GTools.pro — Zero-Knowledge M365
ToolsPricingDesktopCompareSecurityTrustAbout
  1. Home
  2. Industries
  3. Law Firms & Legal

Microsoft 365 for Law Firms — Zero-Knowledge Backup & Migration

Zero-knowledge Microsoft 365 backup and tenant migration for law firms — privileged client data the vendor cannot read. § 203 StGB and § 43e BRAO aware.

Frequently asked questions

Can a law firm use a cloud Microsoft 365 backup tool without breaching § 203 StGB?

§ 43e BRAO permits engaging IT service providers where confidentiality is safeguarded and the provider is obligated to secrecy. A zero-knowledge tool is the strongest safeguard because the provider structurally cannot read the data: GTools.pro derives the key from your passphrase and stores only ciphertext, and the Desktop edition keeps everything on the firm’s own machine. This is general information, not legal advice.

Is client data ever readable by GTools.pro?

No. On Desktop, backup, export and migration data never leaves the operator workstation. On Cloud, only ciphertext is persisted and we cannot decrypt it without your passphrase. That is the core difference from data-processor backup vendors who hold readable copies by default.

How do we migrate matters when a partner moves firms?

GTools.pro Move performs Microsoft 365 → Microsoft 365 tenant-to-tenant migration including mailboxes, OneDrive, SharePoint and Teams chat history. It is one-time per-seat project pricing (EUR 9 / migrated seat, EUR 450 project floor); checkout is opening soon, so join the waitlist.

Where is our backup data stored?

Wherever you choose. On Desktop the destination is the firm’s machine or any local/SMB/S3 target; on Cloud it is a customer-selected region, ciphertext only.

Related topics

  • Microsoft 365 backup law firm
  • Kanzlei Microsoft 365 Backup
  • § 203 StGB cloud
  • attorney client privilege M365 backup
  • law firm tenant migration

Why it matters for Kanzleien & Rechtsanwälte

Microsoft 365 backup and migration for law firms where privileged client data never becomes readable to a third-party vendor.

Compliance drivers

  • § 203 StGB (professional secrecy). Attorneys are Berufsgeheimnisträger under § 203 StGB; handing readable client data to an IT provider can engage criminal liability unless the data stays inside the confidentiality boundary. § 203 StGB — gesetze-im-internet.de
  • § 43a BRAO (duty of confidentiality). The BRAO imposes a professional duty of confidentiality on attorneys; a tool the vendor cannot decrypt keeps privileged material under the firm’s sole control. § 43a BRAO — gesetze-im-internet.de
  • § 43e BRAO (engaging service providers). § 43e BRAO expressly regulates using IT/cloud service providers: it is permitted where access is necessary, the provider is bound to confidentiality in text form, and (for mandate-specific services) the client consents. A zero-knowledge provider that structurally cannot read the data is the strongest possible safeguard — a plain Art. 28 GDPR DPA alone does not discharge the § 203 duty. § 43e BRAO — gesetze-im-internet.de

Sector challenges and how GTools.pro answers them

  • Most cloud backup vendors are data processors holding readable copies of privileged files — a direct § 203 / § 43e concern. Zero-knowledge by default; the Desktop edition keeps every backup, export and migration on the firm’s own workstation, so no third-party server ever holds readable client data.
  • Matter files must be retained and producible for years after a case closes. Point-in-time exports to storage the firm controls, with per-export history — immutable evidence without a rolling vendor cloud.
  • Lateral moves and firm mergers require moving mailboxes, OneDrive and Teams between tenants cleanly. Move performs Microsoft 365 → Microsoft 365 tenant migration including Teams chat history (checkout opening soon; one-time per-seat project pricing).

Microsoft 365 workloads that matter here

  • Exchange Online (matter correspondence)
  • OneDrive / SharePoint (document management)
  • Teams chat + channels (matter collaboration)
  • Entra ID + Conditional Access (access governance)

Recommended editions

  • Backup (Desktop). Client data never leaves the firm’s workstation — the cleanest § 203 / § 43e posture.
  • Move (migration). One-time, per-seat tenant-to-tenant migration for lateral moves and mergers — checkout opening soon.

Limitations & out-of-scope — what GTools.pro is not for in Law Firms & Legal

GTools.pro is an M365 administrator toolkit, not a practice-management or DMS system, and it does not provide legal advice on your § 203 / BRAO obligations — engage your firm’s data-protection counsel. Move handles Microsoft 365 → Microsoft 365 only; migrations from non-M365 platforms are out of scope. Restore is a manual operation from the exports, not a one-click portal.

