IOLTA compliance (Interest on Lawyers' Trust Accounts) is non-negotiable, and adding remote staff to your billing or paralegal team does not change what your state bar expects. It does change who touches the account, how approvals are logged, and how reconciliation gets documented.
This checklist covers the core compliance obligations under ABA Model Rule 1.15 and common state variations, with specific attention to the controls firms need when trust-account tasks are delegated to remote staff.
The Regulatory Framework Behind IOLTA Compliance
Every state's trust-accounting rules trace back to ABA Model Rule 1.15, which requires client funds to be held separately from firm funds and accounted for completely. States adopt their own version of this rule, so the exact reconciliation cadence, retention period, and reporting format can vary.
Who Enforces IOLTA Compliance
Each state bar's office of disciplinary counsel, not a general regulator, investigates trust account complaints and conducts audits. Most of these offices publish their own IOLTA guidance and reporting forms, which is the first place to check before assuming a national rule applies uniformly.
Annual Certification Is Becoming the Norm
A growing number of states now require attorneys to certify trust account compliance annually as part of bar registration, rather than only during a complaint-triggered audit. Firms that already run the checklist below monthly can usually complete this certification in minutes instead of scrambling to reconstruct a year of records.
What IOLTA Compliance Actually Requires
No Commingling of Client and Firm Funds
Client funds must be held in a separate trust account from the firm's operating funds at all times. This remains the single most common source of bar discipline, remote staff or not.
Monthly Three-Way Reconciliation
Most states require reconciling the trust account bank statement, the client ledger, and the general ledger monthly. Aprio's IOLTA compliance guide notes that firms failing to reconcile on this cadence are the ones most often flagged during bar audits.
Interest Remittance and the IOLTA Program Itself
IOLTA programs pool the interest earned on client funds that are too small in amount or too short in duration to generate meaningful interest for the individual client, and remit that interest to the state bar foundation to fund legal aid and access-to-justice programs. Firms don't choose whether to participate IOLTA enrollment is typically mandatory for any trust account holding mixed client funds.
Larger client funds held for longer periods are usually placed in a separate interest-bearing account for that specific client's benefit instead of the pooled IOLTA account. Getting this distinction wrong, pooling funds that should have been held separately is a less common but still reportable compliance gap.
How IOLTA Works With Your Bank
A trust account only satisfies IOLTA rules if it sits at a bank or credit union the state bar foundation recognizes as an eligible institution. Firms that switch banks, or set up a trust account for the first time, need to confirm this before moving any client funds.
What Makes a Bank IOLTA-Eligible
Eligible institutions agree to pay a comparable interest rate on IOLTA accounts, remit that interest directly to the state bar foundation, and report certain overdrafts to the disciplinary counsel's office. The State Bar of California's IOLTA handbook for financial institutions lays out this structure in detail, and most other states follow a similar model.
Bank-Reported Overdrafts Are a Compliance Trigger
Because participating banks are required to report trust account overdrafts to the bar, a bounced check on an IOLTA account automatically opens an inquiry, even if the shortfall was an honest bookkeeping error. This is one more reason the three-way reconciliation below should happen monthly rather than only when something looks wrong.
The IOLTA Compliance Checklist
Daily and Weekly Tasks
• Record every deposit and disbursement to the correct client ledger the same day
• Flag any transaction that lacks a matching client matter number
• Confirm no checks are written against uncleared funds
Monthly Tasks
• Run the three-way reconciliation (bank, client ledger, general ledger)
• Review for any negative client balances, which indicate a violation regardless of intent
• Confirm earned fees were transferred out of trust promptly, not left sitting in the account
Quarterly and Annual Tasks
• Audit access logs to confirm only authorized staff initiated transactions
• Review state bar reporting requirements, since some states require annual trust account certification
• Reassess the division of duties between attorneys and support staff
Controls for Remote Staff Handling Trust Accounts
Separate Data Entry From Approval
The safest structure has remote staff whether a contract paralegal or billing specialist enter transactions, while a licensed attorney retains sole authority to approve disbursements and sign checks. This single control prevents the majority of remote-staffing-related trust issues.
Use Legal-Specific Billing Software, Not Generic Bookkeeping Tools
General accounting software does not enforce the client-level ledger separation that IOLTA requires. Firms using legal billing services built around trust-accounting rules avoid the manual reconciliation errors that generic tools create.
Documenting the Division of Duties in Writing
A written policy spelling out exactly which tasks remote staff can perform and which require attorney sign-off is one of the strongest defenses a firm can have if a disbursement is ever questioned. Verbal understandings tend to blur over time, especially as staff turn over or a firm adds more remote billing support.
This policy should be reviewed any time the firm changes case management or billing software, since system permissions need to match the written policy exactly a remote paralegal with system-level access to approve disbursements defeats the purpose of the separation-of-duties control, regardless of what the written policy says.
Preparing for a Bar Audit
Many states conduct random or complaint-triggered trust account audits, and the firms that handle these smoothly are the ones who treat their monthly reconciliation process as if an audit could happen at any time, rather than scrambling to reconstruct records after a notice arrives. Keeping reconciliation reports, bank statements, and client ledgers organized and accessible by month, going back at least the required retention period, turns a stressful audit into a routine document request.
