructure support digital work? Both audiences agree that yes. The idea that base technical capacity would be lacking is not confirmed.
  • Is fragmentation between tools a dominant barrier? It does not emerge as a priority problem in the Mexican context. Not confirmed.

The methodological detail and the literature review of these hypotheses are in the methodology appendix.

Information security

Security is a critical dimension of technological capability, especially in a sector that handles confidential information. We asked what security measures each organization has implemented.

Implemented information security measures (%)
Law firmsLegal departments
Password managers
62.5%
56.4%
Role-based access policies
41.7%
56.4%
Multi-factor authentication
40.3%
43.6%
Specialized document management software
37.5%
23.1%
Advanced electronic signatures
25%
35.9%
Cybersecurity training
30.6%
33.3%
Encryption of data at rest
31.9%
28.2%
Encryption of data in transit
31.9%
25.6%
Data protection training
31.9%
30.8%
Regular security audits
27.8%
30.8%
Access monitoring
22.2%
20.5%
ISO 27001 certification
5.6%
10.3%
Blockchain
8.3%
5.1%
None
8.3%
5.1%
ISO 27701 certification
2.8%
7.7%

Formal certifications are almost nonexistent

Basic security measures have reasonable adoption (multi-factor authentication and data encryption are the most frequent), but formal information security management certifications are practically nonexistent: the ISO 27001 certification is held by barely around 6% of law firms and 10% of legal departments, and the ISO 27701 (on privacy) even less. In a sector that safeguards sensitive third-party information, it is a relevant gap between everyday practice and formal assurance standards.

Technological tools

The goal of this module is to measure the actual use of 15 technological tools and not just their contracting. It is important to make this distinction because mere contracting does not translate into transformation. Identifying these gaps makes it possible to better surface needs and solutions, future investments and a comparison between peers.

Actual tool usage (Law firms)
Videoconferencing platforms
4.65
Basic document manager
4.35
Digital/electronic signature systems
3.62
General generative AI
3.56
Online legal databases
3.44
Time-tracking software
3.18
Billing and collections software
3.15
Generative AI for the legal sector
2.25
Sophisticated document manager
2.22
Process automation tools
1.60
Legal case management software
1.44
Document analysis software
1.24
CRM software
1.19
Contract management software
0.93
Ticket management software
0.78
Actual tool usage (Legal departments)
Videoconferencing platforms
4.56
Basic document manager
4.36
Digital/electronic signature systems
3.44
General generative AI
3.36
Generative AI for the legal sector
2.51
Online legal databases
2.49
Contract management software
2.05
Ticket management software
2.00
Sophisticated document manager
1.77
Process automation tools
1.64
Legal case management software
1.59
Billing and collections software
1.23
CRM software
1.23
Document analysis software
1.10
Time-tracking software
1.00

Usage scale: 0 = not contracted, 1 = never, 3 = occasional, 5 = daily use.

The pattern repeats in both audiences: communication and basic document management tools (videoconferencing, document managers, digital signature) have high, everyday use. By contrast, specialized software (contract management, legal CRM, ticket management) shows low use: in many organizations it is not even contracted. The gap is not in the base tools, but in the advanced management ones.

Team training

We measured the frequency with which organizations train their teams on 14 topics relevant to digital transformation.

Training frequency (Law firms)
Legal topics
2.62
Data Protection and Privacy
1.80
Cybersecurity
1.55
Generative Artificial Intelligence
1.44
Document Management and Automation
1.38
Process improvement
1.18
FinTech and Law (law firms only) / Specific legal topics
1.18
Project management
1.03
Legal Technology Regulation
0.96
Legal Design and User Experience
0.87
Metric design and monitoring
0.85
Data analysis and visualization
0.82
Blockchain and smart contracts
0.71
Change management
0.61
Training frequency (Legal departments)
Legal topics
2.11
Data Protection and Privacy
1.78
Cybersecurity
1.69
Generative Artificial Intelligence
1.24
Process improvement
1.24
Legal Technology Regulation
1.09
Metric design and monitoring
1.06
Document Management and Automation
1.00
Project management
1.00
Change management
0.94
Data analysis and visualization
0.79
Legal Design and User Experience
0.77
FinTech and Law (law firms only) / Specific legal topics
0.71
Blockchain and smart contracts
0.57

Frequency scale: 0 = never, 4 = constantly (more than 5 times a year).

Training deficits coincide with adoption barriers

The topics with the lowest training investment are, precisely, the most relevant for digital transformation: change management, data analysis and visualization, metric design and monitoring, and legal design. More than half of organizations have never trained their team in them. The problem, then, is not only technological but also formative.

In general terms, legal departments invest somewhat more in training than law firms, especially in data protection, cybersecurity and document management, topics where corporate departments face greater regulatory pressure.

In summary

The base technological capability is reasonably covered (good infrastructure, everyday communication tools), but there are two clear gaps: the advanced management software is rarely contracted and used even less, and training in key digital competencies is scarce. In legal departments, moreover, the corporate infrastructure "hides" the true level of maturity of the legal area.

How to cite

Prince Tritto, P., Villa Berger, P., Salmon, L., Muñoz Ponce, M., & Limón González, J. B. (2026). Technology Maturity Index for the Legal Industry: pilot study (data from Mexico, 2025). Law and Artificial Intelligence Laboratory, Universidad Panamericana; KermaPartners; Lemontech. https://labderia.up.edu.mx/en/legaltech-report