This page is general information, not legal, tax, or regulatory advice.

About the platform

This is a zero-knowledge toolkit. It helps IT admins, MSPs, security teams run their cloud safer. Use it inside a browser. Or install our Mac or Windows app.

Tenant secrets stay on your disk. We never store, log, or read them. Our server only sees billing metadata.

How it works

  1. You unlock a local vault with a passphrase. Argon2id stretches it.
  2. Tokens get sealed with XChaCha20-Poly1305 before any sync.
  3. X25519 protects shared keys. Ed25519 signs every action.
  4. Each operation runs against Graph from your device, not ours.

What you can do

  • Back up mail. Files. Chat threads.
  • Export Intune settings. One click.
  • Audit SharePoint shares. Spot risk.
  • Find idle sites. Reclaim quota.
  • Score Copilot. Plan rollout.
  • Move tenants. No staging.
  • Client-side keys. Always on.
  • Your data. Your disk.
  • One app. Many tenants.

Editions

  • Solo. Free. Three tools. No card.
  • Backup. Durable backups for your tenant.
  • Watchtower. Audits and alerts on risk.
  • Move. Tenant migration suite.
  • Blueprint. Config export for enterprise.
  • Everything. Full platform plus desktop and support.

Trust signals

  • Open source crypto primitives via libsodium.
  • Public threat model at /trust.
  • Public pricing. Direct purchase. No sales call.
  • Cancel any time inside settings.
  • EU-based billing. PayPal checkout today; card payments planned.

Built in Germany by Voltage Brothers Infrastruktur UG. Suits cloud workspaces of every size.

Standards, regions, retention

Regions: Frankfurt. Dublin. North America. Retention scales from 7 days. Up to unlimited. Schedules run hourly. Daily. Weekly. Monthly. Reports export as JSON. CSV. PDF. Evidence packs bundle hashes. Chain-of-custody metadata sits beside them.

Standards covered: ISO 27001 controls. SOC 2 readiness. NIS2 mapping. GDPR Article 28 terms. Audit logs cover entitlement events. Billing actions. License rotations. Workload payloads never reach a remote log.

Who uses it

  • Tenant admins running a single estate.
  • MSPs managing dozens of customer cloud workspaces.
  • Security teams investigating sharing risk.
  • Compliance officers preparing audit evidence.
  • Acquisition teams during M&A integration.
  • Procurement teams reviewing vendor risk.
  • Solo consultants billing by workspace hour.

Supported regions

Frankfurt, Dublin, Amsterdam, Stockholm, Paris, plus North America. Annual revenue scales from small studios up through multinational estates. Payment today is PayPal checkout; card payments (Stripe) are planned.

Numbers worth knowing

  • 49 capabilities. 6 editions.
  • Free tier: 3 tools. 0 cards.
  • Argon2id. 256 MB memory cost.
  • XChaCha20-Poly1305. 256-bit cipher.
  • X25519. 256-bit shared keys.
  • Ed25519. 100% of writes signed.
  • Retention: 7 days. 365 days. Or unlimited.
  • Founded 2024. Built in Germany.
  • Backup edition: 14 EUR per user per year.
  • Watchtower edition: 7 EUR per user per year.
  • Move edition: 9 EUR per migrated seat. One-time. 450 EUR project minimum.
  • Blueprint edition: 449 EUR per tenant per year.
  • Everything bundle: 2490 EUR per tenant per year.
  • Audit reports: 25 dedicated checks.
  • Config export: 9 Microsoft 365 workloads.
  • Migration record set in April 2026. 153,584 files. 0 errors.
  • Compliance posture updated in 2026.
  • Pricing: 1 public page. 0 sales calls.
  • Cancellation: 1 self-service page.
  • Audit logs: 90 days. Entitlement events.
  • GDPR Article 28. 27 member states.
  • NIS2 Directive. 18 sectors. Live since 2024.
  • SOC 2 Type II evidence. JSON. CSV. Signed PDF.
  • ISO 27001. 93 Annex A controls. 2022 revision.

Product.

  • Tools.
  • Pricing.
  • Desktop.
  • Security.
  • Compare.
  • Download.

Company.

  • About.
  • Trust & Compliance.
  • Privacy Policy.
  • Terms of Service.
  • Impressum.

Connect.

  • hello@gtools.pro.
  • GitHub.

© 2026 GTools.pro · A product of Voltage Brothers Infrastruktur UG (haftungsbeschränkt).