State-by-State Variations to Watch For
ABA Model Rule 1.15 sets the baseline, but the details firms actually operate around, reconciliation frequency, overdraft reporting, and certification, are set state by state. A few examples show how much this can vary.
Mandatory Overdraft Reporting
Florida requires banks holding trust accounts to report any overdraft to the bar, regardless of the reason, a rule The Florida Bar has written about directly. Firms assuming a covered overdraft stays private are often surprised to learn otherwise.
Reconciliation Cadence and Recordkeeping Periods
Most states require monthly three-way reconciliation, but the retention period for supporting records ranges from five years to indefinitely, depending on the jurisdiction. A firm operating in multiple states should build its recordkeeping policy around the longest retention period it is subject to, rather than maintaining separate schedules per state.
When in Doubt, Check the State Bar Directly
Because these rules change and vary by state, the safest source is always the specific state bar's trust-account or client-protection page, not a general summary, before finalizing a firm's written policy.
Common IOLTA Mistakes That Go Beyond the Obvious
Commingling gets the most attention, but most bar complaints trace back to smaller process failures that compound over time rather than a single dramatic error.
Letting Earned Fees Sit in Trust
Once a fee is earned, it must be withdrawn from trust promptly. Leaving earned fees in the account, even with good intentions, is technically commingling and is one of the most common findings in routine audits.
Using One Ledger Instead of Per-Client Ledgers
A single running balance for the whole trust account is not sufficient. Every client needs a separate ledger showing their own funds, deposits, and disbursements, so no client's money is ever effectively covering a shortfall in another client's balance.
Treating Remote Access as a Security Afterthought
Firms that add remote billing staff sometimes grant broader system access than the role requires, simply because it is faster to set up. Access that isn't scoped to the specific tasks a remote employee performs is a common gap auditors flag, even when no funds were actually misused.
Frequently Asked Questions About IOLTA compliance checklist
Can a non-attorney legally manage a trust account?
Non-attorney staff, including remote paralegals, can perform data entry and reconciliation, but the supervising attorney remains ultimately responsible for the account and should retain approval authority over disbursements.
How often must trust accounts be reconciled?
Most states require monthly three-way reconciliation between the bank statement, client ledger, and general ledger.
What is the penalty for commingling funds?
Commingling is one of the most serious ethics violations and can result in suspension or disbarment, regardless of whether the attorney intended any harm.
What is IOLTA and why does it matter for law firms?
IOLTA (Interest on Lawyers' Trust Accounts) is the program requiring client funds to be held in separate, interest-bearing trust accounts. It matters because mishandling it is one of the leading causes of bar discipline.
What should an IOLTA compliance checklist include?
At minimum it should cover daily transaction logging, monthly three-way reconciliation, a review for negative client balances, and an annual audit of who has access to initiate transactions.
What are the most common IOLTA violations?
Commingling client and firm funds, failing to reconcile monthly, leaving earned fees in trust too long, and allowing a client ledger to go negative are the most frequently cited violations.
Do remote paralegals need special training for trust accounting?
Yes. Remote paralegals handling trust-account data entry should be trained specifically on client-ledger separation rules, since general bookkeeping experience doesn't cover IOLTA-specific requirements.
Which software helps law firms stay IOLTA compliant?
Legal-specific billing platforms that enforce client-level ledger separation and support three-way reconciliation are better suited to IOLTA compliance than generic accounting software.
Who is ultimately responsible for trust account compliance?
The supervising attorney is ultimately responsible, even when data entry and reconciliation tasks are delegated to paralegals or remote billing staff.
What records must firms keep for trust account audits?
Firms should retain bank statements, client ledgers, general ledgers, and reconciliation reports, typically for the period required by their state bar, often five years or more.
What does ABA Model Rule 1.15 require?
ABA Model Rule 1.15 requires lawyers to hold client and third-party funds separately from the firm's own funds, keep complete records of all trust account transactions, and promptly notify and deliver funds the client is entitled to receive.
Does a law firm's bank need to be IOLTA-eligible?
Yes. The trust account must be held at a bank or credit union the state bar foundation recognizes as an eligible institution, one that pays a comparable interest rate and agrees to report overdrafts to the bar.
Do IOLTA rules vary by state?
Yes. ABA Model Rule 1.15 sets the baseline, but reconciliation frequency, overdraft reporting, certification requirements, and record retention periods are all set individually by each state bar.
What triggers a surprise IOLTA audit?
A client complaint, a bank-reported overdraft, or a random selection by the state bar can all trigger an audit. Firms that reconcile monthly and keep organized records rarely find a surprise audit disruptive.
Delegate Trust Accounting Without Losing Control
Staff That Understands Legal-Specific Compliance
Generic bookkeepers do not understand IOLTA rules. Remote Attorneys places paralegals and billing staff who are trained specifically on trust-accounting workflows.
Build a Compliant Remote Billing Process
Our legal staffing agency can help your firm set up the data-entry and approval structure that keeps your trust account audit-ready.
